{
  "type": "Domain",
  "indicator": "mapdatamsnsdn.info",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/mapdatamsnsdn.info",
    "alexa": "http://www.alexa.com/siteinfo/mapdatamsnsdn.info",
    "indicator": "mapdatamsnsdn.info",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3744445570,
      "indicator": "mapdatamsnsdn.info",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 44,
      "pulses": [
        {
          "id": "64e8688ae20e56da413ac148",
          "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study",
          "description": "Generative AI has been around for nearly a decade, strictly speaking, but the recent boom in this technology has inspired renewed interest in its possible applications to challenges facing the information security community. Finding these challenges entails searching through a very large haystack consisting of brand-new binaries, documents, domains and other artifacts that flood the web every day.",
          "modified": "2023-08-25T08:38:33.465000",
          "created": "2023-08-25T08:38:33.465000",
          "tags": [
            "deepdns",
            "dns tunneling",
            "coinloader",
            "sunburst"
          ],
          "references": [
            "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1572",
              "name": "Protocol Tunneling",
              "display_name": "T1572 - Protocol Tunneling"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 375,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "AlienVault",
            "id": "2",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
            "is_subscribed": true,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 2,
            "domain": 15,
            "hostname": 1
          },
          "indicator_count": 18,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 386497,
          "modified_text": "1009 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "687d5d33d16ab7837e23bc01",
          "name": "howmanyofme.com  - Packed | Palantir",
          "description": "howmanyofme.com was a honeypot. The names listed are potentially monitored targets. One was verified target.||\nhttp://howmanyofme.com/search/?given=Tsara&sur=Brashears/\nhttp://ww2.howmanyofme.com/people/Carrie_Henn/\nhttp://ww2.howmanyofme.com/people/Rockmond_Dunbar/\nhttp://howmanyofme.com/people/John_Hurt/\nhttp://howmanyofme.com/people/Mary_Gross/\nhttp://howmanyofme.com/people/Kenneth_Tobey/\nhttp://ww2.howmanyofme.com/people/Royce_Clayton/\n\n\n#Palantir # #honeypot #howmanyofme",
          "modified": "2025-09-18T23:05:18.490000",
          "created": "2025-07-20T21:18:43.974000",
          "tags": [
            "united",
            "unknown ns",
            "a domains",
            "ip address",
            "search",
            "privacy service",
            "fbo registrant",
            "date",
            "entries",
            "how many",
            "destination",
            "port",
            "windows nt",
            "msie",
            "unknown",
            "et trojan",
            "poodle attack",
            "policy sslv3",
            "united kingdom",
            "suspicious",
            "copy",
            "virustotal",
            "malware",
            "write",
            "hostile",
            "next",
            "triton",
            "super node",
            "get reloaded",
            "x11 snf",
            "png image",
            "rgba",
            "post reloaded",
            "ascii text",
            "crlf line",
            "gnu message",
            "ms windows",
            "intel",
            "pe32",
            "host",
            "get babylon",
            "show",
            "babylon"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1060",
              "name": "Registry Run Keys / Startup Folder",
              "display_name": "T1060 - Registry Run Keys / Startup Folder"
            },
            {
              "id": "T1119",
              "name": "Automated Collection",
              "display_name": "T1119 - Automated Collection"
            },
            {
              "id": "T1047",
              "name": "Windows Management Instrumentation",
              "display_name": "T1047 - Windows Management Instrumentation"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1057",
              "name": "Process Discovery",
              "display_name": "T1057 - Process Discovery"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 7185,
            "domain": 706,
            "hostname": 1906,
            "email": 5,
            "FileHash-SHA256": 3645,
            "FileHash-MD5": 330,
            "FileHash-SHA1": 135,
            "CVE": 1
          },
          "indicator_count": 13913,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 144,
          "modified_text": "254 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "689d5115ad786de4ff048e5b",
          "name": "TEL:ECCert!SSLCO | Mirai Malware Hosting | Multi user Tracker",
          "description": "https://api.mirai.com/MiraiWebService/passbook/180823-77257/4001645 [Malware hosting]\n*TEL:ECCert!SSLCO\nYARA Detections:\nDelphi\nThis program must be run under Win32\ncompilers.\nCode Overlap of Trojan Droppers Backdoors , TrojanSpy\n\n\n#injection_inter_process\n#creates_largekey\n#network_bind\n#ransomware_file_modifications\n#antivm_generic_bios\n#antivm_generic_disk\n#enumerates_physical_drives\n#physical_drive_access\n#deletes_executed_files\n#recon_fingerprint\n#suspicious_command_tools\n#anomalous_deletefile\n#antisandbox_sleep\n#dead_connect\n#dynamic_function_loading\n#http_request\n#ipc_namedpipe\n#network_anomaly\n#powershell_download\n#powershell_request #track #locate #remote_access",
          "modified": "2025-09-13T02:00:42.729000",
          "created": "2025-08-14T02:59:33.036000",
          "tags": [
            "url https",
            "url http",
            "search",
            "type indicator",
            "role title",
            "added active",
            "related pulses",
            "showing",
            "entries",
            "present sep",
            "united",
            "present aug",
            "present jul",
            "present jun",
            "moved",
            "unknown ns",
            "present may",
            "present apr",
            "passive dns",
            "date",
            "encrypt",
            "body",
            "cookie",
            "gmt server",
            "content type",
            "dynamicloader",
            "medium",
            "x17x03x01",
            "download studio",
            "high",
            "read c",
            "show",
            "windows",
            "copy",
            "powershell",
            "write",
            "anomaly",
            "next",
            "unknown",
            "next associated",
            "urls show",
            "date checked",
            "url hostname",
            "server response",
            "ip address",
            "google safe",
            "yara detections",
            "delphi",
            "codeoverlap",
            "win32",
            "rgba",
            "memcommit",
            "delete",
            "png image",
            "hash",
            "dock",
            "execution",
            "malware",
            "wine emulator",
            "dynamic",
            "msie",
            "windows nt",
            "wow64",
            "slcc2",
            "media center",
            "capture",
            "persistence",
            "sha256",
            "submitted",
            "copy md5",
            "copy sha1",
            "copy sha256",
            "sha1",
            "script",
            "mitre att",
            "ck id",
            "show technique",
            "ck matrix",
            "null",
            "august",
            "span",
            "refresh",
            "meta",
            "mirai",
            "february",
            "april",
            "june",
            "hybrid",
            "general",
            "local",
            "path",
            "click",
            "strings",
            "error",
            "tools",
            "caribe",
            "rest",
            "accept",
            "friday",
            "look",
            "verify",
            "restart"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1119",
              "name": "Automated Collection",
              "display_name": "T1119 - Automated Collection"
            },
            {
              "id": "T1053",
              "name": "Scheduled Task/Job",
              "display_name": "T1053 - Scheduled Task/Job"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1129",
              "name": "Shared Modules",
              "display_name": "T1129 - Shared Modules"
            },
            {
              "id": "T1143",
              "name": "Hidden Window",
              "display_name": "T1143 - Hidden Window"
            },
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1112",
              "name": "Modify Registry",
              "display_name": "T1112 - Modify Registry"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1057",
              "name": "Process Discovery",
              "display_name": "T1057 - Process Discovery"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1480",
              "name": "Execution Guardrails",
              "display_name": "T1480 - Execution Guardrails"
            },
            {
              "id": "T1539",
              "name": "Steal Web Session Cookie",
              "display_name": "T1539 - Steal Web Session Cookie"
            },
            {
              "id": "T1553",
              "name": "Subvert Trust Controls",
              "display_name": "T1553 - Subvert Trust Controls"
            },
            {
              "id": "T1583",
              "name": "Acquire Infrastructure",
              "display_name": "T1583 - Acquire Infrastructure"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 24,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 6211,
            "domain": 682,
            "hostname": 1661,
            "FileHash-MD5": 117,
            "FileHash-SHA1": 100,
            "FileHash-SHA256": 1386,
            "SSLCertFingerprint": 5
          },
          "indicator_count": 10162,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 144,
          "modified_text": "260 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6892e73b32af18aa302df0dc",
          "name": "Part 1.5",
          "description": "Dark web media \u2022 Political news \u2022 Malvertizing\nlocate \u2022\ntrack [stalk] \u2022 record calls \u2022 control media [youtube , etc] http://t.name?n[++i]=e:this.removeEventListener\t\t\nJeeng &\nPowebox [ accidentally left out in original post pulse]",
          "modified": "2025-09-05T04:03:06.929000",
          "created": "2025-08-06T05:25:15.369000",
          "tags": [
            "chromeua",
            "optout",
            "object",
            "path",
            "value",
            "access type",
            "setval",
            "windir",
            "localappdata",
            "null",
            "win64",
            "error",
            "generator",
            "close",
            "roboto",
            "date",
            "format",
            "light",
            "span",
            "template",
            "void",
            "android",
            "body",
            "trident",
            "mexico",
            "sonic",
            "black",
            "critical",
            "desktop",
            "dark",
            "meta",
            "this",
            "june",
            "hybrid",
            "apache",
            "write",
            "crypto",
            "autodetect",
            "face",
            "courier",
            "gigi",
            "impact",
            "shadow",
            "click",
            "strings",
            "cray",
            "smwg",
            "eret",
            "footer",
            "infinity",
            "window",
            "canvas",
            "legend",
            "nuke",
            "lion",
            "4629",
            "ahav",
            "olsa",
            "false",
            "learn",
            "command",
            "ck id",
            "name tactics",
            "suspicious",
            "informative",
            "spawns",
            "defense evasion",
            "t1480 execution",
            "file defense",
            "copy md5",
            "copy sha1",
            "copy sha256",
            "sha1",
            "sha256",
            "script",
            "mitre att",
            "pattern match",
            "show technique",
            "iframe",
            "refresh",
            "august",
            "general",
            "local",
            "tools",
            "demo",
            "look",
            "verify",
            "restart",
            "url http",
            "small",
            "pulses url",
            "tellyoun",
            "showing",
            "entries",
            "url https",
            "indicator role",
            "title added",
            "active related",
            "type indicator",
            "role title",
            "added active",
            "related pulses",
            "cc08",
            "f06a6b",
            "sfurl",
            "filehashsha256",
            "types",
            "indicators show",
            "search",
            "pulses",
            "filehashsha1",
            "adversaries",
            "found",
            "webp image",
            "ascii text",
            "riff",
            "size",
            "encrypt",
            "legacy",
            "filehashmd5",
            "united",
            "flag",
            "server",
            "markmonitor",
            "name server",
            "llc name",
            "overview dns",
            "requests domain",
            "country",
            "win32",
            "av detections",
            "ids detections",
            "yara detections",
            "alerts",
            "analysis date",
            "file score",
            "medium risk",
            "yara",
            "detections",
            "malware",
            "copy",
            "show",
            "icmp traffic",
            "packing t1045",
            "t1045",
            "pdb path",
            "pe resource",
            "extraction",
            "data upload",
            "enter sc",
            "type",
            "extra data",
            "please",
            "failed",
            "review",
            "exclude data",
            "included review",
            "ic data",
            "suggeste",
            "stop",
            "type onow",
            "domain",
            "passive dns",
            "urls",
            "files related",
            "pulses none",
            "related tags",
            "none google",
            "safe browsing",
            "sc data",
            "extr amanuav",
            "review included",
            "manualy",
            "sugges excluded",
            "filehash",
            "md5 add",
            "pulse pulses",
            "url add",
            "http",
            "hostname",
            "files domain",
            "pulses otx",
            "virustotal",
            "hsmi192547107",
            "pulses hostname",
            "r dec",
            "customer dec",
            "iski dec",
            "decision dec",
            "va dec",
            "bitcoin",
            "bitcoin dec",
            "petra",
            "torstatus dec",
            "paul dec",
            "sodesc",
            "planet dec",
            "emilia",
            "heroin dec",
            "difference dec",
            "palantir dec",
            "loraxlive dec",
            "chaturbate dec",
            "sandra",
            "free dec",
            "marvel dec",
            "benjis dec",
            "fresh dec",
            "sodesc dec",
            "srdirport",
            "srhostname",
            "link dec",
            "types of",
            "italy",
            "china",
            "australia",
            "france",
            "turkey",
            "discovery",
            "information",
            "ck ids",
            "t1005",
            "local system",
            "t1007",
            "system service",
            "part",
            "track",
            "locate",
            "political",
            "civil society",
            "news",
            "created",
            "hours ago",
            "report spam",
            "t1555",
            "password",
            "t1560",
            "collected data",
            "t1573",
            "channel",
            "t1574",
            "execution flow",
            "scan",
            "iocs",
            "t1497",
            "u0lhmq",
            "mtawmq",
            "t1480",
            "guardrails",
            "t1486",
            "data encrypted",
            "learn more",
            "unsubscribe aug",
            "protocol",
            "t1074",
            "staged",
            "t1083",
            "t1102",
            "web service",
            "t1105",
            "tool transfer",
            "t1140",
            "data engineer",
            "candidate",
            "tlsv1",
            "odigicert inc",
            "stcalifornia",
            "lsan jose",
            "oadobe systems",
            "incorporated",
            "cndigicert sha2",
            "push",
            "next",
            "high",
            "write c",
            "ireland as16509",
            "delete",
            "dirty",
            "tags",
            "t1012",
            "flow endpoint",
            "security scan",
            "t1106",
            "copyright",
            "levelblue"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1005",
              "name": "Data from Local System",
              "display_name": "T1005 - Data from Local System"
            },
            {
              "id": "T1007",
              "name": "System Service Discovery",
              "display_name": "T1007 - System Service Discovery"
            },
            {
              "id": "T1012",
              "name": "Query Registry",
              "display_name": "T1012 - Query Registry"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1033",
              "name": "System Owner/User Discovery",
              "display_name": "T1033 - System Owner/User Discovery"
            },
            {
              "id": "T1036",
              "name": "Masquerading",
              "display_name": "T1036 - Masquerading"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1057",
              "name": "Process Discovery",
              "display_name": "T1057 - Process Discovery"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1074",
              "name": "Data Staged",
              "display_name": "T1074 - Data Staged"
            },
            {
              "id": "T1083",
              "name": "File and Directory Discovery",
              "display_name": "T1083 - File and Directory Discovery"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1112",
              "name": "Modify Registry",
              "display_name": "T1112 - Modify Registry"
            },
            {
              "id": "T1120",
              "name": "Peripheral Device Discovery",
              "display_name": "T1120 - Peripheral Device Discovery"
            },
            {
              "id": "T1129",
              "name": "Shared Modules",
              "display_name": "T1129 - Shared Modules"
            },
            {
              "id": "T1132",
              "name": "Data Encoding",
              "display_name": "T1132 - Data Encoding"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1480",
              "name": "Execution Guardrails",
              "display_name": "T1480 - Execution Guardrails"
            },
            {
              "id": "T1486",
              "name": "Data Encrypted for Impact",
              "display_name": "T1486 - Data Encrypted for Impact"
            },
            {
              "id": "T1497",
              "name": "Virtualization/Sandbox Evasion",
              "display_name": "T1497 - Virtualization/Sandbox Evasion"
            },
            {
              "id": "T1555",
              "name": "Credentials from Password Stores",
              "display_name": "T1555 - Credentials from Password Stores"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1573",
              "name": "Encrypted Channel",
              "display_name": "T1573 - Encrypted Channel"
            },
            {
              "id": "T1574",
              "name": "Hijack Execution Flow",
              "display_name": "T1574 - Hijack Execution Flow"
            },
            {
              "id": "T1553",
              "name": "Subvert Trust Controls",
              "display_name": "T1553 - Subvert Trust Controls"
            },
            {
              "id": "T1562",
              "name": "Impair Defenses",
              "display_name": "T1562 - Impair Defenses"
            },
            {
              "id": "T1568",
              "name": "Dynamic Resolution",
              "display_name": "T1568 - Dynamic Resolution"
            },
            {
              "id": "T1583",
              "name": "Acquire Infrastructure",
              "display_name": "T1583 - Acquire Infrastructure"
            },
            {
              "id": "T1045",
              "name": "Software Packing",
              "display_name": "T1045 - Software Packing"
            },
            {
              "id": "T1018",
              "name": "Remote System Discovery",
              "display_name": "T1018 - Remote System Discovery"
            },
            {
              "id": "T1041",
              "name": "Exfiltration Over C2 Channel",
              "display_name": "T1041 - Exfiltration Over C2 Channel"
            },
            {
              "id": "T1114",
              "name": "Email Collection",
              "display_name": "T1114 - Email Collection"
            },
            {
              "id": "T1063",
              "name": "Security Software Discovery",
              "display_name": "T1063 - Security Software Discovery"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 18,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 608,
            "FileHash-SHA1": 433,
            "FileHash-SHA256": 3663,
            "URL": 17104,
            "domain": 1316,
            "email": 39,
            "hostname": 4208,
            "SSLCertFingerprint": 17
          },
          "indicator_count": 27388,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 143,
          "modified_text": "268 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6892a73593f73dfc969779b0",
          "name": "Part I | Track | Locate | Political & Civil society \u2018news\u2019 campaigns",
          "description": "Part I | Track | Locate | Political & Civil society \u2018news\u2019 campaigns\n*[ddddd.msg]\n[http://tracking.eu1.glintinc.com]\n[stormer5v52vjsw66jmds7ndeecudq444woadhzr2plxlaayexnh6eqd]\n[stackstorm.ops.dev.az.glintinc.com]\n\u2022 http://stormer5v52vjsw66jmds7ndeecudq444woadhzr2plxlaayexnh6eqd.onion/peter-thiel-running-database-to-root-out-those-disloyal-to-the-leader/\\n \u2022\n[http://pixelrz.com/lists/keywords/tsara-brashears-assaulted-at-concentra/360]\n[http://pixelrz.com/lists/keywords/tsara-brashears-dead/360]",
          "modified": "2025-09-05T00:03:23.223000",
          "created": "2025-08-06T00:52:05.051000",
          "tags": [
            "url http",
            "small",
            "indicator role",
            "title added",
            "active related",
            "pulses hostname",
            "tellyoun",
            "n aug",
            "entries",
            "data upload",
            "extraction",
            "windows error",
            "june",
            "fwd urgent",
            "justice czech",
            "copy sha256",
            "rejectedfailed",
            "timestamp input",
            "message status",
            "actions august",
            "file",
            "actions june",
            "actions may",
            "cta4 https",
            "context related",
            "associated urls",
            "campaigncodedsc",
            "language",
            "uid http",
            "community",
            "sha256",
            "size42b type",
            "submitted",
            "august",
            "april",
            "internal error",
            "previous1",
            "iframe",
            "community score",
            "scan analysis",
            "malicious",
            "intelligence",
            "learn",
            "falcon sandbox",
            "submissions",
            "status",
            "adversaries",
            "ck id",
            "name tactics",
            "suspicious",
            "informative",
            "defense evasion",
            "windows folder",
            "found",
            "dlls",
            "impact",
            "chromeua",
            "optout",
            "object",
            "path",
            "value",
            "access type",
            "setval",
            "windir",
            "localappdata",
            "null",
            "win64",
            "error",
            "generator",
            "close",
            "roboto",
            "date",
            "format",
            "light",
            "span",
            "template",
            "void",
            "android",
            "body",
            "trident",
            "mexico",
            "sonic",
            "black",
            "critical",
            "desktop",
            "dark",
            "meta",
            "this",
            "hybrid",
            "apache",
            "write",
            "crypto",
            "autodetect",
            "face",
            "courier",
            "gigi",
            "shadow",
            "click",
            "strings",
            "cray",
            "smwg",
            "eret",
            "footer",
            "infinity",
            "window",
            "canvas",
            "legend",
            "nuke",
            "lion",
            "4629",
            "ahav",
            "olsa",
            "false"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1005",
              "name": "Data from Local System",
              "display_name": "T1005 - Data from Local System"
            },
            {
              "id": "T1007",
              "name": "System Service Discovery",
              "display_name": "T1007 - System Service Discovery"
            },
            {
              "id": "T1012",
              "name": "Query Registry",
              "display_name": "T1012 - Query Registry"
            },
            {
              "id": "T1018",
              "name": "Remote System Discovery",
              "display_name": "T1018 - Remote System Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1033",
              "name": "System Owner/User Discovery",
              "display_name": "T1033 - System Owner/User Discovery"
            },
            {
              "id": "T1036",
              "name": "Masquerading",
              "display_name": "T1036 - Masquerading"
            },
            {
              "id": "T1041",
              "name": "Exfiltration Over C2 Channel",
              "display_name": "T1041 - Exfiltration Over C2 Channel"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1057",
              "name": "Process Discovery",
              "display_name": "T1057 - Process Discovery"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1074",
              "name": "Data Staged",
              "display_name": "T1074 - Data Staged"
            },
            {
              "id": "T1083",
              "name": "File and Directory Discovery",
              "display_name": "T1083 - File and Directory Discovery"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1112",
              "name": "Modify Registry",
              "display_name": "T1112 - Modify Registry"
            },
            {
              "id": "T1114",
              "name": "Email Collection",
              "display_name": "T1114 - Email Collection"
            },
            {
              "id": "T1120",
              "name": "Peripheral Device Discovery",
              "display_name": "T1120 - Peripheral Device Discovery"
            },
            {
              "id": "T1129",
              "name": "Shared Modules",
              "display_name": "T1129 - Shared Modules"
            },
            {
              "id": "T1132",
              "name": "Data Encoding",
              "display_name": "T1132 - Data Encoding"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1480",
              "name": "Execution Guardrails",
              "display_name": "T1480 - Execution Guardrails"
            },
            {
              "id": "T1486",
              "name": "Data Encrypted for Impact",
              "display_name": "T1486 - Data Encrypted for Impact"
            },
            {
              "id": "T1497",
              "name": "Virtualization/Sandbox Evasion",
              "display_name": "T1497 - Virtualization/Sandbox Evasion"
            },
            {
              "id": "T1555",
              "name": "Credentials from Password Stores",
              "display_name": "T1555 - Credentials from Password Stores"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1573",
              "name": "Encrypted Channel",
              "display_name": "T1573 - Encrypted Channel"
            },
            {
              "id": "T1574",
              "name": "Hijack Execution Flow",
              "display_name": "T1574 - Hijack Execution Flow"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 9062,
            "domain": 707,
            "hostname": 2318,
            "FileHash-MD5": 86,
            "FileHash-SHA1": 26,
            "FileHash-SHA256": 2096,
            "email": 5,
            "FilePath": 2,
            "URI": 1
          },
          "indicator_count": 14303,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 143,
          "modified_text": "268 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "67a801c7a6074eb73a688c51",
          "name": "#OpsBedil Targeted Attack: Malicious Windows Spyware VIM on OS",
          "description": "The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines; including: \nT1027 - Obfuscated Files or Information\nT1030 - Data Transfer Size Limits\nT1036 - Masquerading\nT1056 - Input Capture\nT1059 - Command and Scripting Interpreter\nT1070 - Indicator Removal on Host\nT1105 - Ingress Tool Transfer\nT1106 - Native API\nT1119 - Automated Collection\nT1134 - Access Token Manipulation\nT1140 - Deobfuscate/Decode Files or Information\nT1176 - Browser Extensions\nT1547 - Boot or Logon Autostart Execution",
          "modified": "2025-03-11T00:00:59.533000",
          "created": "2025-02-09T01:15:51.632000",
          "tags": [
            "code",
            "range",
            "file offset",
            "ecxedi20xa",
            "edi0x6d",
            "ebp20x20",
            "esi0x67",
            "edx0x6f",
            "esi0x61",
            "ebp20x62",
            "hopper",
            "cve20072438",
            "normally",
            "use vim",
            "checkfile",
            "vimruntime",
            "checkdir",
            "vim project",
            "https",
            "bram moolenaar",
            "bram",
            "files",
            "silent",
            "insert mode",
            "down",
            "pumvisible",
            "vim script",
            "evim",
            "maintainer",
            "spellpopupmenu",
            "aunmenu",
            "tlunmenu",
            "loadbuffermenu",
            "revert",
            "difforig",
            "show",
            "ctrlu",
            "diffthis",
            "bail",
            "win32",
            "vim support",
            "remove",
            "comment",
            "genericname",
            "name",
            "keywords",
            "gvim",
            "edit",
            "zhcn",
            "editor",
            "metin",
            "rediger",
            "loadftplugin",
            "filetype",
            "expand",
            "amatch",
            "make",
            "sinsert",
            "middlemouse",
            "unix",
            "amiga",
            "mswindows",
            "loadindent",
            "end def",
            "visual mode",
            "shiftdel",
            "copy",
            "vim default",
            "selectmode",
            "insert",
            "load",
            "detectfiletype",
            "addoption",
            "optiong",
            "binoptiong",
            "optionl",
            "binoptionl",
            "header",
            "space",
            "python",
            "find",
            "open",
            "mark",
            "shell",
            "ruby",
            "install",
            "vim desktop",
            "substitute",
            "vunmenu",
            "paste",
            "script",
            "selectall",
            "word",
            "popup",
            "menu",
            "line",
            "close",
            "window",
            "back",
            "toolbar",
            "compiler",
            "next",
            "hack",
            "vimvimrc",
            "haiku",
            "openvms",
            "setsyn",
            "lang",
            "syntax menu",
            "description",
            "define",
            "setsyn function",
            "assembly",
            "maya",
            "bufnewfile",
            "bufread",
            "starsetf",
            "setf",
            "language",
            "visual basic",
            "xml au",
            "latex",
            "setfiletypesh",
            "endif",
            "lilo",
            "apache",
            "postscript",
            "rexx",
            "atom",
            "meta",
            "clipper",
            "desktop",
            "gift",
            "hercules",
            "julia",
            "mercurial",
            "pacman",
            "trigger",
            "puppet",
            "path",
            "powershell",
            "info",
            "ziggy",
            "speedup",
            "systemd",
            "form",
            "format",
            "calendar",
            "dracula",
            "config",
            "sfile",
            "esc",
            "iconv",
            "psflags",
            "if defined",
            "newitem force",
            "itemtype file",
            "iso88591 t",
            "utf8",
            "utf8 t",
            "iconvpath",
            "t iso88591",
            "makefile",
            "converted",
            "bob ware",
            "colorado school",
            "mines",
            "vim editor",
            "on your",
            "original copy",
            "please",
            "golden",
            "translation",
            "lesson",
            "enter",
            "type",
            "filename",
            "press",
            "normal mode",
            "repeat",
            "summary",
            "notice",
            "ruler",
            "test",
            "letzn",
            "mrkl",
            "zeil",
            "strg",
            "bewg nn",
            "end von",
            "druck",
            "dautticht",
            "zipf",
            "zaichen",
            "netty",
            "moveu el",
            "entrar",
            "premeu",
            "fitxer",
            "normal",
            "prova",
            "repetiu",
            "sumari",
            "desprs",
            "ara premeu",
            "cont",
            "ctrl",
            "ctrld",
            "append",
            "ctrlr",
            "ctrli",
            "shift",
            "backspace",
            "lekce",
            "napi",
            "dek oznaen",
            "normlnm mdu",
            "pesu",
            "stla",
            "soubor",
            "pesu kurzor",
            "opakuj",
            "toto",
            "lektion",
            "flyt",
            "skriv",
            "tryk p",
            "gentag",
            "bemrk",
            "filnavn",
            "nr der",
            "tryk",
            "zeile",
            "bewege den",
            "tippe",
            "zeichen",
            "cursor zu",
            "cursor zum",
            "kommandos",
            "cursor",
            "null",
            "tutor",
            "ctrlg",
            "shiftg",
            "shiftn",
            "msdos",
            "vimtutor",
            "capslock",
            "michael",
            "movu la",
            "leciono",
            "enenklavo",
            "kursoron al",
            "tajpu",
            "kursoron e",
            "testo",
            "premu",
            "dosiernomo",
            "resumo",
            "nova",
            "anon",
            "leccin",
            "mueva el",
            "intro",
            "pulse",
            "escriba",
            "para",
            "ahora",
            "insertar",
            "esto",
            "repita",
            "antes",
            "tenga",
            "como",
            "este",
            "leon",
            "tapez",
            "dplacez",
            "entre",
            "chap",
            "insertion",
            "puis tapez",
            "rptez",
            "appuyez",
            "lekcija",
            "otipkajte",
            "pritisnite",
            "ponovite",
            "kako bi",
            "insert mod",
            "prijeite",
            "saetak",
            "imedatoteke",
            "note",
            "windows",
            "yank",
            "mozgassuk",
            "fjlnv",
            "parancs",
            "lecke",
            "teszt",
            "j sort",
            "nyomja meg",
            "norml mdban",
            "ismtelje",
            "muovi il",
            "batti",
            "lezione",
            "invio",
            "premi",
            "ripeti i",
            "nomefile",
            "modalit normale",
            "adesso batti",
            "nota",
            "alla",
            "stata",
            "replace",
            "change",
            "subtitute",
            "school",
            "emiau",
            "spustelkite",
            "testas",
            "pirmj",
            "failovardas",
            "fail",
            "normalij",
            "santrauka",
            "ymeklis",
            "raid",
            "ramen",
            "tagad",
            "ievadiet",
            "piemram",
            "apkopojums",
            "lai izdzstu",
            "lai ievietotu",
            "ievadot",
            "ievrojiet",
            "js varat",
            "macos",
            "leksjon",
            "flytt",
            "trykk",
            "slette",
            "repeter",
            "erstatte",
            "sette",
            "kommandoen",
            "sett",
            "tips",
            "vise",
            "druk",
            "het commando",
            "herhaal de",
            "als je",
            "deze",
            "de cursor",
            "gebruik",
            "voeg",
            "bestandsnaam",
            "zorg",
            "mova",
            "digite",
            "teste",
            "agora",
            "pressione",
            "insero",
            "mais",
            "lekcja",
            "przenie kursor",
            "wcinij",
            "vima",
            "wpisz",
            "teraz",
            "powtarzaj",
            "nazwapliku",
            "uwaga",
            "jest",
            "dmesine",
            "ders",
            "ilk satra",
            "bu satrda",
            "normal kipe",
            "normal kipte",
            "daha fazla",
            "pomerite kursor",
            "otkucajte",
            "preite",
            "imefajla",
            "rezime lekcije",
            "za zamenu",
            "flytta",
            "filnamn",
            "normallge",
            "tryck",
            "om du",
            "sammanfattning",
            "genom",
            "lekcia",
            "presu kurzor",
            "presu",
            "napsanie",
            "zopakuj",
            "poznmka",
            "lcmessages",
            "lcall",
            "slovak tutor",
            "vim tutor",
            "amatria",
            "thevimproject",
            "slovak",
            "czech",
            "number",
            "motion",
            "ignore",
            "hjkl",
            "by gi",
            "di chuyn",
            "cu lnh",
            "u tin",
            "thay",
            "tntptin",
            "nu bn",
            "tng kt",
            "vim c",
            "lodi",
            "caps",
            "lock",
            "abc de",
            "command",
            "krishna",
            "spellerrors",
            "display dpy",
            "none",
            "false",
            "xfree",
            "sendinit",
            "isserialname",
            "staticspace",
            "xsync",
            "sendtovim",
            "main",
            "k command",
            "shell script",
            "vt100",
            "term vt100w",
            "dec locator",
            "vsnet",
            "tools",
            "external tools",
            "title",
            "arguments",
            "curline",
            "itempath",
            "init dir",
            "empty",
            "fbshtagsfp",
            "create",
            "options",
            "tags",
            "bourne shell",
            "perl",
            "fbkshfp korn",
            "tcl shell",
            "tk windowing",
            "parse",
            "new buffer",
            "buildcasetable",
            "printf",
            "buildwidthtable",
            "keys",
            "parsefoldprops",
            "parsewidthprops",
            "variabletags",
            "argv",
            "stephen riehm",
            "david woodfall",
            "getopt",
            "v include",
            "print version",
            "suppress",
            "reason",
            "file",
            "severity",
            "o ccfilter",
            "following",
            "this first",
            "ccfilter",
            "quickfix format",
            "though",
            "start",
            "john lange",
            "primitivem",
            "errorformat",
            "perl script",
            "executecore",
            "aerts",
            "sw developer",
            "sony telecom",
            "europe",
            "b1130 brussels",
            "belgium",
            "port",
            "host",
            "server",
            "vim channel",
            "chopen",
            "localhost8765",
            "json message",
            "linelength",
            "compilernames",
            "irix",
            "solaris",
            "hpux",
            "pablo ariel",
            "c compiler",
            "compilerqty",
            "usage",
            "project",
            "collector",
            "written",
            "ives aerts",
            "notes",
            "r decrement",
            "v verbose",
            "outputs",
            "o treat",
            "program",
            "q errorfile",
            "stdout",
            "copyright",
            "joerg ziefle",
            "perl w",
            "first",
            "maketag",
            "version",
            "exuberant ctags",
            "statement",
            "loop",
            "michael schaap",
            "support",
            "packagename",
            "look",
            "february",
            "push",
            "sgi mipspro",
            "error int",
            "error",
            "doit",
            "vim9 function",
            "nr2char",
            "c program",
            "vim quickfix",
            "awk script",
            "dec terminal",
            "make vim",
            "errors",
            "begin",
            "kirchgatterer",
            "opcodes syn",
            "addresses",
            "numbers",
            "types syn",
            "blocks syn",
            "strings syn",
            "program counter",
            "hilo byte",
            "quit",
            "todo todo",
            "aappythonscript",
            "python line",
            "python block",
            "blockline",
            "abap",
            "statement hi",
            "string hi",
            "structure",
            "vim abap",
            "abapr4",
            "marius piedallu",
            "james allwright",
            "april",
            "klmpqwvw",
            "comment hi",
            "type hi",
            "identifier hi",
            "constant let",
            "abel",
            "john cook",
            "johncook3",
            "a bunch",
            "todo xxx",
            "fixme",
            "c style",
            "abaqus",
            "carl osterwisch",
            "costerwi",
            "remark",
            "abaqus comment",
            "abaqus keyword",
            "include hi",
            "todo hi",
            "acedb model",
            "stewart morris",
            "thu apr",
            "syntax file",
            "acedb software",
            "xref syn",
            "rest",
            "preproc hi",
            "delimiter hi",
            "nikolai weibull",
            "include",
            "useroption",
            "options medium",
            "defaultprinter",
            "outputfirstline",
            "filecommand",
            "todo fixme",
            "martin krischik",
            "kind",
            "keyword",
            "mk bram",
            "standard",
            "character",
            "stype",
            "date",
            "vim syn",
            "altera ahdl",
            "x syn",
            "todo",
            "xnor syn",
            "specialchar hi",
            "builtin",
            "define hi",
            "builtin rect",
            "operator hi",
            "special hi",
            "dbus",
            "g3drop",
            "builtin dump",
            "builtin number",
            "builtin call",
            "redir",
            "stream",
            "screen",
            "function hi",
            "aflex",
            "lex syntax",
            "mathieu clabaut",
            "lastchange",
            "ada syntax",
            "aflex stuff",
            "patterns",
            "dominique pelle",
            "storageclass hi",
            "keyword let",
            "endlet",
            "htmlformat",
            "htmlcolor",
            "span",
            "htmlformatn",
            "foldcolumnbuild",
            "css1",
            "foldedid",
            "html",
            "generator",
            "fixme todo",
            "xxx note",
            "spell",
            "amigados",
            "campbell",
            "former url",
            "syntaxamiga",
            "krief david",
            "display drop",
            "beta cauchy",
            "irand224 syn",
            "normal poisson",
            "antlr4",
            "another tool",
            "yinzuo jiang",
            "jiangyinzuo",
            "july",
            "option value",
            "ben rubson",
            "hammers",
            "changelog",
            "option value1",
            "option",
            "value1",
            "david necas",
            "yeti",
            "base",
            "xxx not",
            "core",
            "antlr",
            "javacc parser",
            "azaz09",
            "parserend",
            "parserbegin",
            "token skip",
            "antsyntaxscript",
            "doug kearns",
            "zellner",
            "xmlcdatastart",
            "xmlcdataend",
            "xmltag",
            "xmlendtag",
            "ayer",
            "atch",
            "orkspace",
            "ngle",
            "rity",
            "mbol",
            "ffset",
            "istory",
            "osition",
            "xport",
            "stack",
            "tack",
            "digi",
            "flip",
            "shade",
            "cluster",
            "keyb",
            "arch",
            "moran",
            "ecode",
            "gnu arch",
            "source",
            "keyword hi",
            "simulate",
            "aptitude",
            "state",
            "yann amar",
            "quidame",
            "aptconf",
            "incomplete",
            "ebug",
            "autodetect",
            "fast",
            "marker",
            "score",
            "arduino",
            "hoff",
            "october",
            "license",
            "vim license",
            "arduino ide",
            "erik nomitch",
            "adam obeng",
            "artenterprise",
            "dorai sitaram",
            "ds26",
            "thilo six",
            "number hi",
            "edfghprs",
            "gnu assembler",
            "erik wognsen",
            "kdahlhaus",
            "kevin",
            "label hi",
            "macro hi",
            "title hi",
            "deprecated",
            "skip",
            "none hi",
            "claudio fleiner",
            "claudio",
            "end imports",
            "exports from",
            "implicitstags",
            "explicitstags",
            "absent present",
            "size universal",
            "strings",
            "aspperlscript",
            "perlscript",
            "aaron hope",
            "constant hi",
            "bwlsdxp",
            "macro",
            "specialchar",
            "error hi",
            "aspvbserror",
            "aspvbsfunction",
            "aspvbsmethods",
            "aspvbsstatement",
            "aspvbsnumber",
            "aspvbscript",
            "aspvbscomment",
            "aspvbs",
            "exits",
            "floating point",
            "asterisk",
            "tilghman lesher",
            "corydon76",
            "zonemessages",
            "atlas",
            "inaki saez",
            "jisaez",
            "flags bef",
            "orange syn",
            "containsasytodo",
            "asymptote",
            "avid seeker",
            "c syntax",
            "autodoc",
            "berg",
            "xml dl",
            "display",
            "contains",
            "borz",
            "kdpds",
            "oneline",
            "hotstring",
            "comspec",
            "hotkey",
            "reload",
            "common",
            "autoit",
            "soundplay",
            "autoit v3",
            "jared breland",
            "ping",
            "shutdown",
            "vim maintainers",
            "john williams",
            "action",
            "makefile syntax",
            "avenue",
            "arcview",
            "wagner",
            "esri",
            "string",
            "integer number",
            "operator syn",
            "xor mod",
            "hitachi h8300h",
            "xorc syn",
            "identifier let",
            "avr assembler",
            "avra",
            "avra home",
            "avra version",
            "marius ghita",
            "mhitza",
            "gawk ref",
            "functions syn",
            "awk ref",
            "effective awk",
            "programming",
            "keeps",
            "astro",
            "style",
            "fold",
            "enable",
            "astrojavascript",
            "htmlpreproc",
            "wuelner martnez",
            "html tag",
            "azaz",
            "ayaccuniongroup",
            "ayacc",
            "clusters",
            "aunis",
            "bash",
            "a formal",
            "method",
            "contributor",
            "csaba hoch",
            "undef",
            "defaultchar",
            "startstartfont",
            "bdfboundingbox",
            "containsbdftodo",
            "bibtex",
            "bernd feige",
            "ignore case",
            "xdata customa",
            "xref",
            "ams mref",
            "data",
            "basic",
            "quickbasic",
            "trim",
            "metacommands",
            "kill",
            "zonenumber",
            "bind zone",
            "mehnle",
            "slava gorbanev",
            "generates syn",
            "bcall",
            "vlado",
            "keywords syn",
            "string syn",
            "comment syn",
            "parent",
            "sulejman",
            "blank",
            "xspo",
            "bitbake",
            "chris larson",
            "kergoth",
            "daniel kho",
            "bsdl",
            "vhdl syntax",
            "tim pope",
            "vimnospam",
            "highlight",
            "imperfect",
            "bstnumber",
            "entry function",
            "integers macro",
            "bazel",
            "david barnett",
            "label",
            "digit",
            "john leo",
            "spetz",
            "boolean",
            "statuses",
            "bazaar",
            "dmitry vasiliev",
            "dima",
            "diff",
            "nospell",
            "synchronization",
            "baanerror",
            "selecteos",
            "updateerror",
            "d rows",
            "default",
            "selectempty",
            "selecterror",
            "updateempty",
            "union",
            "hooks",
            "normal hi",
            "case",
            "haskell cabal",
            "build file",
            "profunctor",
            "benchmark",
            "import",
            "cabalconfigpath",
            "cabal config",
            "original author",
            "cabalconfigkey",
            "false ghc",
            "cabal project",
            "true false",
            "cabalprojectnat",
            "boolean hi",
            "cparengroup",
            "cstringgroup",
            "ccommentgroup",
            "clabelgroup",
            "iso c99",
            "elifs",
            "ifndef",
            "ccppoutingroup",
            "optional",
            "accept",
            "public dtddecl",
            "entity catalog",
            "errormsg hi",
            "cdlcommentgroup",
            "raul segura",
            "acevedo",
            "xcheck",
            "childsname",
            "parentsname",
            "grpsdescription",
            "fixme xxx",
            "fullburn",
            "readdriver",
            "writedevice",
            "readdevice",
            "cfgcomment",
            "uncpath",
            "cfgstring",
            "cfgsection",
            "prischepoff",
            "on off",
            "yes no",
            "dos drive",
            "zhenyu",
            "documentation",
            "and fold",
            "operator",
            "punctuation",
            "transparent",
            "region and",
            "cfmlcorekeyword",
            "linden",
            "coldfusion",
            "skipwhite",
            "nextgroup",
            "cdrtoctrack",
            "cdtext",
            "performer",
            "silence",
            "zero",
            "softintegration",
            "cc interpreter",
            "declspec",
            "exception hi",
            "structure let",
            "built",
            "chaiscript",
            "jason turner",
            "lefticus",
            "escape",
            "web changes",
            "andreas scherer",
            "details",
            "cweb",
            "knuth",
            "silvio levy",
            "webcweb",
            "november",
            "haskell",
            "armin sander",
            "changelog file",
            "menesis",
            "vinschen",
            "june",
            "chatito",
            "observeroftime",
            "import syn",
            "intent syn",
            "slot syn",
            "cheetah",
            "max ischenko",
            "matches",
            "precondit hi",
            "evan hanson",
            "scheme",
            "chicken",
            "repository",
            "scheme syntax",
            "lighten",
            "heredocs",
            "cc syntax",
            "hse1",
            "chorus",
            "startofverse",
            "startofbridge",
            "startoftab",
            "startofabc",
            "startofly",
            "chordfont",
            "chill",
            "repeat hi",
            "avoid",
            "youngsang yoon",
            "image",
            "ccitt high",
            "this",
            "ember",
            "sifs0",
            "sinclude",
            "calendarinclude",
            "andrea callea",
            "chuck",
            "object event",
            "ugen array",
            "pieter van",
            "engelen",
            "arthur van",
            "leeuwen",
            "start syn",
            "int real",
            "char bool",
            "zamana",
            "flagship",
            "mario eusebio",
            "accept append",
            "blank from",
            "highlight value",
            "cmake",
            "comments",
            "match key",
            "cmakecachekey",
            "advanced",
            "highlight str",
            "stringstr",
            "nickspoons",
            "internal",
            "clever language",
            "clever",
            "multibase",
            "philip uren",
            "philuspax",
            "cmod",
            "cmodautodoc",
            "supports",
            "init init",
            "exit gcrecurse",
            "browser",
            "cocor",
            "shukla",
            "any characters",
            "context end",
            "from if",
            "nested pragmas",
            "to tokens",
            "cword",
            "fnameescape",
            "supplement",
            "must",
            "dgacfbe",
            "clojuretop",
            "arraychunk",
            "vecnode",
            "vecseq",
            "x00x7f",
            "partstart",
            "gondi",
            "inst",
            "etcdisktab",
            "acmsg",
            "acmsgtype",
            "hammesr",
            "yngve inntjore",
            "levinsen",
            "khym chanur",
            "james mccoy",
            "well",
            "anything",
            "conary recipe",
            "addallflags syn",
            "run automake",
            "makeinstall syn",
            "install copy",
            "move symlink",
            "link remove",
            "doc syn",
            "crm114",
            "modemsg hi",
            "imported",
            "target",
            "true",
            "interface",
            "quiet",
            "private",
            "write",
            "multi",
            "never",
            "unknown",
            "fatalerror",
            "sensitive",
            "android",
            "download",
            "guard",
            "exact",
            "locale",
            "trace",
            "alphabet",
            "john hoelzel",
            "hours days",
            "commands",
            "llll",
            "hminsmsusnsi",
            "ffll",
            "ken shan",
            "ccshan",
            "context",
            "synname",
            "startstartz",
            "endstopz1",
            "mptop",
            "luatop",
            "csccommentgroup",
            "if else",
            "endif elseif",
            "lev sy",
            "iallancestors",
            "curgen sy",
            "warningmsg hi",
            "essbase",
            "prior",
            "descendants",
            "cshell",
            "syntaxcsh",
            "variables",
            "luul",
            "csall",
            "srecord",
            "az09",
            "processes",
            "amsettimer",
            "sdlmatch",
            "default hi",
            "fdr input",
            "maxim kim",
            "habamax",
            "functions",
            "predefined term",
            "end predefined",
            "term variables",
            "century term",
            "csdl",
            "jacek artymiak",
            "c22032019",
            "call",
            "replacing",
            "comp",
            "recognize",
            "ascii",
            "existing syntax",
            "ctrlhbold",
            "ctrlh",
            "module level",
            "prop",
            "media",
            "cuda",
            "nvidia compute",
            "unified device",
            "architecture",
            "terriberry",
            "device global",
            "host managed",
            "shared syn",
            "restrict",
            "cupl simulation",
            "cupl syntax",
            "matt dunford",
            "sat nov",
            "statement let",
            "tex syntax",
            "cweb source",
            "cc material",
            "webincludedc",
            "double",
            "rc file",
            "dada",
            "dadas",
            "etant",
            "scen",
            "regel",
            "pero",
            "esquema",
            "tapi",
            "kada",
            "dados",
            "maka",
            "fono",
            "cupl",
            "valid integer",
            "signal",
            "phil derrick",
            "phild",
            "cynpp",
            "cynlib",
            "cynlib syntax",
            "posedge negedge",
            "changed syn",
            "instantiate",
            "out inst",
            "url http",
            "default cynscon",
            "standard syntax",
            "include debian",
            "match uri",
            "addremove",
            "byhash",
            "christopher",
            "dcod trts",
            "tnxt crlf",
            "labl syn",
            "cequ cneq",
            "cgte clte",
            "cbit clse",
            "dcomment",
            "jason",
            "pragma",
            "4857",
            "digital command",
            "sword",
            "mine",
            "conditional hi",
            "dart",
            "eugene pr3d4t0r",
            "ciurana",
            "former",
            "gerfried fuchs",
            "alpha",
            "rust",
            "datascript",
            "dscommentgroup",
            "comment let",
            "debcopyright",
            "orig author",
            "rob brady",
            "robb",
            "wu yongwei",
            "library stub",
            "code windows",
            "dos syn",
            "exports imports",
            "dep3 patch",
            "gabriel filion",
            "gabster",
            "specification",
            "authorfrom",
            "adminemail",
            "lockfile",
            "matthijs",
            "match",
            "ttext",
            "ccategory",
            "fflag",
            "llicense",
            "rock linux",
            "ren rebe",
            "spell syn",
            "lastline syn",
            "filter",
            "disablestrat",
            "s un",
            "r en",
            "jakson alves",
            "ansi sgr",
            "ansi sgr8",
            "jan larres",
            "term left",
            "black",
            "green",
            "contact",
            "charityware",
            "uganda",
            "entry",
            "block",
            "parasitic",
            "parameter",
            "devicemos",
            "rules",
            "device",
            "diva",
            "toby schaffer",
            "categories",
            "exectryexec",
            "unmounticon",
            "at wp",
            "chat",
            "django",
            "django template",
            "dave hodder",
            "dnsbind zone",
            "docbook sgml",
            "cest let",
            "docbook xml",
            "docbook",
            "devin weaver",
            "shlomi fish",
            "auto detect",
            "syntax xml",
            "sgml",
            "syntax sgml",
            "rory hunter",
            "json",
            "dockerfiles",
            "honza pokorny",
            "onbuilds",
            "from",
            "add arg",
            "cmd copy",
            "mike williams",
            "mrmrdubya",
            "windows nt",
            "msdosms windows",
            "mckee",
            "nima talebi",
            "hong xu",
            "sept",
            "keyword hilink",
            "hilink",
            "error hilink",
            "nargs hilink",
            "markus mottl",
            "enclosing",
            "scott bordelon",
            "wed apr",
            "cadence",
            "automation",
            "design rule",
            "checking",
            "layout",
            "schematic",
            "dsssl",
            "cest",
            "example",
            "xmlregionhook",
            "dtml",
            "dtml syntax",
            "zope",
            "markup language",
            "jordaan",
            "doxygenhtmltop",
            "synlink",
            "link",
            "syncolor",
            "strong",
            "reflink",
            "cpreprocgroup",
            "actions",
            "dtrace d",
            "d script",
            "solaris dynamic",
            "tracing guide",
            "nicolas weber",
            "nicolasweber",
            "first line",
            "probe",
            "turn",
            "entity",
            "matchgroupnone",
            "document type",
            "definition",
            "brabandt",
            "dune",
            "anton kochkov",
            "samuel hym",
            "simon cruanes",
            "kawahara satoru",
            "urkedal",
            "etienne millon",
            "dylan",
            "justus",
            "fri sep",
            "include let",
            "dylan library",
            "interface files",
            "brent fulgham",
            "bfulgham",
            "string let",
            "fulgham",
            "dnsmasqkeyword",
            "dnsmasqrange",
            "editorconfig",
            "anders",
            "edif version",
            "edif",
            "artem zankovich",
            "zartem",
            "5481988",
            "john beppu",
            "beppu",
            "ecd file",
            "embedix linux",
            "elm filter",
            "syntaxelmfilt",
            "elmfiltnumber",
            "brssow",
            "environments",
            "wraparound",
            "elinksnumber",
            "elinkscolor",
            "savingstylew",
            "imagelinksuffix",
            "homepage",
            "current void",
            "selse",
            "sthen",
            "eiffel",
            "joseph hager",
            "ajhager",
            "typedef hi",
            "lambda",
            "xxxx",
            "kresimir marzic",
            "oscar hellstrm",
            "oscar",
            "kornel",
            "syntax",
            "label highlight",
            "type highlight",
            "identifier",
            "george",
            "exec sql",
            "preproc let",
            "esterel",
            "luca necchi",
            "nikos andrikos",
            "esterel regions",
            "esterel types",
            "esterel comment",
            "identifiers",
            "euphoria",
            "builtins",
            "function",
            "reset",
            "should suffice",
            "etermgeneral",
            "d0xx",
            "mod5",
            "rubytop",
            "eruby",
            "erubysubtypezsw",
            "conventional",
            "text",
            "generated file",
            "david nev",
            "setup",
            "expect",
            "normal expect",
            "ralph jennings",
            "knowbudy",
            "user",
            "sysv",
            "bsd isms",
            "syntaxexports",
            "optset",
            "eviews",
            "vaidotas zemlys",
            "zemlys",
            "az4857",
            "assembler",
            "fasm",
            "ron aaron",
            "vim url",
            "fasm home",
            "fasm version",
            "xmm0 xmm1",
            "xmm2 xmm3",
            "dwayne bailey",
            "dwayne",
            "fdcc",
            "definitions",
            "iso tr",
            "unicode",
            "shell command",
            "output",
            "array",
            "fantom",
            "service",
            "bridle",
            "informix",
            "update",
            "abort abs",
            "absolute accept",
            "access acos",
            "add after",
            "allocate alter",
            "drop",
            "fishnext",
            "fishstatement",
            "fishterminator",
            "fishargument",
            "nicholas boyle",
            "flexwiki",
            "reilly",
            "home",
            "fuse",
            "modify",
            "table",
            "pascal makefile",
            "sections",
            "comments syn",
            "forth79",
            "forth83",
            "char",
            "forth83 syn",
            "body",
            "noname",
            "class",
            "local",
            "tung",
            "thu oct",
            "thomas reiter",
            "manipulation",
            "book",
            "document",
            "textfile",
            "apply",
            "formats",
            "popu",
            "crea",
            "modi",
            "memo",
            "defi",
            "disp",
            "dele",
            "appe",
            "repl",
            "proj",
            "alia",
            "cmon",
            "nvert",
            "mwin",
            "uniq",
            "blin",
            "carr",
            "story",
            "mult",
            "rator",
            "fortran",
            "ends",
            "cray",
            "ulllull",
            "stop",
            "fvwmm4",
            "mainsyntax",
            "fvwm2m4",
            "include m4",
            "include fvwm2",
            "fvwm1",
            "hss1",
            "general syn",
            "szsw",
            "check",
            "journal",
            "hold",
            "fvwm",
            "cursormove",
            "edgeresistance",
            "modulepath",
            "noborder",
            "windowlistskip",
            "backcolor",
            "sticky",
            "refresh",
            "buttons",
            "exclam",
            "slash",
            "gdmo",
            "iso101654",
            "guidelines",
            "managed object",
            "gyuman",
            "chester",
            "godot resource",
            "section syn",
            "ssss",
            "gdb command",
            "simon sobisch",
            "isplay",
            "unset",
            "linkurl",
            "gemtext markup",
            "suneel freimuth",
            "heading",
            "list",
            "quote",
            "heading special",
            "list statement",
            "godot",
            "bug hack",
            "gitdiff",
            "dddd",
            "endt",
            "commit",
            "question hi",
            "giftcef",
            "linenr hi",
            "giftceffw",
            "giftce",
            "conceal hi",
            "gedcom",
            "paul johnson",
            "december",
            "abbr addr",
            "adop adr1",
            "adr2 afn",
            "godot gdscript",
            "website",
            "pattern",
            "attribute syn",
            "macro syn",
            "gitcommitdiff",
            "your",
            "todo let",
            "crrw",
            "creator",
            "xexec",
            "syn match",
            "az4857 syn",
            "adam monsen",
            "opengl shading",
            "modified",
            "godoc",
            "title let",
            "gocommentgroup",
            "chan",
            "foldenable",
            "packagecomment",
            "integer hi",
            "todo regexp",
            "todos",
            "josh wainwright",
            "dot ja",
            "at gmail",
            "dot com",
            "karim belabas",
            "texstyle syntax",
            "todo syntax",
            "todd zullinger",
            "daniel kahn",
            "gillmor",
            "containsgpgtodo",
            "gprof output",
            "flat profile",
            "gretl",
            "gretl genr",
            "variable",
            "grads",
            "fronzek",
            "grid analysis",
            "display system",
            "grads scripting",
            "variables syn",
            "gnashkeyword",
            "gnashcomment",
            "gnashtodo",
            "solreadonly",
            "solsafedir",
            "john marshall",
            "jmarshall",
            "pedro alejandro",
            "lpezvalencia",
            "ddd0xx",
            "pager",
            "terminal",
            "chainloader",
            "groovytop",
            "exception",
            "groovy",
            "debug hi",
            "gtk theme",
            "packer",
            "conceal",
            "json syntax",
            "single",
            "trailing commas",
            "fixme note",
            "gnu server",
            "pages",
            "source html",
            "include java",
            "redefine",
            "argc argv",
            "begin begg",
            "end endg",
            "graph",
            "vim source",
            "matchlist",
            "vimsrcdir",
            "both",
            "getqflist",
            "cent",
            "kword",
            "c function",
            "small",
            "light",
            "vimcontinue",
            "endstr",
            "gensynvim",
            "vim9 syn",
            "vimexprlist",
            "magic",
            "hamlrubytop",
            "hamlcomponent",
            "hamltop",
            "haml",
            "hamlhtmltop",
            "david fishburn",
            "sun oct",
            "hamster classic",
            "hamster",
            "harepostfix",
            "hare",
            "vim syntax",
            "amelia clarke",
            "selene",
            "haredoc",
            "miscellaneous",
            "haste",
            "vlsi ic",
            "c preprocessor",
            "09afaf",
            "treat",
            "varid",
            "error let",
            "hbfilename",
            "hbhtmlstring",
            "hbhtmltagn",
            "hbhtmltag",
            "hbdirectivelib",
            "hbdirectiveset",
            "hbdirectiveout",
            "kkmmgg",
            "upstream",
            "a block",
            "szskkzes",
            "vim program",
            "restorer",
            "defunct",
            "aprl",
            "helplang",
            "intel hex",
            "sams ricahrd",
            "data digit",
            "folding data",
            "records",
            "record syn",
            "ignore hi",
            "vim help",
            "ident",
            "dana edwards",
            "danaedwards",
            "ic design",
            "preprocessor",
            "spacings",
            "resolutions",
            "ranges",
            "slhg",
            "hgcommitdiff",
            "sapling",
            "ken takata",
            "kentkt",
            "max coplan",
            "float hi",
            "hls playlist",
            "benot ryder",
            "comment line",
            "hogvar",
            "hogopnot",
            "hognumber",
            "hogipaddr",
            "hogcomment",
            "hogport",
            "hogoprange",
            "hogcomment syn",
            "hogstring",
            "bind",
            "elseif",
            "html template",
            "dennis",
            "htmltop",
            "htmljavascript",
            "onas",
            "htmlxml",
            "idem",
            "aria",
            "m4top",
            "htmlm4",
            "htmlos",
            "repeat syn",
            "aestiva",
            "jason rust",
            "jrust",
            "django html",
            "scomment",
            "i3configident",
            "i3configstrin",
            "i3configvalue",
            "focus",
            "i3configsh",
            "i3configstrvar",
            "i3configcommand",
            "i3configcolvar",
            "moving",
            "itanium",
            "parth malwankar",
            "pmalwankar",
            "file version",
            "masm syntax",
            "mark manning",
            "markem",
            "allan kelly",
            "ibasic file",
            "icewm menu",
            "james mahler",
            "fri apr",
            "icewm",
            "ids menu",
            "icon special",
            "icemenu",
            "data language",
            "ajelenak",
            "paren hi",
            "paren",
            "billshannon",
            "nlps",
            "npro",
            "graphics",
            "iconpregroup",
            "icon",
            "wendell turner",
            "prelude",
            "inbpc",
            "ddspe",
            "leaderscopy",
            "fontname",
            "badness",
            "elan ruusame",
            "shtop",
            "value",
            "args",
            "substituted",
            "macros",
            "ipfspecial",
            "ipftodo todo",
            "hendrik scholz",
            "hendrik",
            "openbsd pf",
            "ipfcomment",
            "xxx fixme",
            "donovan keohane",
            "syndisplay",
            "global",
            "verbextend",
            "double2",
            "snote",
            "david brgin",
            "dbuergin",
            "continuedoelse",
            "argv binpath",
            "cr crlf",
            "del debug",
            "eav empty",
            "inno setup",
            "my innosetup",
            "jason mills",
            "enterdisk syn",
            "sdsetuptype syn",
            "ifdef",
            "elif",
            "else",
            "cortopassi",
            "istoutspec",
            "peter meszaros",
            "pmeszaros",
            "istinpspec",
            "istcharacter",
            "istnumber",
            "istcomment",
            "jamcommentgroup",
            "jamparengroup",
            "ralf lemke",
            "xxx syn",
            "jargon file",
            "dan church",
            "label let",
            "javascript",
            "jls17",
            "see https",
            "javatop",
            "javadoctags",
            "javahtml",
            "tx0cr",
            "javamarkdown",
            "markdowninline",
            "jinja",
            "jinja template",
            "names syn",
            "standard jess",
            "jess",
            "paul baleme",
            "pbaleme",
            "jonas munsin",
            "xaxis yaxis",
            "x cross",
            "number let",
            "javacc",
            "java compiler",
            "javasoft",
            "vim compiler",
            "vito",
            "doc comment",
            "note xxx",
            "jspjava",
            "java server",
            "rgarciasuarez",
            "darren greaves",
            "patch",
            "thomas kimpton",
            "software",
            "eli parra",
            "json keywords",
            "jsonc",
            "izhak jakov",
            "izhak724",
            "acknowledgement",
            "kevin locke",
            "remove syntax",
            "json5",
            "mazunki hoksaas",
            "guten ye",
            "ywzhaifei",
            "syntax setup",
            "endz1",
            "kconfigconfigif",
            "abstract",
            "juliaexprsnodot",
            "regex",
            "naninf",
            "kdlnumber",
            "kdlnumber d",
            "aram drevekenin",
            "kotlin",
            "generated",
            "annotation syn",
            "kix2001 syn",
            "kixtart",
            "handle",
            "trap",
            "michael piefel",
            "entwurf",
            "cpp mode",
            "preproc",
            "error highlight",
            "storageclass",
            "delimiter",
            "sysvars",
            "false true",
            "kivy",
            "corey prophitt",
            "corey",
            "load python",
            "kivy language",
            "define kivy",
            "lace",
            "jocelyn fiat",
            "constants syn",
            "latte",
            "nick moffitt",
            "pre tag",
            "elsa",
            "glapagrossklag",
            "riley bruins",
            "ribru17",
            "keywords syntax",
            "sections memory",
            "overlay phdrs",
            "version include",
            "absolute addr",
            "names",
            "ldapconfcomment",
            "iso dialect",
            "modula2 dialect",
            "modula2 input",
            "styles",
            "error endif",
            "august",
            "pim dialect",
            "modula2",
            "longbitset",
            "procedure",
            "r10 dialect",
            "sto dos",
            "ldap ldif",
            "zak johnson",
            "zakj",
            "less",
            "jenoma",
            "todo optimize",
            "orce",
            "arset",
            "prox",
            "cache",
            "agent",
            "haskelltop",
            "lhstexcontainer",
            "ian lynagh",
            "tex markup",
            "bird style",
            "markdown style",
            "tex style",
            "lexccode",
            "user code",
            "flex",
            "van engelen",
            "patrick texier",
            "lifelines",
            "xref tag",
            "liquid",
            "liquidstatement",
            "yaml front",
            "matter",
            "liquidyamltop",
            "acdfmnrstuklp",
            "lilonumber hi",
            "number list",
            "niels horn",
            "lite",
            "liteinside",
            "lutz eymers",
            "ixtab",
            "email",
            "sql syntax",
            "errmsg",
            "livebook syntax",
            "lisplistcluster",
            "clisp ffi",
            "standard lisp",
            "keyword lispkey",
            "litestepdir",
            "litestep rc",
            "nethood",
            "winnt",
            "lotos",
            "is8807 syn",
            "specifications",
            "is8807",
            "daniel amyot",
            "damyot",
            "wed aug",
            "except",
            "logtalk",
            "logtalk entity",
            "term",
            "logic",
            "chfnauth",
            "chshauth",
            "createhome",
            "defaulthome",
            "lout",
            "report",
            "lambdaprolog",
            "teyjus",
            "vim version",
            "general",
            "lpccommentgroup",
            "lpcefungroup",
            "nodule",
            "lpcparengroup",
            "lpcpreprocgroup",
            "echo",
            "poet",
            "timo frenay",
            "timo",
            "labels syn",
            "lotusscript",
            "taryn east",
            "ultraedit",
            "textpad",
            "activateapp as",
            "base beep",
            "call case",
            "scott bigham",
            "colorterm",
            "luau",
            "marcus aurelius",
            "farias",
            "carlos augusto",
            "collapsebrtags",
            "lynx web",
            "lynx",
            "todo note",
            "uploader",
            "lyrics",
            "lrcnumber",
            "quake",
            "operators",
            "hascbackend",
            "pkg syn",
            "definelib syn",
            "definepgm syn",
            "importm3lib syn",
            "fleiner",
            "mainsyntaxm4",
            "mailquoteexps",
            "mail",
            "felix von",
            "leitner",
            "am est",
            "ascii character",
            "froms",
            "mallard",
            "jhradilek",
            "mallard markup",
            "draft",
            "skipnl",
            "roland hieber",
            "overrule",
            "ostype",
            "manconfcomment",
            "build",
            "suffix",
            "mason",
            "perltop",
            "hinrik rn",
            "sigursson",
            "pentium",
            "abgl",
            "ceopsz",
            "offset",
            "align",
            "floatingpoint",
            "vpmaxsq syn",
            "integer",
            "maple",
            "release",
            "focus master",
            "define syntax",
            "filename suffix",
            "segname segtype",
            "mtaddon",
            "matlab",
            "alex burka",
            "bbddeess",
            "all functions",
            "except keywords",
            "maxima",
            "robert dodier",
            "mermaid",
            "craig maceahern",
            "4857192255",
            "self",
            "accdescr",
            "click",
            "meson",
            "liam beguin",
            "zpetkovic",
            "disabler",
            "wikitop",
            "containshtmltag",
            "wikitableformat",
            "mediawiki",
            "yakov lerner",
            "rfc3339",
            "james vega",
            "melgroup",
            "maya extension",
            "robert minsk",
            "jason franklin",
            "sunghyun nam",
            "goweol",
            "mudunuri",
            "version info",
            "ctrlh syntax",
            "markdown",
            "matchstr",
            "metafont",
            "page",
            "latest revision",
            "magic point",
            "spam",
            "xfont vfont",
            "gero kuhlmann",
            "gero",
            "snmpv1",
            "snmpv2 mib",
            "martin smat",
            "msmat",
            "david pascoe",
            "pascoedj",
            "ax16",
            "donald knuth",
            "taocp",
            "mmix",
            "dirk hsken",
            "knuthstyle",
            "precondit endif",
            "pcimapfile",
            "parportmapfile",
            "model",
            "nil nil",
            "true syn",
            "symbols",
            "mmatop",
            "stub",
            "peter funk",
            "getdialect",
            "timo pedersen",
            "dat97tpe",
            "whitespace",
            "any array",
            "mookeyword",
            "dilnt",
            "multiplication",
            "mojonumber",
            "mojo",
            "stuff",
            "monk",
            "seebeyond",
            "mike litherland",
            "dirk van",
            "deun",
            "metapost",
            "manual",
            "autosync",
            "dumpvideo",
            "loadidx",
            "rawvideo",
            "tsprog",
            "color",
            "tabtitle",
            "am cdt",
            "pm est",
            "dummy",
            "ms message",
            "kwl7",
            "common ms",
            "messages",
            "ms idl",
            "vadim zeitlin",
            "vadim",
            "msql",
            "env variables",
            "inlclude",
            "modsim iii",
            "philipp jocham",
            "march",
            "actid all",
            "and as",
            "murphi model",
            "diego ongaro",
            "integers",
            "nspemit",
            "switch",
            "mushcode syntax",
            "rick bird",
            "clock",
            "dbck",
            "dump",
            "hook",
            "motd",
            "notify",
            "nuke",
            "restart",
            "snoop",
            "stats",
            "teleport",
            "attributes",
            "prettyprint",
            "libpath",
            "promylibdir",
            "attributes syn",
            "mupad source",
            "dave silvia",
            "dsilvia",
            "ymwd",
            "cciskaf",
            "float",
            "mysql",
            "pronovici",
            "encrypt",
            "namednotnumber",
            "nick hibma",
            "location",
            "marcin",
            "chaos",
            "dmap",
            "modules",
            "control section",
            "nastran",
            "tom kowalski",
            "any integer",
            "n1ql",
            "eugene ciurana",
            "merge syn",
            "nest syn",
            "pr3d4t0r",
            "vim command",
            "natural",
            "nasm",
            "iend",
            "movs",
            "time",
            "interval",
            "size",
            "directory cache",
            "cache buffers",
            "minimum file",
            "count",
            "daylight",
            "miner",
            "keith smiley",
            "login",
            "netrwtreegroup",
            "diffchange hi",
            "netrw listing",
            "toplevel",
            "readtoken",
            "nixexpr",
            "daiderd jordan",
            "daiderd",
            "region match",
            "bufenter",
            "syntax event",
            "synset",
            "checked",
            "muttvars",
            "neomutt",
            "bounce",
            "nsisanyopt",
            "statements",
            "nsis",
            "music",
            "rcx2",
            "scout syn",
            "rcx2 syn",
            "nqcparengroup",
            "rcx syn",
            "nqccommentgroup",
            "modes",
            "scout",
            "stefan",
            "module",
            "nginx module",
            "nginx",
            "http",
            "gost",
            "comet",
            "speed",
            "sphinx",
            "curv",
            "mtllibs",
            "exmaintainer",
            "anthony hodsdon",
            "objc syntax",
            "odin",
            "ms44",
            "and or",
            "occamnumber",
            "group",
            "omnimark",
            "paul terray",
            "mailto",
            "activate again",
            "catch clear",
            "close copy",
            "ocamltypeexpr",
            "ocamlallerrs",
            "jon parise",
            "ondirshell",
            "operator let",
            "objc type",
            "smes12",
            "qualifiers",
            "smes7",
            "smes19",
            "preparation",
            "protected",
            "structure hi",
            "openscad",
            "niklas adam",
            "luis moreno",
            "abort all",
            "alter and",
            "any as",
            "asc at",
            "oplstatement",
            "oplnumber",
            "open psion",
            "epoc16epoc32",
            "af09",
            "openvpn",
            "openvpnnumber",
            "openvpnsignal",
            "hupinttermuser",
            "containstop",
            "keepend",
            "eval",
            "menumode",
            "endurance",
            "blade",
            "illusion",
            "sneak",
            "onload",
            "disablemouse",
            "getclass",
            "notes todo",
            "containsallbut",
            "spells",
            "ronan pigott",
            "ronan",
            "alpm",
            "tcpip",
            "gclckprocs syn",
            "oracle config",
            "sandor kopanyi",
            "oraall",
            "protocol syn",
            "bequeath syn",
            "latest change",
            "haochen tong",
            "withconceal",
            "inlinecode",
            "super",
            "pappperl",
            "papphtml",
            "cdata",
            "perlinterpdq",
            "marc lehmann",
            "perlexpr",
            "config file",
            "lennart schultz",
            "string keywords",
            "protobuf text",
            "lakshay garg",
            "crgut",
            "tim chase",
            "austin",
            "pcctsinrule",
            "cpptoplevel",
            "pccts",
            "nextstep syn",
            "openbsd packet",
            "lauri tirkkonen",
            "sloadsanchor",
            "phtml",
            "perlinterpsq",
            "perlinterpmatch",
            "perlinterpslash",
            "perldata",
            "portb syn",
            "intcon syn",
            "gie eeie",
            "t0ie inte",
            "rbie t0if",
            "intf rbif",
            "microchip",
            "pdfxml",
            "nrtbf",
            "font",
            "palm os",
            "schau",
            "font id",
            "beware",
            "data syn",
            "postfix",
            "kelemen peter",
            "peter",
            "kelemen",
            "anton shestakov",
            "pikestmt",
            "pikebadgroup",
            "pike",
            "pine",
            "thu feb",
            "macro let",
            "httpviewer",
            "infopath",
            "longmanuallinks",
            "filter0xb7",
            "plaintexmath",
            "glue",
            "acute",
            "cdhoopstuvijll",
            "rrowvert",
            "skewsqrt",
            "mega",
            "phpinnerhtmltop",
            "phpclfunction",
            "phpcltop",
            "refer",
            "cphil",
            "number support",
            "c language",
            "does",
            "address and",
            "dword",
            "juerd",
            "plpperl",
            "plpend syn",
            "counter syn",
            "pl1commentgroup",
            "pl1parengroup",
            "declare dcl",
            "procedure proc",
            "loops",
            "podformat",
            "ibsclfx",
            "perl pod",
            "poe item",
            "show hide",
            "minimal",
            "address",
            "obsolete",
            "openclose",
            "bjoern jacke",
            "bjacke",
            "povray",
            "syntax syn",
            "off true",
            "false yes",
            "ppwizard",
            "dennis bareis",
            "ppwizargval",
            "constants",
            "plsqlparengroup",
            "oracle",
            "plsql",
            "klaus muth",
            "klaus",
            "altf amcr",
            "arc asfn",
            "astk barc",
            "blk box",
            "call syn",
            "cass cir",
            "melchior franz",
            "mfranz",
            "sonia heimann",
            "todo tbd",
            "privoxy",
            "prolog",
            "promela",
            "mon oct",
            "thu aug",
            "promela types",
            "class linking",
            "ps ll3",
            "dsc comment",
            "device gstate",
            "ps level",
            "postscrstring",
            "escaped",
            "matrix",
            "courier",
            "buffers",
            "redistributions",
            "this software",
            "including",
            "but not",
            "limited to",
            "pbcommentgrp",
            "google",
            "az09az",
            "posix",
            "rex barzee",
            "rexbarzee",
            "aclqrv",
            "a af",
            "ag ax",
            "e ef",
            "eg ex",
            "certain",
            "ps1comment",
            "purify header",
            "informational",
            "warning",
            "corrupting",
            "fatal",
            "haakon riiser",
            "hakonrk",
            "c syn",
            "pypa",
            "commands syn",
            "globs",
            "line break",
            "pyrex",
            "marco barisione",
            "python syntax",
            "olor",
            "chars",
            "progress",
            "ation",
            "progressdebug",
            "progressnumber",
            "edure",
            "progresstodo",
            "eter",
            "daniel",
            "sage",
            "widget",
            "rage",
            "python library",
            "reference",
            "quarto",
            "aquino",
            "vim runtime",
            "quickfix",
            "directory hi",
            "hee1",
            "lookdown lookup",
            "quakeoctalerror",
            "quake12command",
            "noprefix",
            "console",
            "onoff",
            "qb64",
            "z2z1",
            "qmlexpr",
            "radiance scene",
            "georg mischler",
            "radiance",
            "greg ward",
            "surface",
            "raccruby",
            "rule",
            "racc input",
            "dobie",
            "xdobie",
            "handling",
            "vector",
            "types syntax",
            "raml",
            "restful api",
            "hopkins",
            "rofi advanced",
            "pierguill",
            "common rc",
            "resource",
            "heiko erhardt",
            "language syn",
            "bitmap icon",
            "cursor cursor",
            "cmash",
            "ratpoison",
            "magnus woldrich",
            "djkea2",
            "bulls eye",
            "force control",
            "number syn",
            "rapid",
            "azazxc0xff",
            "azazxc0xff09",
            "rakuinterpqq",
            "rakuregexen",
            "rakuregexp5",
            "rcs log",
            "joe karthauser",
            "rcs file",
            "revision",
            "yyyy",
            "rebol",
            "yer todo",
            "words syn",
            "view",
            "view tabs",
            "spaces",
            "vicharsearch",
            "viprevword",
            "viendword",
            "visearchagain",
            "vinextword",
            "registry key",
            "registry export",
            "ulitin",
            "head",
            "regedit4",
            "win9",
            "bytes",
            "paths",
            "xxx bug",
            "davide alberani",
            "remind",
            "ben orchard",
            "rem omit",
            "mit license",
            "raimon49",
            "permission",
            "software is",
            "resolvipcluster",
            "ipv6 support",
            "09azaz",
            "radu dineiu",
            "hidesymbol",
            "r help",
            "r code",
            "epsilon",
            "kappa",
            "slabelsk",
            "over",
            "relax ng",
            "containsrnctodo",
            "rnoweb",
            "highlighting",
            "rnowebr",
            "ranke",
            "ferraz pereira",
            "rosa",
            "extension",
            "bytestream",
            "andrew bromage",
            "frameend",
            "worldbegin",
            "worldend",
            "attributebegin",
            "attributeend",
            "todo improve",
            "handles",
            "todo are",
            "redif",
            "axel castellane",
            "templatetype",
            "and add",
            "alex zvoleff",
            "configuration",
            "r syntax",
            "syntaxrpcgen",
            "mikrotik",
            "cidr notation",
            "cycle",
            "exit",
            "catch",
            "rpl2",
            "rmdlatex",
            "yaml header",
            "highlight code",
            "rmdr",
            "text format",
            "rich text",
            "control words",
            "new control",
            "rstcruft",
            "salt state",
            "jinja runtime",
            "star",
            "disallow syn",
            "disallow",
            "samba",
            "new maintainer",
            "ntlmv2 syn",
            "synfold",
            "rubymodifier",
            "sasbasicsyntax",
            "add syntax",
            "sasgraph",
            "yrdif yyq",
            "template",
            "mixin",
            "extend",
            "return",
            "steven dobay",
            "stevendobay",
            "sather",
            "science",
            "institute",
            "dede",
            "scilab",
            "benoit hamelin",
            "containedgroup",
            "preproc syn",
            "aclchg",
            "acldel",
            "aclgrp",
            "aclumask",
            "lockscreen",
            "zombie",
            "scss",
            "puria nafisi",
            "azizi",
            "always",
            "ip adresses",
            "verify",
            "synopsys design",
            "constraints",
            "tcl vim",
            "thu mar",
            "tcl syntax",
            "tcl extension",
            "xor syn",
            "task else",
            "nextstate syn",
            "in out",
            "with from",
            "ebcdic",
            "closedelay",
            "txtrigger",
            "spdnormal",
            "portd",
            "comment hilink",
            "sexplib",
            "atoms syn",
            "lists",
            "clst",
            "sgml charset",
            "capacity scope",
            "features",
            "baseset descset",
            "simple",
            "shfoldheredoc",
            "shfoldifdofor",
            "shlooplist",
            "shfunctionlist",
            "shidlist",
            "shecholist",
            "shcaselist",
            "shdblquotelist",
            "provides",
            "sgml specific",
            "space crlf",
            "dquote syn",
            "percent",
            "mp luacall",
            "alephversion",
            "uchar",
            "udelimiterunder",
            "umathchardef",
            "umathruleheight",
            "umathstackvgap",
            "umathxscale",
            "uoverwithdelims",
            "hai tp",
            "bestanden",
            "hanya dalam",
            "fiierele",
            "tp tin",
            "aemacron amstex",
            "aacute",
            "abrevehook",
            "afterpar",
            "agrave ahook",
            "amstex amacron",
            "atilde",
            "beforepar beta",
            "bigm",
            "delta",
            "oldstable",
            "experimental",
            "bullseye",
            "trixie",
            "forky",
            "focal",
            "jammy",
            "devel",
            "buzz",
            "maverick",
            "keyword syntax",
            "typescriptvalue",
            "title syntax",
            "typescripttype",
            "blabla",
            "sicad",
            "zbranyiczky",
            "irpt",
            "irptl",
            "mes1",
            "swift project",
            "simula",
            "simula syn",
            "keyword end",
            "when",
            "nagle",
            "main url",
            "comparison",
            "load sinda",
            "on si",
            "off eng",
            "sieve",
            "skill",
            "nsqn",
            "dirfile",
            "pnamestring",
            "pathversion",
            "schemeskill",
            "afterbefore",
            "tolist",
            "renderman",
            "dan piponi",
            "specialkey hi",
            "headers",
            "nontext hi",
            "jan hlavacek",
            "xuserblock",
            "for loop",
            "userblock",
            "null syn",
            "tracedrop",
            "daheartbeat",
            "slpregcomment",
            "spi file",
            "private public",
            "slrn score",
            "preben peppe",
            "guldberg",
            "age bytes",
            "syntaxsm",
            "smarty",
            "mon nov",
            "constant",
            "slice",
            "zeroc",
            "morel bodin",
            "smcl",
            "stata markup",
            "jeff pitblado",
            "jpitblado",
            "statasmcl",
            "directive",
            "smith",
            "smil",
            "herve foucher",
            "smil boston",
            "animation syn",
            "smlallerrs",
            "smlaenoparen",
            "fabrizio zeno",
            "cornelli",
            "zeno",
            "snns network",
            "snns http",
            "lln lun",
            "toff soff",
            "ctype syn",
            "snns",
            "maximum",
            "maximum output",
            "stringcomment",
            "initvalvalstr",
            "mono",
            "snobol4",
            "rafal sulejman",
            "site",
            "csnobol",
            "parens",
            "cothi",
            "afpnumkg",
            "spice circuit",
            "noam halevy",
            "insensitive syn",
            "spice",
            "splintallstuff",
            "splintannotelem",
            "ralf wildenhues",
            "splint home",
            "c code",
            "purpose",
            "buildinstall",
            "linux rpm",
            "freund",
            "ormeir",
            "wed oct",
            "spyce",
            "rimon barr",
            "rimon",
            "spupordinary",
            "input output",
            "spuptextproc",
            "type stream",
            "bugs",
            "execution",
            "snns result",
            "fishburn",
            "thu sep",
            "sqloracle",
            "buffer",
            "sqlforms",
            "austin ziegler",
            "prev change",
            "todo find",
            "xpos",
            "java syntax",
            "sqlj",
            "sap hana",
            "upper case",
            "upper",
            "schema syn",
            "user syn",
            "memory database",
            "sql syn",
            "spl syn",
            "comment syntax",
            "query language",
            "adaptive server",
            "anywhere",
            "xpscanf syn",
            "methods syn",
            "starea syn",
            "stcentroid syn",
            "stperimeter syn",
            "paul moore",
            "oracle nquote",
            "diffadd hi",
            "diffchange let",
            "section",
            "query report",
            "writer",
            "nathan stratton",
            "treadway",
            "jeff lanzarotta",
            "squid",
            "thanksto",
            "ilya sher",
            "iso8601",
            "subrip",
            "range syn",
            "ddd skipwhite",
            "bold",
            "sections syn",
            "override",
            "smalltalk",
            "arndt hesse",
            "hesse",
            "openssh client",
            "jakub jelen",
            "jakuje",
            "dominik fischer",
            "openssh server",
            "conditional",
            "repeats",
            "types",
            "globals",
            "statafuncgroup",
            "statamacrogroup",
            "stataparengroup",
            "rmcoll syn",
            "invftail",
            "invibeta",
            "haseprop",
            "mata",
            "structurizr dsl",
            "venthur",
            "hsiaoming yang",
            "lepture",
            "marc harter",
            "sudoersuser",
            "lazy",
            "generic",
            "swig",
            "julien marrec",
            "apache license",
            "runtime library",
            "vim maintainer",
            "emir sari",
            "nowarn",
            "i3confignumvar",
            "endze",
            "josef litos",
            "james eapen",
            "nargs syncolor",
            "nargs synlink",
            "syncolor type",
            "syncolor ignore",
            "syncolor added",
            "preproc synlink",
            "type synlink",
            "special synlink",
            "budden",
            "ingo karkat",
            "myk taylor",
            "install syntax",
            "syntax au",
            "systemverilog",
            "verilog syntax",
            "tads",
            "amir karger",
            "karger",
            "history info",
            "syntaxtags",
            "tak2",
            "tak3",
            "tak2000",
            "tak compare",
            "tak output",
            "load tak",
            "tar listing",
            "type let",
            "john florian",
            "wed jul",
            "key names",
            "values",
            "characters",
            "uuids syn",
            "rufus cable",
            "verbose tap",
            "rufus",
            "tap output",
            "pass",
            "foolman",
            "cmovsetj",
            "borland",
            "united force",
            "vector graphics",
            "verbose",
            "known template",
            "xfire user",
            "tcshvarlist",
            "tcsh",
            "gautam iyer",
            "ttlconstant",
            "term language",
            "tera term",
            "kcpy kcrt",
            "eenlrtbfs",
            "xhp xhpa",
            "xt xenl",
            "msgr",
            "tclspecialc",
            "tcltk",
            "taylor venable",
            "taylor",
            "system",
            "geometry",
            "tss syn",
            "typescript",
            "kao weiko",
            "jose elera",
            "campana",
            "zhao yi",
            "scott shattuck",
            "irc channel",
            "freenode",
            "vim filetype",
            "andy lester",
            "tt2topcluster",
            "typescriptreact",
            "react",
            "strpart",
            "include perl",
            "rawperl",
            "moriki",
            "atsushi",
            "ucnumber",
            "unrealscript",
            "openwrt unified",
            "colin caine",
            "fancy",
            "normal let",
            "typstcode",
            "matchgroupnoise",
            "noise highlight",
            "hashtag",
            "typstmarkup",
            "noise",
            "motif uil",
            "user interface",
            "thomas koehler",
            "september",
            "import hi",
            "anton",
            "prunefs",
            "prunenames",
            "prunepaths",
            "prunebindmounts",
            "upstart",
            "upstart job",
            "michael biebl",
            "biebl",
            "james hunt",
            "archivebit syn",
            "datelimit syn",
            "daysold syn",
            "deleted syn",
            "destination syn",
            "dirsonly syn",
            "drivealias syn",
            "filedate syn",
            "filedelete syn",
            "files syn",
            "msid",
            "innovation data",
            "rob owens",
            "ull ulls",
            "msg types",
            "ip address",
            "agtpcsrv",
            "profile",
            "version date",
            "ms windows",
            "action devpath",
            "valgrind memory",
            "debugger output",
            "roger luethi",
            "program url",
            "christoph gysin",
            "valve data",
            "tag syn",
            "wend",
            "prather",
            "pratam",
            "minor",
            "iskeyword",
            "xnor xor",
            "veraparengroup",
            "veralabelgroup",
            "vhdl",
            "linting",
            "vhsic",
            "high speed",
            "new style",
            "verilog",
            "mun johl",
            "485763",
            "vos cm",
            "andrew mcgill",
            "az syn",
            "bwlfdgh",
            "fdgh",
            "bwlqofdgh",
            "psect",
            "virata aconfig",
            "virata",
            "viratahexnumber",
            "execoptions",
            "ewind",
            "uffer",
            "malt",
            "wind",
            "vrmlevents",
            "vrmlfields",
            "vrmlcomment",
            "vrmlprotos",
            "vrmlnodes start",
            "externproto",
            "proto",
            "vgrindefs",
            "vgrindefs file",
            "profilesetzss",
            "java source",
            "parmp",
            "novimmain",
            "extern",
            "mswin",
            "featguimswin",
            "vimdll",
            "editnone",
            "level",
            "heading level",
            "vimtestsetup",
            "noop",
            "java language",
            "nontext",
            "returns",
            "chapter",
            "annotations",
            "labels",
            "text text",
            "tag head",
            "void",
            "htmlsnippets",
            "object",
            "object apply",
            "object bb",
            "no operation",
            "u003b",
            "n value",
            "pair",
            "long",
            "generics",
            "predicate",
            "vimtestsetup hi",
            "error import",
            "nontext class",
            "see jls",
            "declaration",
            "taggable",
            "binaryoperator",
            "i1 x",
            "i1 y",
            "string str",
            "taggable i1",
            "letters",
            "letters alpha",
            "letters beta",
            "tag tail",
            "use identity",
            "supplier",
            "tests",
            "identity",
            "comparable",
            "intfunction",
            "a dummy",
            "tggabl",
            "string s",
            "string tostring",
            "do not",
            "this file",
            "indent4",
            "indent2",
            "indent8",
            "tggabls",
            "fields",
            "classlock",
            "defines demo",
            "testable",
            "serviceloader",
            "malformed",
            "woof",
            "string s1",
            "string s2",
            "browns",
            "jumpss",
            "string s4",
            "string s6",
            "string apply",
            "string bay",
            "as quick",
            "woofs",
            "beta",
            "yieldable",
            "t yield",
            "other",
            "colon",
            "arrow",
            "unfoldenable",
            "italic",
            "strikethrough",
            "bold italic",
            "foobar",
            "modula2 pim",
            "test file",
            "colouring",
            "is licensed",
            "under the",
            "from system",
            "modula2 iso",
            "retain",
            "to do",
            "modula2 r10",
            "unsafe",
            "cardinal",
            "var abc",
            "variableb",
            "variablec",
            "var3",
            "var4",
            "var5",
            "var6",
            "variablea",
            "variabled",
            "variablee",
            "variable3",
            "varb",
            "variable1",
            "variable2",
            "varc",
            "vard",
            "variable4",
            "function1",
            "function4",
            "function2",
            "function3",
            "eq ne",
            "gt ge",
            "le lt",
            "ne gt",
            "ge le",
            "variableathis",
            "valsubfunc",
            "below",
            "reply",
            "issue",
            "cfoo",
            "ifoo",
            "interrupt",
            "ctrlc",
            "e123 catch",
            "varvalue",
            "cdpath",
            "backuptype",
            "defaultdevice",
            "executefbackup",
            "shall",
            "please wait",
            "buffer foo",
            "nargs range",
            "completer1 foo",
            "completer2 foo",
            "foo2",
            "bang",
            "nargs foo",
            "foo delcommand",
            "multiline",
            "commenttitle",
            "end augroup",
            "autocmd",
            "fixme call",
            "matched",
            "start not",
            "end not",
            "end call",
            "xterm call",
            "givename",
            "vim9",
            "test const",
            "foo def",
            "ex command",
            "dict",
            "end endfunction",
            "end enddef",
            "answer",
            "warningmsg",
            "endwhile",
            "dotest3",
            "dotest4",
            "dotest5",
            "dotest6",
            "test1",
            "test2",
            "test3",
            "test4",
            "test5",
            "funa",
            "dofuna",
            "funb",
            "dofunb",
            "func",
            "dofunc",
            "fund",
            "dofund",
            "foo delfunction",
            "foo function",
            "foo comment",
            "foo none",
            "guifg",
            "comment none",
            "ctermfgcyan",
            "end end",
            "end let",
            "end line",
            "end line1",
            "a basic",
            "rhs map",
            "foo bar",
            "fubar",
            "needle",
            "foogroup foo",
            "foogroup",
            "homeinclude",
            "defabc",
            "snomagicfoobar",
            "smagicfoobar",
            "special",
            "line comment",
            "b special",
            "char0x0044",
            "testcluster",
            "cchar",
            "keywords list",
            "vim line",
            "element",
            "x1f xf",
            "31 3",
            "u02a4 u000002a4",
            "string escape",
            "hexadecimal",
            "0xff echo",
            "decimal",
            "octal echo",
            "0377 echo",
            "vim shebang",
            "instance",
            "pairclasstest",
            "vim keymap",
            "end const",
            "expr",
            "foo unlet",
            "vim comment",
            "vim9 ex",
            "end foo",
            "xterm foo",
            "eof foo",
            "vim9script",
            "s vim9script",
            "12345",
            "0b10101010",
            "192939",
            "0777",
            "0o777",
            "0xabcdef00",
            "0x12345678",
            "runtest",
            "rticle",
            "syntax test",
            "file 0",
            "dougkearns",
            "2024 jun",
            "13 0",
            "test failures",
            "when comparing",
            "italicized text",
            "eading level",
            "igure",
            "eader",
            "frame",
            "diomatic text",
            "nput",
            "utput",
            "icture",
            "rogres",
            "cript",
            "earch",
            "ection",
            "elect",
            "reformat",
            "failure 0",
            "egend",
            "oscript",
            "bject",
            "ptgroup",
            "ption",
            "trong",
            "tyle",
            "able",
            "emplate",
            "extarea",
            "itle",
            "ource",
            "olgroup",
            "atalist",
            "etails",
            "ialog",
            "ieldset",
            "igcaption",
            "eleted text",
            "mphasis",
            "mbed",
            "side",
            "udio",
            "lockquote",
            "anvas",
            "aption",
            "ring at",
            "ideo",
            "cronym",
            "rame",
            "rameset",
            "arque",
            "enuitem",
            "rack",
            "narticulated an",
            "oframes",
            "trike",
            "ortal",
            "aram",
            "trikethrough",
            "highlighted",
            "elements have",
            "never be",
            "mage",
            "interface 0",
            "efault 0",
            "mport 0",
            "redundant",
            "tail",
            "alue",
            "nterface 0",
            "primer",
            "label 0",
            "tatic 0",
            "oid 0",
            "edundant",
            "identity cast",
            "expres",
            "to nest",
            "typeuse an",
            "htmlcom",
            "here is",
            "snip",
            "tmlsnip",
            "egion 0",
            "literal",
            "html com",
            "no entry",
            "point method",
            "code main",
            "return 0",
            "code nul",
            "eturn 0",
            "noop1",
            "may be",
            "used after",
            "noop2",
            "literalu0",
            "is proces",
            "return 8",
            "noop5",
            "nbsp",
            "noop6",
            "noop7",
            "link j0",
            "javaignorej0",
            "vimtestsetup s0",
            "fen 0",
            "nt 0",
            "majorversion",
            "empty string",
            "rotected 0",
            "compares this",
            "instance with",
            "the pas",
            "code that",
            "no period",
            "for the",
            "above sum",
            "rivate 0",
            "htmlsnip",
            "return an",
            "link m0",
            "execute",
            "match visual",
            "fen c0",
            "ref0",
            "literals",
            "clas",
            "tostring",
            "start 0",
            "ostring 0",
            "replace 0",
            "ubstring 0",
            "noop8",
            "noop9",
            "markdowncom",
            "arkdownsnip",
            "markdown com",
            "code public",
            "the method",
            "must be",
            "declared",
            "code 0",
            "the major",
            "java version",
            "used with",
            "inal 0",
            "markdownsnip",
            "blanks and",
            "re 0",
            "static void",
            "param a0",
            "rgs 0",
            "optional c0",
            "arguments 0",
            "invoke",
            "nontext 0",
            "hrow 0",
            "ew 0",
            "object module",
            "object open",
            "exports opens",
            "requires",
            "bject 0",
            "eplacement 0",
            "ar 0",
            "opens",
            "object opens",
            "object provides",
            "object requires",
            "object to",
            "uses",
            "xtends 0",
            "mplements 0",
            "ealed 0",
            "ermits 0",
            "bstract 0",
            "c1 i0",
            "noop3",
            "noop4",
            "a sum",
            "foldingtests",
            "static",
            "object b",
            "escapestests",
            "static final",
            "string hel",
            "har 0",
            "0ffffff0",
            "1200",
            "1210",
            "1230",
            "1240",
            "1250",
            "1260",
            "1270",
            "1300",
            "1310",
            "2040",
            "3240",
            "0100",
            "0120",
            "0130",
            "0140",
            "0150",
            "0160",
            "0170",
            "0200",
            "0210",
            "0230",
            "biginteger",
            "t1 x",
            "uper 0",
            "e element",
            "radix",
            "ecord 0",
            "tatic",
            "t dum",
            "isempty",
            "ublic 0",
            "ase 0",
            "ong 0",
            "witch 0",
            "genericstests",
            "todo 0",
            "3400",
            "3410",
            "3420",
            "3430",
            "3450",
            "3460",
            "3470",
            "3500",
            "3510",
            "3520",
            "sempty",
            "opal",
            "opsome",
            "ushal",
            "ushsome",
            "adix",
            "romdecimal",
            "lambdaexpres",
            "leftconst07",
            "leftconst08",
            "leftconst09",
            "i1 0",
            "leftconst10",
            "leftconst1",
            "leftconst01",
            "leftconst02",
            "leftconst03",
            "leftconst04",
            "leftconst05",
            "leftconst06",
            "leftconst",
            "const1",
            "const2",
            "witch",
            "hen 0",
            "alpha w0",
            "beta w0",
            "equals",
            "leftconst12",
            "typearguments",
            "identifier 0",
            "nteger",
            "ashcode",
            "omparable",
            "ry 0",
            "atch 0",
            "unction",
            "tring",
            "length",
            "ntfunction",
            "intsup",
            "clone",
            "naryoperator",
            "alueof",
            "quals",
            "redicate",
            "equalist",
            "gymnastics for",
            "ipredicate",
            "superequalist",
            "ethodhandle",
            "invokepredicate",
            "methodhandle mh",
            "throwable th",
            "a dum",
            "b dum",
            "t extends",
            "stringer",
            "ostring",
            "ntvalue",
            "onsumer",
            "println",
            "uperequalist",
            "nvokepredicate",
            "ethodhandle mh",
            "remember",
            "num 0",
            "asci",
            "stylable",
            "t e0",
            "tringer",
            "ative 0",
            "ynchronized 0",
            "trictfp 0",
            "thread",
            "qualist",
            "ransient 0",
            "methodstests",
            "string t0",
            "la s",
            "string name",
            "equires 0",
            "odule 0",
            "this module",
            "to the",
            "sample project",
            "published at",
            "mport m0",
            "related sup",
            "ransitive 0",
            "xports 0",
            "pens 0",
            "jdk 23",
            "ses 0",
            "rovides 0",
            "ith 0",
            "doautocmd",
            "syntax 0",
            "0xp0",
            "ouble 0",
            "minusoned",
            "xap1",
            "doto",
            "numberstests",
            "ouble",
            "loat 0",
            "maxdecf",
            "maxhexf",
            "mindecf",
            "minhexfa",
            "minhexfb",
            "maxdecd",
            "maxhexd",
            "minhex",
            "minoct",
            "minbin",
            "minusonehex",
            "minusoneoct",
            "minusonebin",
            "maxhexl",
            "maxoctl",
            "minusonehexl",
            "minusoneoctl",
            "minusonebinl",
            "jdk 21",
            "object o",
            "rue 0",
            "alse 0",
            "stringtests",
            "a quick",
            "brown fox",
            "jumps over",
            "the lazy",
            "there are",
            "lf after",
            "jumps0",
            "ver the0",
            "a nested",
            "string ap",
            "brown",
            "jumps",
            "over the",
            "nested com",
            "switchtests",
            "ield",
            "a or",
            "ield 0",
            "yte 0",
            "1let",
            "hort",
            "hort 0",
            "nofoldenable 0",
            "0000 0",
            "unfoldingtests",
            "reak 0",
            "old italic",
            "s1024",
            "talic",
            "inheritdoc",
            "object ap",
            "hile 0",
            "for vim",
            "file is",
            "licensed under",
            "the vim",
            "license 0",
            "efinition 0",
            "rom 0",
            "predefined",
            "ype 0",
            "ointer 0",
            "il 0",
            "nter",
            "ninter",
            "octal",
            "pragmas",
            "with emphasis",
            "opyright 0",
            "uthor 0",
            "fred flintstone",
            "icense 0",
            "baz bam",
            "ispose 0",
            "oc 0",
            "ord 0",
            "dr 0",
            "ast 0",
            "size 0",
            "rocedure 0",
            "egin 0",
            "nd 0",
            "ixme 0",
            "eprecated 0",
            "procedures",
            "ewfo",
            "nteger 0",
            "disabled",
            "hile fo",
            "do 0",
            "while",
            "synonyms",
            "itset 0",
            "roc 0",
            "roces",
            "ewproces",
            "ransfer 0",
            "ystem 0",
            "ongcard 0",
            "bozo bim",
            "dada jingle",
            "etbar",
            "lias 0",
            "defined pragmas",
            "numeric",
            "xcafed0",
            "inline",
            "noinline",
            "implementation",
            "cho 0",
            "this for",
            "done",
            "is a",
            "very handy",
            "solution and",
            "no real",
            "replacement",
            "available",
            "unction1",
            "a text",
            "shel",
            "his is",
            "home 0",
            "ariable10",
            "this is",
            "with a",
            "nset 0",
            "962 0",
            "f true",
            "unab",
            "abclear 0",
            "bclear 0",
            "java module",
            "changefilename",
            "restorefilename",
            "todo highlight",
            "author",
            "antonio colombo",
            "delete",
            "processing",
            "hebrew",
            "complete",
            "separate",
            "usercomplete",
            "matchitem",
            "cargo",
            "utility call",
            "trim trailing",
            "nvim",
            "linenr",
            "newcolumn",
            "columnnr",
            "wordregex",
            "gnat",
            "atomic",
            "timeslice",
            "structmembers",
            "nextitem",
            "col2",
            "typename",
            "typeref",
            "mpkeywords",
            "ctxkeywords",
            "binarysearch",
            "contextcmd",
            "omnisyntaxlist",
            "vim completion",
            "alex vear",
            "sung pae",
            "clojure version",
            "emptynode",
            "unitname",
            "setsession",
            "dec ada",
            "switchsession",
            "zat line",
            "vim adadec",
            "synidattr",
            "strridx",
            "auto",
            "nfz62010",
            "mdn css",
            "mask",
            "mnem",
            "setprojectfile",
            "pretty",
            "project file",
            "bufreadpost",
            "vim autoload",
            "decho",
            "dret",
            "getonescript",
            "e486",
            "dredir",
            "buffer test",
            "beginning",
            "prevnonblank",
            "getline",
            "xhtml",
            "dot pl",
            "doctype",
            "completetags",
            "harepath",
            "finddir",
            "attempt",
            "hare module",
            "java",
            "strive to",
            "for at",
            "least vim",
            "e121",
            "dialect",
            "setdialect",
            "hide",
            "bruno sutic",
            "blur",
            "accesskey",
            "onblur",
            "onfocus",
            "select",
            "tosource",
            "anchor",
            "cookie",
            "iframe",
            "checkbox",
            "codebase",
            "infinity",
            "foreign",
            "dorec",
            "lexer",
            "panic",
            "netrw",
            "charles e",
            "win9x",
            "dfunc",
            "systemroot",
            "nfhhtml",
            "nfhhtm",
            "nfhjpg",
            "toolbar menu",
            "synstack",
            "indent",
            "quote handling",
            "extraoemake",
            "hostcc",
            "buildcc",
            "buildcflags",
            "buildldflags",
            "freebasic",
            "precedence",
            "searchbracket",
            "plnum",
            "shiftwidth",
            "extrafunc",
            "python task",
            "parlnum",
            "commenttodo",
            "omni completion",
            "xml directory",
            "scope",
            "abbr",
            "fixed",
            "findmatch",
            "matchmax",
            "findbracket",
            "lispword",
            "isforfold",
            "inherestring",
            "nulldict",
            "column",
            "rstfoldcache",
            "cacherstfold",
            "rstfold",
            "antony lee",
            "helper",
            "getcurpos",
            "endfunction",
            "getpos",
            "shelltokenize",
            "withpath",
            "fnamemodify",
            "jump",
            "warningmsg echo",
            "emit",
            "play",
            "defpython",
            "rustfmtcommand",
            "runrustfmt",
            "detectversion",
            "split",
            "getconfigvar",
            "stephen sugden",
            "stephen",
            "save rustfmt",
            "vrustfmt",
            "nread",
            "loadfile",
            "getdirchoices",
            "yesn",
            "winbufnr",
            "vimspell",
            "bufwinnr",
            "index",
            "sqlcwarningmsg",
            "sqlcgetcolumns",
            "sqlcerrormsg",
            "compltype",
            "omni",
            "allow user",
            "synlist",
            "problem",
            "snum",
            "lnum",
            "isinclassdef",
            "isposinclassdef",
            "getrubyvartype",
            "getoption",
            "tohtml",
            "diff2html",
            "jumptoline",
            "mime charset",
            "latin1",
            "typst",
            "echoerr",
            "echomsg",
            "typeset",
            "echowarn",
            "getrunningjobs",
            "tex root",
            "addjob",
            "removejob",
            "showmesg",
            "chgdir",
            "vimball",
            "decompress",
            "vimballhome",
            "mkvimball",
            "restoresettings",
            "mkdir",
            "item",
            "emptystackp",
            "getlastopentag",
            "vimxmlattrinfo",
            "vimxmltaginfo",
            "tagstack",
            "istag",
            "endtag",
            "decreaseindent",
            "textwidth",
            "emptytag",
            "starttag",
            "browse",
            "setsaneopts",
            "restoreopts",
            "extract",
            "adacore",
            "cmdpre",
            "makeprg",
            "cargo file",
            "cmdpost",
            "basefont",
            "samp",
            "cite",
            "applet",
            "input",
            "middle",
            "acronym",
            "button",
            "gamma",
            "theta",
            "omega",
            "apos",
            "cong",
            "legend",
            "annotation",
            "attributegroup",
            "choice",
            "selector",
            "field",
            "choose",
            "foreach",
            "sort",
            "param",
            "stripspace",
            "all rights",
            "apple system",
            "tmpdir",
            "containerdir",
            "supportawdd",
            "supportbtserver",
            "apple",
            "rights",
            "file system",
            "fontd",
            "bookmark",
            "securityscope",
            "directory",
            "utility",
            "regularfile",
            "packagekit",
            "darwincachedir",
            "store database",
            "allow",
            "security",
            "reboot",
            "os x",
            "homedir",
            "realhomedir",
            "usersbasedir",
            "usercachedir",
            "audio",
            "callkit",
            "datacloudkit",
            "workaround",
            "rdar",
            "ckassets",
            "mmcs",
            "anyuuid",
            "caches",
            "allow fsctl",
            "fontvalidator",
            "frameworks",
            "coreservices",
            "carbon",
            "lsarpc",
            "dssetup sandbox",
            "squash",
            "readonly",
            "deny write",
            "issue sandbox",
            "network stack",
            "services lookup",
            "readwrite file",
            "system keychain",
            "wkssvc sandbox",
            "brlm",
            "byte range",
            "lock manager",
            "allow smbd",
            "allow wsp",
            "allow launchd",
            "netfsserver",
            "allow file",
            "sandbox profile",
            "ipv4",
            "ipv6",
            "netcore",
            "afsystem",
            "sysprotocontrol",
            "edge cache",
            "video",
            "allow access",
            "sandbox",
            "pkrecipt",
            "cachedir",
            "cmds",
            "applesmcclient",
            "smt isolation",
            "verw",
            "tempdir",
            "byhost",
            "sigkill",
            "sysmacsyscall",
            "sysaccess",
            "sysclose",
            "syscsrctl",
            "sysfchmod",
            "sysfsetxattr",
            "sysfsgetpath",
            "sysfstat64",
            "sysfstatat64",
            "darwintempdir",
            "reserve",
            "parampath",
            "mailv2",
            "mail importer",
            "allow mail",
            "library",
            "appcontainer",
            "document being",
            "quick look",
            "manage",
            "carbon noise",
            "make sure",
            "opengl",
            "plugin",
            "movie",
            "safari",
            "unix domain",
            "uuid cache",
            "redistribution",
            "is provided",
            "direct",
            "cfnetwork",
            "satellite",
            "files access",
            "daemon",
            "webdav file",
            "sharing",
            "sysgethostuuid",
            "gr ucs",
            "freebsd",
            "netbsd",
            "ucs gb2312",
            "cp932vdc",
            "ucs cp932vdc",
            "gb2312",
            "gbk ucs",
            "gb18030 ucs",
            "gb18030",
            "cpucs",
            "grucs",
            "appleucs",
            "gr mapperzone",
            "iso8859ucs",
            "big5ucs",
            "jisucs",
            "cnsucs",
            "appleinternal",
            "applications",
            "volumes",
            "gregory mcgarry",
            "coff dsp21k",
            "risc os",
            "programmer",
            "appendix e",
            "packdir",
            "git pack",
            "acorn",
            "chunk file",
            "from risc",
            "os programmer",
            "corrupted",
            "infocom",
            "david griffith",
            "glulx",
            "text adventure",
            "game",
            "adventure game",
            "allen garvin",
            "dave chapeskie",
            "aes crypt",
            "encrypted data",
            "joerg jenderek",
            "createdby",
            "createdby b",
            "windows gui",
            "alliant",
            "alliant fx",
            "fx series",
            "allegro",
            "toby deshane",
            "algol",
            "4 string",
            "bmode",
            "proc",
            "defmens vendors",
            "procedure b",
            "bref",
            "bflex",
            "bsdos",
            "bsdi",
            "unix32v",
            "sunos",
            "again",
            "hive rc",
            "sequence",
            "avro",
            "parquet",
            "apache hadoop",
            "apache big",
            "obj apache",
            "orc apache",
            "par1 apache",
            "pitentry",
            "android vdex",
            "android backup",
            "0 dalvik",
            "android bootimg",
            "password salt",
            "hidden",
            "loki",
            "apl workspace",
            "module sound",
            "density",
            "amigaos",
            "postma",
            "soundmon module",
            "trid",
            "amiga disk",
            "dos disk",
            "application",
            "mpeg v4",
            "dmb maf",
            "ycbcr",
            "cmaf media",
            "monaural",
            "heif image",
            "apple quicktime",
            "mike",
            "codec",
            "live",
            "applixware",
            "peter soos",
            "words words",
            "raster bitmap",
            "macro macro",
            "builder builder",
            "mac os",
            "ii image",
            "disk image",
            "blocks",
            "apple dos",
            "appleworks word",
            "spreadsheet",
            "sweet",
            "bernie",
            "rescue",
            "corrupt",
            "bobo",
            "amanda",
            "tapestart date",
            "file dump",
            "arm coff",
            "aarch64",
            "arm thumb",
            "armv7 thumb",
            "apt cache",
            "second",
            "bits per",
            "image width",
            "per meter",
            "asfdataobject",
            "time offset",
            "data length",
            "colors",
            "040t",
            "asterx",
            "guy harris",
            "word words",
            "grap graphic",
            "macr macro",
            "asterx version",
            "words document",
            "graphic",
            "coff",
            "we32000 coff",
            "mau hardware",
            "sccs",
            "we32k",
            "bbxpro5files",
            "oliver dammer",
            "dammer",
            "beetle vm",
            "beetle",
            "cable",
            "box router",
            "fritz",
            "box fritz",
            "password b",
            "oem b",
            "language b",
            "thu jun",
            "x tap",
            "sender",
            "x5fx81x44",
            "batch",
            "notification",
            "georg sauthoff",
            "gsma",
            "gsm association",
            "cdrs",
            "bflt",
            "philippe de",
            "muyter",
            "blockhashloc",
            "marco pontello",
            "sam alignment",
            "bgzf",
            "samtools",
            "binary call",
            "binary sequence",
            "fasta",
            "iupac",
            "blocked gnu",
            "patchmaster",
            "binary format",
            "alois schloegl",
            "medica soft",
            "axgr biosigaxg",
            "biosigaxg",
            "ircam file",
            "adpcm",
            "david korth",
            "song",
            "atari st",
            "ache",
            "david",
            "bonk",
            "insane",
            "pokey",
            "otto",
            "zbot",
            "blcr",
            "uncomment",
            "vma06",
            "kernel",
            "berkeley lab",
            "c000r000 blcr",
            "sparc",
            "armeb",
            "sparc64",
            "blender",
            "native format",
            "glob chunk",
            "blender3d",
            "scripts",
            "bpy blender3d",
            "bpython script",
            "blackberry file",
            "blackberry rim",
            "etp file",
            "0x10",
            "greg roelofs",
            "gnu tar",
            "ascii null",
            "compress",
            "0x04",
            "openoffice",
            "freeze",
            "archiver",
            "designer",
            "spark",
            "hpack",
            "oblivion",
            "zpack",
            "blink",
            "npack",
            "xpack",
            "blit mpxmux",
            "blit",
            "vaxorder",
            "blit stuff",
            "ttcomp",
            "ttcomp archive",
            "need",
            "we32 dmd",
            "birtual machine",
            "oses",
            "sparc demand",
            "4096",
            "sparc pure",
            "chiasmus",
            "federal",
            "office",
            "bundesamt",
            "sicherheit",
            "xia1r chiasmus",
            "xis chiasmus",
            "btsnoop",
            "hci uart",
            "hci bcsp",
            "hci serial",
            "mikhail gusarov",
            "dottedmag",
            "nekovm",
            "neko nekovm",
            "resilient logic",
            "guile file",
            "goof",
            "le b",
            "be b",
            "cbor",
            "concise binary",
            "raw tape",
            "cbm basic",
            "dirk jagdmann",
            "d64 image",
            "d71 image",
            "d81 image",
            "c64 emultar",
            "cartridge image",
            "c source",
            "bcpl source",
            "bcpl",
            "libhdr",
            "java se",
            "java bytecode",
            "macho",
            "java class",
            "cpu type",
            "cafe babes",
            "java start",
            "x version",
            "tablature file",
            "chord music",
            "file format",
            "chord text",
            "powertab",
            "jelmer vernooij",
            "jelmer",
            "powertab v3",
            "runect citrus",
            "lcctype",
            "ctrsme citrus",
            "ctrsmo citrus",
            "lcmonetary",
            "ctrsnu citrus",
            "lcnumeric",
            "ctrsti citrus",
            "lctime",
            "cddb",
            "cd player",
            "developer",
            "julien blache",
            "database",
            "keyindex",
            "help",
            "systems",
            "microcode",
            "netbsdalpha",
            "ios microcode",
            "kompas",
            "vrml",
            "xml document",
            "reserved",
            "applicationtype",
            "autocad dwg",
            "schema",
            "scanline",
            "alliance",
            "claris",
            "claris clip",
            "377377377377001",
            "claris works",
            "c1 r1",
            "c2 r1",
            "c3 r1",
            "intergraph",
            "clipper coff",
            "fairchild",
            "clipper use",
            "hitachi sh",
            "common object",
            "coff intel",
            "intel",
            "files format",
            "djgpp",
            "clojure script",
            "clojure",
            "jason felice",
            "clojure module",
            "convex",
            "convex soff",
            "convex storage",
            "convexes",
            "added",
            "core file",
            "third",
            "idc file",
            "suiteid",
            "chart",
            "debacle",
            "ttcn",
            "tree",
            "notation",
            "suite ttcn",
            "abstract test",
            "suite",
            "boseos",
            "snmperrnoerror",
            "commitrow",
            "readcreate",
            "retlen",
            "writecreate",
            "mydata",
            "putindexdata",
            "snmpsetvarvalue",
            "checkfnslocal",
            "not be",
            "note note",
            "decides",
            "snmp error",
            "requestvb",
            "asnoctetstr",
            "asnobjectid",
            "logerr",
            "undoinfo",
            "rcsfile",
            "end code",
            "debugmsgtl",
            "initialize",
            "allowcreation",
            "adding",
            "oidlength",
            "handler",
            "snmperrgenerr",
            "colnum",
            "break",
            "current",
            "snmp",
            "dodescr",
            "nodeinfo",
            "calldefine",
            "doformatedtext",
            "startperl",
            "perleval",
            "mib type",
            "oids",
            "const",
            "register",
            "asn type",
            "rorw status",
            "generating code",
            "mib tree",
            "netsnmp style",
            "getnext",
            "mib table",
            "tabledata",
            "container",
            "mibs",
            "print",
            "please specify",
            "send",
            "memcpy",
            "rscreateandgo",
            "writemethod",
            "findvarmethod",
            "variablesoid",
            "substr",
            "varlen",
            "sprintmaxlen",
            "datacontext",
            "mode",
            "freeundoinfo",
            "reallyreally",
            "initializingn",
            "handlercanronly",
            "netsnmp",
            "emitindexvars",
            "enddefine",
            "emitgetargs",
            "emitloaddata",
            "emitindexinfo",
            "output skeleton",
            "loader",
            "Aishah Siti Lazim",
            "194 Green Street"
          ],
          "references": [
            "vimrc",
            "bugreport.vim",
            "evim.vim",
            "delmenu.vim",
            "defaults.vim",
            "ftplugof.vim",
            "ftoff.vim",
            "gvim.desktop",
            "ftplugin.vim",
            "gvimrc_example.vim",
            "indent.vim",
            "indoff.vim",
            "mswin.vim",
            "scripts.vim",
            "optwin.vim",
            "vim.desktop",
            "menu.vim",
            "vimrc_example.vim",
            "synmenu.vim",
            "filetype.vim",
            "Make_mvc.mak",
            "Make_all.mak",
            "README.ru.utf-8.txt",
            "README.txt",
            "tutor",
            "tutor.bar.utf-8",
            "tutor.ca.utf-8",
            "tutor.bg.utf-8",
            "tutor.cs.utf-8",
            "tutor.da.utf-8",
            "tutor.de.utf-8",
            "tutor.el.utf-8",
            "tutor.eo.utf-8",
            "tutor.es.utf-8",
            "tutor.fr.utf-8",
            "tutor.hr.utf-8",
            "tutor.ja.utf-8",
            "tutor.hu.utf-8",
            "tutor.it.utf-8",
            "tutor.ko",
            "tutor.ko.utf-8",
            "tutor.lt.utf-8",
            "tutor.lv.utf-8",
            "tutor.nb.utf-8",
            "tutor.nl.utf-8",
            "tutor.no.utf-8",
            "tutor.pt.utf-8",
            "tutor.pl.utf-8",
            "tutor.ru.utf-8",
            "tutor.tr.utf-8",
            "tutor.sr.utf-8",
            "tutor.sv.utf-8",
            "tutor.sk.utf-8",
            "tutor.vim",
            "tutor.zh_cn.utf-8",
            "tutor.utf-8",
            "tutor.vi.utf-8",
            "tutor.uk.utf-8",
            "tutor.zh_tw.utf-8",
            "tutor.zh.utf-8",
            "vimspell.txt",
            "xcmdsrv_client.c",
            "ref",
            "vim132",
            "vimm",
            "vim_vs_net.cmd",
            "shtags.1",
            "unicode.vim",
            "shtags.pl",
            "ccfilter_README.txt",
            "blink.c",
            "efm_filter.txt",
            "demoserver.py",
            "ccfilter.c",
            "efm_filter.pl",
            "ccfilter.1",
            "efm_perl.pl",
            "pltags.pl",
            "mve.txt",
            "emoji_list.vim",
            "mve.awk",
            "a65.vim",
            "aap.vim",
            "abap.vim",
            "abc.vim",
            "abel.vim",
            "abaqus.vim",
            "acedb.vim",
            "a2ps.vim",
            "ada.vim",
            "ahdl.vim",
            "8th.vim",
            "aflex.vim",
            "aidl.vim",
            "2html.vim",
            "alsaconf.vim",
            "amiga.vim",
            "ampl.vim",
            "antlr4.vim",
            "apachestyle.vim",
            "apache.vim",
            "antlr.vim",
            "ant.vim",
            "aml.vim",
            "arch.vim",
            "aptconf.vim",
            "arduino.vim",
            "art.vim",
            "asm.vim",
            "asciidoc.vim",
            "asn.vim",
            "aspperl.vim",
            "asm68k.vim",
            "aspvbs.vim",
            "asteriskvm.vim",
            "atlas.vim",
            "asy.vim",
            "autodoc.vim",
            "autohotkey.vim",
            "autoit.vim",
            "automake.vim",
            "ave.vim",
            "asmh8300.vim",
            "avra.vim",
            "awk.vim",
            "astro.vim",
            "ayacc.vim",
            "asterisk.vim",
            "bash.vim",
            "b.vim",
            "bdf.vim",
            "bib.vim",
            "basic.vim",
            "bindzone.vim",
            "bc.vim",
            "blank.vim",
            "bitbake.vim",
            "bsdl.vim",
            "bst.vim",
            "bzl.vim",
            "btm.vim",
            "bzr.vim",
            "baan.vim",
            "cabal.vim",
            "cabalconfig.vim",
            "cabalproject.vim",
            "c.vim",
            "catalog.vim",
            "cdl.vim",
            "cdrdaoconf.vim",
            "cfg.vim",
            "cgdbrc.vim",
            "cf.vim",
            "cdrtoc.vim",
            "ch.vim",
            "chaiscript.vim",
            "change.vim",
            "chaskell.vim",
            "changelog.vim",
            "chatito.vim",
            "cheetah.vim",
            "chicken.vim",
            "chordpro.vim",
            "chill.vim",
            "calendar.vim",
            "chuck.vim",
            "clean.vim",
            "clipper.vim",
            "cmakecache.vim",
            "cl.vim",
            "cmod.vim",
            "cmusrc.vim",
            "coco.vim",
            "colortest.vim",
            "clojure.vim",
            "conf.vim",
            "config.vim",
            "confini.vim",
            "conaryrecipe.vim",
            "crm.vim",
            "cmake.vim",
            "crontab.vim",
            "cpp.vim",
            "context.vim",
            "csc.vim",
            "csh.vim",
            "cs.vim",
            "csp.vim",
            "csv.vim",
            "cterm.vim",
            "csdl.vim",
            "cobol.vim",
            "ctrlh.vim",
            "css.vim",
            "cuda.vim",
            "cuplsim.vim",
            "cvs.vim",
            "cweb.vim",
            "cvsrc.vim",
            "cucumber.vim",
            "cupl.vim",
            "cynpp.vim",
            "cynlib.vim",
            "deb822sources.vim",
            "dcd.vim",
            "d.vim",
            "dcl.vim",
            "dart.vim",
            "debchangelog.vim",
            "debcontrol.vim",
            "datascript.vim",
            "debcopyright.vim",
            "def.vim",
            "dep3patch.vim",
            "denyhosts.vim",
            "debsources.vim",
            "desc.vim",
            "dictconf.vim",
            "dictdconf.vim",
            "diff.vim",
            "dircolors.vim",
            "dirpager.vim",
            "diva.vim",
            "desktop.vim",
            "django.vim",
            "dns.vim",
            "docbksgml.vim",
            "docbkxml.vim",
            "docbk.vim",
            "dockerfile.vim",
            "dosbatch.vim",
            "dosini.vim",
            "dot.vim",
            "dracula.vim",
            "dsl.vim",
            "dtml.vim",
            "doxygen.vim",
            "dts.vim",
            "dtrace.vim",
            "dtd.vim",
            "dune.vim",
            "dylanintr.vim",
            "dylanlid.vim",
            "dylan.vim",
            "dnsmasq.vim",
            "editorconfig.vim",
            "edif.vim",
            "ecd.vim",
            "elmfilt.vim",
            "elf.vim",
            "elinks.vim",
            "eiffel.vim",
            "elm.vim",
            "erlang.vim",
            "esmtprc.vim",
            "esqlc.vim",
            "esterel.vim",
            "euphoria3.vim",
            "eterm.vim",
            "eruby.vim",
            "euphoria4.vim",
            "exim.vim",
            "expect.vim",
            "exports.vim",
            "eviews.vim",
            "fasm.vim",
            "fdcc.vim",
            "falcon.vim",
            "fan.vim",
            "fetchmail.vim",
            "fgl.vim",
            "fish.vim",
            "flexwiki.vim",
            "focexec.vim",
            "fpcmake.vim",
            "forth.vim",
            "form.vim",
            "framescript.vim",
            "foxpro.vim",
            "fortran.vim",
            "freebasic.vim",
            "fvwm2m4.vim",
            "fstab.vim",
            "fvwm.vim",
            "gdmo.vim",
            "gdresource.vim",
            "gdb.vim",
            "gemtext.vim",
            "gdshader.vim",
            "git.vim",
            "gift.vim",
            "gedcom.vim",
            "gdscript.vim",
            "gitattributes.vim",
            "gitcommit.vim",
            "gitconfig.vim",
            "gitignore.vim",
            "gitolite.vim",
            "gitrebase.vim",
            "gitsendemail.vim",
            "gkrellmrc.vim",
            "goaccess.vim",
            "glsl.vim",
            "godoc.vim",
            "go.vim",
            "gnuplot.vim",
            "gp.vim",
            "gpg.vim",
            "gprof.vim",
            "gretl.vim",
            "grads.vim",
            "gnash.vim",
            "groff.vim",
            "grub.vim",
            "groovy.vim",
            "gtkrc.vim",
            "group.vim",
            "gyp.vim",
            "gsp.vim",
            "gvpr.vim",
            "update_date.vim",
            "README.md",
            "gen_syntax_vim.vim",
            "vim.vim.base",
            "haml.vim",
            "hamster.vim",
            "hare.vim",
            "haredoc.vim",
            "haste.vim",
            "haskell.vim",
            "hastepreproc.vim",
            "hb.vim",
            "hcl.vim",
            "help_ru.vim",
            "hex.vim",
            "help.vim",
            "hercules.vim",
            "hgcommit.vim",
            "hitest.vim",
            "hlsplaylist.vim",
            "hog.vim",
            "hostsaccess.vim",
            "hostconf.vim",
            "htmlcheetah.vim",
            "htmlangular.vim",
            "html.vim",
            "htmlm4.vim",
            "htmlos.vim",
            "htmldjango.vim",
            "i3config.vim",
            "ia64.vim",
            "ibasic.vim",
            "icemenu.vim",
            "idlang.vim",
            "idl.vim",
            "icon.vim",
            "initex.vim",
            "initng.vim",
            "ipfilter.vim",
            "inittab.vim",
            "inform.vim",
            "j.vim",
            "iss.vim",
            "ishd.vim",
            "jal.vim",
            "ist.vim",
            "jam.vim",
            "jargon.vim",
            "javascript.vim",
            "javascriptreact.vim",
            "java.vim",
            "jinja.vim",
            "jess.vim",
            "jgraph.vim",
            "javacc.vim",
            "jq.vim",
            "jsp.vim",
            "json.vim",
            "jsonc.vim",
            "json5.vim",
            "kconfig.vim",
            "julia.vim",
            "kdl.vim",
            "kotlin.vim",
            "kix.vim",
            "kwt.vim",
            "krl.vim",
            "kscript.vim",
            "kivy.vim",
            "lace.vim",
            "latte.vim",
            "lc.vim",
            "ld.vim",
            "ldapconf.vim",
            "iso.vim",
            "pim.vim",
            "r10.vim",
            "ldif.vim",
            "less.vim",
            "lftp.vim",
            "lhaskell.vim",
            "libao.vim",
            "lex.vim",
            "lifelines.vim",
            "liquid.vim",
            "limits.vim",
            "lilo.vim",
            "lite.vim",
            "livebook.vim",
            "lisp.vim",
            "litestep.vim",
            "lotos.vim",
            "loginaccess.vim",
            "logtalk.vim",
            "logindefs.vim",
            "lout.vim",
            "lprolog.vim",
            "lpc.vim",
            "lsl.vim",
            "lscript.vim",
            "lss.vim",
            "luau.vim",
            "lua.vim",
            "lynx.vim",
            "lyrics.vim",
            "m3quake.vim",
            "m3build.vim",
            "m4.vim",
            "mailaliases.vim",
            "mail.vim",
            "mailcap.vim",
            "mallard.vim",
            "make.vim",
            "manual.vim",
            "manconf.vim",
            "mason.vim",
            "masm.vim",
            "maple.vim",
            "master.vim",
            "matlab.vim",
            "maxima.vim",
            "mermaid.vim",
            "meson.vim",
            "mediawiki.vim",
            "messages.vim",
            "mel.vim",
            "man.vim",
            "markdown.vim",
            "mf.vim",
            "mgp.vim",
            "mgl.vim",
            "mib.vim",
            "mix.vim",
            "mmix.vim",
            "mmp.vim",
            "modconf.vim",
            "model.vim",
            "mma.vim",
            "modula2.vim",
            "modula3.vim",
            "moo.vim",
            "mojo.vim",
            "monk.vim",
            "mp.vim",
            "mplayerconf.vim",
            "mrxvtrc.vim",
            "msmessages.vim",
            "msidl.vim",
            "msql.vim",
            "modsim3.vim",
            "murphi.vim",
            "mush.vim",
            "mupad.vim",
            "muttrc.vim",
            "mysql.vim",
            "named.vim",
            "nanorc.vim",
            "nastran.vim",
            "n1ql.vim",
            "natural.vim",
            "nasm.vim",
            "ncf.vim",
            "netrc.vim",
            "netrw.vim",
            "ninja.vim",
            "nix.vim",
            "nosyntax.vim",
            "nroff.vim",
            "neomuttrc.vim",
            "nsis.vim",
            "nqc.vim",
            "nginx.vim",
            "obj.vim",
            "objcpp.vim",
            "odin.vim",
            "occam.vim",
            "omnimark.vim",
            "ocaml.vim",
            "ondir.vim",
            "objc.vim",
            "openscad.vim",
            "openroad.vim",
            "opl.vim",
            "openvpn.vim",
            "obse.vim",
            "opam.vim",
            "pamenv.vim",
            "pacmanlog.vim",
            "ora.vim",
            "pamconf.vim",
            "pandoc.vim",
            "papp.vim",
            "pcap.vim",
            "pbtxt.vim",
            "pascal.vim",
            "passwd.vim",
            "pccts.vim",
            "pf.vim",
            "phtml.vim",
            "perl.vim",
            "pic.vim",
            "pdf.vim",
            "pilrc.vim",
            "pfmain.vim",
            "pike.vim",
            "pine.vim",
            "pinfo.vim",
            "plaintex.vim",
            "php.vim",
            "plm.vim",
            "plp.vim",
            "pli.vim",
            "pod.vim",
            "poefilter.vim",
            "po.vim",
            "ppd.vim",
            "pov.vim",
            "povini.vim",
            "ppwiz.vim",
            "plsql.vim",
            "prescribe.vim",
            "procmail.vim",
            "privoxy.vim",
            "prolog.vim",
            "promela.vim",
            "postscr.vim",
            "protocols.vim",
            "proto.vim",
            "psf.vim",
            "psl.vim",
            "ps1.vim",
            "purifylog.vim",
            "ptcap.vim",
            "pymanifest.vim",
            "pyrex.vim",
            "progress.vim",
            "python.vim",
            "python2.vim",
            "quarto.vim",
            "qf.vim",
            "quake.vim",
            "qb64.vim",
            "r.vim",
            "qml.vim",
            "radiance.vim",
            "racc.vim",
            "racket.vim",
            "raml.vim",
            "rasi.vim",
            "rc.vim",
            "ratpoison.vim",
            "rapid.vim",
            "raku.vim",
            "rcslog.vim",
            "rcs.vim",
            "rebol.vim",
            "readline.vim",
            "registry.vim",
            "rego.vim",
            "remind.vim",
            "requirements.vim",
            "reva.vim",
            "resolv.vim",
            "rhelp.vim",
            "rexx.vim",
            "rnc.vim",
            "rng.vim",
            "rnoweb.vim",
            "rib.vim",
            "redif.vim",
            "rrst.vim",
            "rpcgen.vim",
            "routeros.vim",
            "rpl.vim",
            "rmd.vim",
            "rtf.vim",
            "rst.vim",
            "salt.vim",
            "robots.vim",
            "samba.vim",
            "ruby.vim",
            "sas.vim",
            "sass.vim",
            "rust.vim",
            "sbt.vim",
            "scdoc.vim",
            "sather.vim",
            "scilab.vim",
            "scala.vim",
            "scheme.vim",
            "screen.vim",
            "scss.vim",
            "sd.vim",
            "sdc.vim",
            "sdl.vim",
            "sensors.vim",
            "sed.vim",
            "services.vim",
            "sendpr.vim",
            "setserial.vim",
            "sexplib.vim",
            "sgmldecl.vim",
            "sgmllnx.vim",
            "sh.vim",
            "sgml.vim",
            "context-data-metafun.vim",
            "context-data-tex.vim",
            "hgcommitDiff.vim",
            "context-data-context.vim",
            "context-data-interfaces.vim",
            "debversions.vim",
            "typescriptcommon.vim",
            "sicad.vim",
            "sil.vim",
            "simula.vim",
            "sinda.vim",
            "sindacmp.vim",
            "sindaout.vim",
            "sieve.vim",
            "skill.vim",
            "sl.vim",
            "sisu.vim",
            "slang.vim",
            "slpconf.vim",
            "slpreg.vim",
            "slpspi.vim",
            "slrnsc.vim",
            "sm.vim",
            "smarty.vim",
            "slice.vim",
            "smcl.vim",
            "smith.vim",
            "smil.vim",
            "sml.vim",
            "snnsnet.vim",
            "snnspat.vim",
            "slrnrc.vim",
            "snobol4.vim",
            "solidity.vim",
            "spice.vim",
            "splint.vim",
            "spec.vim",
            "specman.vim",
            "spyce.vim",
            "spup.vim",
            "snnsres.vim",
            "sql.vim",
            "sqlforms.vim",
            "sqlj.vim",
            "sqlhana.vim",
            "sqlinformix.vim",
            "sqlanywhere.vim",
            "sqloracle.vim",
            "srec.vim",
            "sqr.vim",
            "squirrel.vim",
            "squid.vim",
            "srt.vim",
            "ssa.vim",
            "st.vim",
            "sshconfig.vim",
            "sshdconfig.vim",
            "stp.vim",
            "stata.vim",
            "strace.vim",
            "structurizr.vim",
            "stylus.vim",
            "sudoers.vim",
            "swift.vim",
            "swig.vim",
            "swiftgyb.vim",
            "swayconfig.vim",
            "syncolor.vim",
            "svn.vim",
            "synload.vim",
            "sysctl.vim",
            "systemverilog.vim",
            "tads.vim",
            "tags.vim",
            "tak.vim",
            "takcmp.vim",
            "takout.vim",
            "tar.vim",
            "taskdata.vim",
            "taskedit.vim",
            "tap.vim",
            "tasm.vim",
            "svg.vim",
            "syntax.vim",
            "template.vim",
            "tcsh.vim",
            "teraterm.vim",
            "terminfo.vim",
            "terraform.vim",
            "systemd.vim",
            "tcl.vim",
            "tssgm.vim",
            "typescript.vim",
            "tsv.vim",
            "tt2js.vim",
            "tssop.vim",
            "typescriptreact.vim",
            "tt2.vim",
            "tt2html.vim",
            "uc.vim",
            "uci.vim",
            "typst.vim",
            "udevconf.vim",
            "udevperm.vim",
            "uil.vim",
            "unison.vim",
            "updatedb.vim",
            "upstart.vim",
            "upstreamdat.vim",
            "upstreaminstalllog.vim",
            "upstreamlog.vim",
            "upstreamrpt.vim",
            "usw2kagtlog.vim",
            "urlshortcut.vim",
            "udevrules.vim",
            "valgrind.vim",
            "vdf.vim",
            "vb.vim",
            "verilogams.vim",
            "vera.vim",
            "vhdl.vim",
            "viminfo.vim",
            "verilog.vim",
            "voscm.vim",
            "vmasm.vim",
            "virata.vim",
            "vim.vim",
            "vrml.vim",
            "vgrindefs.vim",
            "usserverlog.vim",
            "c.c",
            "html.html",
            "java_comments_markdown.java",
            "java_annotations_signature.java",
            "java_comments.java",
            "java_enfoldment.java",
            "java_escapes.java",
            "java_generics_signature.java",
            "java_generics.java",
            "java_contextual_keywords.java",
            "java_lambda_expressions_signature.java",
            "java_annotations.java",
            "java_lambda_expressions.java",
            "java_method_references_signature.java",
            "java_methods_indent4.java",
            "java_methods_indent2.java",
            "java_methods_indent4_signature.java",
            "java_methods_indent2_signature.java",
            "java_methods_indent8_signature.java",
            "java_methods_style.java",
            "java_module_info.java",
            "java_methods_style_signature.java",
            "java_numbers.java",
            "java_previews_430.java",
            "java_string.java",
            "java_previews_455.java",
            "java_switch.java",
            "java_methods_indent8.java",
            "java_unfoldment.java",
            "markdown_conceal.markdown",
            "modula2_pim.def",
            "modula2_iso.def",
            "modula2_r10.def",
            "progress_comments.p",
            "sh_02.sh",
            "sh_01.sh",
            "sh_04.sh",
            "sh_03.sh",
            "sh_05.sh",
            "sh_07.sh",
            "sh_09.sh",
            "sh_08.sh",
            "sh_10.sh",
            "sh_11.sh",
            "vim_ex_abbreviate.vim",
            "vim_ex_behave.vim",
            "vim_ex_call.vim",
            "vim_ex_catch.vim",
            "sh_06.sh",
            "vim_ex_command.vim",
            "vim_ex_comment_strings.vim",
            "vim_ex_comment-vim9.vim",
            "vim_ex_comment.vim",
            "vim_ex_augroup.vim",
            "vim_ex_commands.vim",
            "vim_ex_def_nested.vim",
            "vim_ex_def_nested_fold.vim",
            "vim_ex_def_fold.vim",
            "vim_ex_def.vim",
            "vim_ex_echo.vim",
            "vim_ex_execute.vim",
            "vim_ex_function_def_tail_comment_errors.vim",
            "vim_ex_function_def_tail_comments.vim",
            "vim_ex_function_nested_fold.vim",
            "vim_ex_function_nested.vim",
            "vim_ex_function_fold.vim",
            "vim_ex_highlight.vim",
            "vim_ex_let_heredoc.vim",
            "vim_ex_loadkeymap_after_bar.vim",
            "vim_ex_loadkeymap_after_colon.vim",
            "vim_ex_map.vim",
            "vim_ex_function.vim",
            "vim_ex_menu.vim",
            "vim_ex_menutranslate.vim",
            "vim_ex_no_comment_strings.vim",
            "vim_ex_match.vim",
            "vim_ex_range.vim",
            "vim_ex_set.vim",
            "vim_ex_sleep.vim",
            "vim_ex_substitute.vim",
            "vim_ex_throw.vim",
            "vim_keymap.vim",
            "vim_ex_syntax.vim",
            "vim_key_notation.vim",
            "vim_line_continuation.vim",
            "vim_expr.vim",
            "vim_new.vim",
            "vim_shebang.vim",
            "vim_object_methods.vim",
            "vim_variables.vim",
            "vim9_ex_comment_strings.vim",
            "vim9_ex_commands.vim",
            "vim9_ex_no_comment_strings.vim",
            "vim9_ex_function_def_tail_comments.vim",
            "vim9_expr.vim",
            "vim9_keymap.vim",
            "vim9_ex_function_def_tail_comment_errors.vim",
            "vim9_legacy_header_fold.vim",
            "vim9_legacy_header.vim",
            "vim9_shebang.vim",
            "yaml.yaml",
            "dots_03",
            "dots_05",
            "dots_02",
            "dots_04",
            "dots_01",
            "dots_06",
            "dots_08",
            "dots_09",
            "dots_10",
            "dots_07",
            "dots_11",
            "dots_12",
            "dots_14",
            "dots_13",
            "dots_15",
            "dots_16",
            "dots_17",
            "dots_18",
            "dots_19",
            "dots_20",
            "html_00.dump",
            "html_03.dump",
            "html_05.dump",
            "html_04.dump",
            "html_06.dump",
            "html_02.dump",
            "html_01.dump",
            "html_07.dump",
            "html_08.dump",
            "java_annotations_01.dump",
            "java_annotations_00.dump",
            "java_annotations_02.dump",
            "java_annotations_03.dump",
            "java_annotations_04.dump",
            "java_annotations_signature_00.dump",
            "java_annotations_signature_02.dump",
            "java_annotations_signature_01.dump",
            "java_annotations_signature_03.dump",
            "java_annotations_signature_04.dump",
            "java_comments_html_01.dump",
            "java_comments_html_02.dump",
            "java_comments_html_03.dump",
            "java_comments_html_00.dump",
            "java_comments_html_04.dump",
            "java_comments_html_05.dump",
            "java_comments_markdown_00.dump",
            "java_comments_html_07.dump",
            "java_comments_markdown_03.dump",
            "java_comments_markdown_01.dump",
            "java_comments_html_06.dump",
            "java_comments_markdown_04.dump",
            "java_comments_markdown_02.dump",
            "java_comments_markdown_05.dump",
            "java_comments_markdown_06.dump",
            "java_comments_markdown_07.dump",
            "java_contextual_keywords_00.dump",
            "java_comments_markdown_08.dump",
            "java_contextual_keywords_01.dump",
            "java_contextual_keywords_02.dump",
            "java_enfoldment_01.dump",
            "java_contextual_keywords_03.dump",
            "java_enfoldment_00.dump",
            "java_enfoldment_02.dump",
            "java_escapes_00.dump",
            "java_escapes_01.dump",
            "java_escapes_03.dump",
            "java_escapes_05.dump",
            "java_escapes_07.dump",
            "java_escapes_02.dump",
            "java_escapes_06.dump",
            "java_generics_01.dump",
            "java_generics_03.dump",
            "java_generics_02.dump",
            "java_generics_04.dump",
            "java_generics_05.dump",
            "java_generics_07.dump",
            "java_generics_00.dump",
            "java_generics_06.dump",
            "java_escapes_04.dump",
            "java_generics_signature_00.dump",
            "java_generics_signature_01.dump",
            "java_generics_signature_02.dump",
            "java_generics_signature_03.dump",
            "java_generics_signature_04.dump",
            "java_generics_signature_05.dump",
            "java_generics_signature_07.dump",
            "java_generics_signature_06.dump",
            "java_lambda_expressions_00.dump",
            "java_lambda_expressions_01.dump",
            "java_lambda_expressions_03.dump",
            "java_lambda_expressions_02.dump",
            "java_lambda_expressions_04.dump",
            "java_lambda_expressions_05.dump",
            "java_lambda_expressions_06.dump",
            "java_lambda_expressions_07.dump",
            "java_lambda_expressions_08.dump",
            "java_lambda_expressions_signature_00.dump",
            "java_lambda_expressions_signature_01.dump",
            "java_lambda_expressions_signature_02.dump",
            "java_lambda_expressions_signature_03.dump",
            "java_lambda_expressions_signature_04.dump",
            "java_lambda_expressions_signature_05.dump",
            "java_lambda_expressions_signature_06.dump",
            "java_lambda_expressions_signature_07.dump",
            "java_lambda_expressions_signature_08.dump",
            "java_method_references_00.dump",
            "java_method_references_01.dump",
            "java_method_references_03.dump",
            "java_method_references_04.dump",
            "java_method_references_06.dump",
            "java_method_references_05.dump",
            "java_method_references_07.dump",
            "java_method_references_08.dump",
            "java_method_references_09.dump",
            "java_method_references_10.dump",
            "java_method_references_signature_00.dump",
            "java_method_references_signature_01.dump",
            "java_method_references_02.dump",
            "java_method_references_signature_02.dump",
            "java_method_references_signature_03.dump",
            "java_method_references_signature_04.dump",
            "java_method_references_signature_05.dump",
            "java_method_references_signature_07.dump",
            "java_method_references_signature_08.dump",
            "java_method_references_signature_09.dump",
            "java_methods_indent2_00.dump",
            "java_methods_indent2_00.vim",
            "java_methods_indent2_01.dump",
            "java_methods_indent2_01.vim",
            "java_methods_indent2_02.dump",
            "java_methods_indent2_02.vim",
            "java_method_references_signature_10.dump",
            "java_methods_indent2_03.vim",
            "java_methods_indent2_03.dump",
            "java_methods_indent2_04.dump",
            "java_methods_indent2_04.vim",
            "java_methods_indent2_05.dump",
            "java_methods_indent2_05.vim",
            "java_method_references_signature_06.dump",
            "java_methods_indent2_signature_00.vim",
            "java_methods_indent2_signature_01.dump",
            "java_methods_indent2_signature_01.vim",
            "java_methods_indent2_signature_02.dump",
            "java_methods_indent2_signature_02.vim",
            "java_methods_indent2_signature_03.dump",
            "java_methods_indent2_signature_03.vim",
            "java_methods_indent2_signature_04.dump",
            "java_methods_indent2_signature_04.vim",
            "java_methods_indent2_signature_05.dump",
            "java_methods_indent2_signature_05.vim",
            "java_methods_indent4_00.vim",
            "java_methods_indent4_01.vim",
            "java_methods_indent4_01.dump",
            "java_methods_indent4_02.dump",
            "java_methods_indent2_signature_00.dump",
            "java_methods_indent4_02.vim",
            "java_methods_indent4_03.vim",
            "java_methods_indent4_03.dump",
            "java_methods_indent4_04.dump",
            "java_methods_indent4_04.vim",
            "java_methods_indent4_05.dump",
            "java_methods_indent4_06.dump",
            "java_methods_indent4_05.vim",
            "java_methods_indent4_signature_00.dump",
            "java_methods_indent4_signature_01.dump",
            "java_methods_indent4_signature_01.vim",
            "java_methods_indent4_signature_02.dump",
            "java_methods_indent4_signature_02.vim",
            "java_methods_indent4_signature_03.dump",
            "java_methods_indent4_signature_03.vim",
            "java_methods_indent4_signature_04.dump",
            "java_methods_indent4_signature_04.vim",
            "java_methods_indent4_signature_05.dump",
            "java_methods_indent4_signature_05.vim",
            "java_methods_indent8_00.dump",
            "java_methods_indent4_signature_06.dump",
            "java_methods_indent8_00.vim",
            "java_methods_indent8_01.dump",
            "java_methods_indent8_01.vim",
            "java_methods_indent4_signature_00.vim",
            "java_methods_indent8_02.dump",
            "java_methods_indent8_02.vim",
            "java_methods_indent8_03.dump",
            "java_methods_indent8_03.vim",
            "java_methods_indent8_04.dump",
            "java_methods_indent8_05.dump",
            "java_methods_indent8_06.dump",
            "java_methods_indent8_05.vim",
            "java_methods_indent8_signature_00.dump",
            "java_methods_indent8_signature_01.dump",
            "java_methods_indent8_signature_01.vim",
            "java_methods_indent8_signature_02.dump",
            "java_methods_indent8_signature_02.vim",
            "java_methods_indent8_signature_00.vim",
            "java_methods_indent8_signature_03.dump",
            "java_methods_indent8_signature_03.vim",
            "java_methods_indent8_signature_04.dump",
            "java_methods_indent8_signature_04.vim",
            "java_methods_indent8_signature_05.vim",
            "java_methods_indent8_signature_05.dump",
            "java_methods_indent8_signature_06.dump",
            "java_methods_indent8_signature_06.vim",
            "java_methods_style_00.dump",
            "java_methods_style_00.vim",
            "java_methods_style_01.vim",
            "java_methods_style_02.vim",
            "java_methods_indent8_04.vim",
            "java_methods_style_03.dump",
            "java_methods_style_04.dump",
            "java_methods_style_02.dump",
            "java_methods_style_signature_00.dump",
            "java_methods_style_signature_00.vim",
            "java_methods_style_signature_01.vim",
            "java_methods_style_03.vim",
            "java_methods_style_signature_02.vim",
            "java_methods_style_01.dump",
            "java_methods_style_signature_03.dump",
            "java_methods_style_signature_03.vim",
            "java_methods_style_signature_04.dump",
            "java_methods_style_signature_01.dump",
            "java_module_info_00.dump",
            "java_methods_style_04.vim",
            "java_module_info_01.dump",
            "java_module_info_02.dump",
            "java_numbers_01.dump",
            "java_numbers_02.dump",
            "java_methods_style_signature_04.vim",
            "java_numbers_00.dump",
            "java_numbers_03.dump",
            "java_numbers_04.dump",
            "java_numbers_05.dump",
            "java_previews_430_00.dump",
            "java_previews_455_00.dump",
            "java_previews_455_01.dump",
            "java_previews_455_02.dump",
            "java_previews_455_03.dump",
            "java_methods_style_signature_02.dump",
            "java_methods_indent4_00.dump",
            "java_string_00.dump",
            "java_string_01.dump",
            "java_string_02.dump",
            "java_string_04.dump",
            "java_string_03.dump",
            "java_string_05.dump",
            "java_switch_00.dump",
            "java_switch_02.dump",
            "java_switch_01.dump",
            "java_switch_04.dump",
            "java_switch_03.dump",
            "java_switch_05.dump",
            "java_switch_07.dump",
            "java_unfoldment_00.dump",
            "java_switch_06.dump",
            "java_unfoldment_01.dump",
            "java_unfoldment_05.dump",
            "java_unfoldment_02.dump",
            "markdown_conceal_00.dump",
            "java_unfoldment_03.dump",
            "modula2_iso_00.dump",
            "modula2_iso_01.dump",
            "modula2_iso_03.dump",
            "modula2_iso_02.dump",
            "modula2_iso_04.dump",
            "modula2_iso_05.dump",
            "modula2_pim_00.dump",
            "modula2_iso_06.dump",
            "modula2_pim_01.dump",
            "modula2_pim_02.dump",
            "modula2_pim_03.dump",
            "modula2_pim_04.dump",
            "modula2_pim_06.dump",
            "modula2_pim_05.dump",
            "modula2_r10_00.dump",
            "modula2_r10_03.dump",
            "sh_07_01.dump",
            "sh_08_02.dump",
            "sh_11_00.dump",
            "vim_ex_abbreviate_01.dump",
            "vim_ex_command_00.dump",
            "java_module_info.vim",
            "markdown_conceal.vim",
            "cleanadd.vim",
            "yi.vim",
            "he.vim",
            "adacomplete.vim",
            "cargo.vim",
            "ccomplete.vim",
            "clojurecomplete.vim",
            "decada.vim",
            "contextcomplete.vim",
            "csscomplete.vim",
            "gnat.vim",
            "gzip.vim",
            "getscript.vim",
            "htmlcomplete.vim",
            "javaformat.vim",
            "netrw_gitignore.vim",
            "javascriptcomplete.vim",
            "haskellcomplete.vim",
            "netrwSettings.vim",
            "netrwFileHandlers.vim",
            "paste.vim",
            "pythoncomplete.vim",
            "RstFold.vim",
            "python3complete.vim",
            "rustfmt.vim",
            "spellfile.vim",
            "sqlcomplete.vim",
            "syntaxcomplete.vim",
            "rubycomplete.vim",
            "tohtml.vim",
            "typeset.vim",
            "vimball.vim",
            "xmlcomplete.vim",
            "xmlformat.vim",
            "zip.vim",
            "quickfix.vim",
            "html32.vim",
            "html40f.vim",
            "html40s.vim",
            "html40t.vim",
            "html401f.vim",
            "html401t.vim",
            "xhtml10f.vim",
            "xhtml10s.vim",
            "xsd.vim",
            "xhtml10t.vim",
            "html401s.vim",
            "xhtml11.vim",
            "xsl.vim",
            "airportd.sb",
            "awdd.sb",
            "bluetoothd.sb",
            "com.apple.atsd.internal.sb",
            "BTLEServer.sb",
            "com.apple.atsd.support.sb",
            "com.apple.bootinstalld.sb",
            "com.apple.ckdiscretionaryd.sb",
            "com.apple.CommCenter.sb",
            "com.apple.cloudd.sb",
            "com.apple.fontd.internal.sb",
            "com.apple.corespotlightservice.sb",
            "com.apple.FontValidator.sb",
            "com.apple.fontd.support.sb",
            "com.apple.genatsdb.internal.sb",
            "com.apple.managedcorespotlightd.sb",
            "com.apple.msrpc.lsarpc.sb",
            "com.apple.msrpc.mdssvc.sb",
            "com.apple.mobileassetd.sb",
            "com.apple.msrpc.netlogon.sb",
            "com.apple.msrpc.srvsvc.sb",
            "com.apple.msrpc.wkssvc.sb",
            "com.apple.smbd.sb",
            "com.apple.netbiosd.sb",
            "com.apple.softwareupdate_firstrun_tasks.sb",
            "com.apple.taskgated-helper.sb",
            "com.apple.spotlightknowledged.importer.sb",
            "com.apple.USBAgent.sb",
            "com.apple.softwareupdated.sb",
            "com.apple.xscertd-helper.sb",
            "com.apple.usbd.sb",
            "com.apple.xscertd.sb",
            "cvmsCompAgent.sb",
            "cvmsServer.sb",
            "fontmover.sb",
            "fontmoverinternal.sb",
            "fontworkerinternal.sb",
            "gss-acceptor.sb",
            "gss-initiator.sb",
            "kadmind.sb",
            "kcm.sb",
            "mdflagwriter.sb",
            "kdc.sb",
            "ftp-proxy.sb",
            "mds.sb",
            "mdworker-bundle.sb",
            "mds_stores.sb",
            "mdworker-mail.sb",
            "mdworker-sizing.sb",
            "mdworker-scan.sb",
            "mdworker.sb",
            "natpmpd.sb",
            "qlmanage.sb",
            "pfd.sb",
            "quicklook-satellite-general.sb",
            "mDNSResponder.sb",
            "quicklook-satellite.sb",
            "quicklook-satellite-personal.sb",
            "quicklookd-job-creation.sb",
            "webdav_agent.sb",
            "quicklookd.sb",
            "watool.sb",
            "wfs.sb",
            "wifivelocityd.sb",
            "Mac-CAD6701F7CEA0921.plist",
            "Mac-FFE5EF870D7BA81A.plist",
            "Mac-7DF21CB3ED6977E5.plist",
            "Mac-35C5E08120C7EEAF.plist",
            "Mac-2BD1B31983FE1663.plist",
            "Mac-42FD25EABCABB274.plist",
            "Mac-35C1E88140C3E6CF.plist",
            "Mac-27ADBB7B4CEE8E61.plist",
            "Mac-66E35819EE2D0D05.plist",
            "Mac-473D31EABEB93F9B.plist",
            "Mac-06F11FD93F0323C5.plist",
            "Mac-4B682C642B45593E.plist",
            "Mac-031B6874CF7F642A.plist",
            "Mac-551B86E5744E2388.plist",
            "Mac-A369DDC4E67F1C45.plist",
            "Mac-BE0E8AC46FE800CC.plist",
            "Mac-E43C1C25D4880AD6.plist",
            "default.plist",
            "Mac-BE088AF8C5EB4FA2.plist",
            "Mac-EE2EBD4B90B839A8.plist",
            "Mac-3CBD00234E554E41.plist",
            "Mac-77EB7D7DAF985301.plist",
            "Mac-189A3D4F975D5FFC.plist",
            "Mac-B809C3757DA9BB8D.plist",
            "Mac-DB15BD556843C820.plist",
            "Mac-06F11F11946D27C5.plist",
            "Mac-9F18E312C5C2BF0B.plist",
            "Mac-9AE82516C7C6B903.plist",
            "Mac-B4831CEBD52A0C4C.plist",
            "Mac-FA842E06C61E91C5.plist",
            "charset.pivot",
            "mapper.dir",
            "firmlinks",
            "Stopwords.plist",
            "adi",
            "acorn",
            "adventure",
            "aes",
            "alliant",
            "allegro",
            "algol68",
            "aout",
            "apache",
            "android",
            "apl",
            "amigaos",
            "application",
            "animation",
            "applix",
            "apple",
            "amanda",
            "arm",
            "apt",
            "asf",
            "assembler",
            "asterix",
            "att3b",
            "basis",
            "beetle",
            "avm",
            "ber",
            "bflt",
            "bhl",
            "bioinformatics",
            "biosig",
            "audio",
            "blcr",
            "blender",
            "blackberry",
            "archive",
            "blit",
            "bm",
            "bout",
            "bsdi",
            "bsi",
            "btsnoop",
            "bytecode",
            "cbor",
            "c64",
            "c-lang",
            "cafebabe",
            "chord",
            "citrus",
            "cddb",
            "clarion",
            "cisco",
            "cad",
            "claris",
            "clipper",
            "coff",
            "clojure",
            "convex",
            "communications",
            "dicrc",
            "mib2c.access_functions.conf",
            "mib2c.check_values.conf",
            "mib2c.check_values_local.conf",
            "mib2c.column_defines.conf",
            "mib2c.array-user.conf",
            "mib2c.column_enums.conf",
            "mib2c.column_storage.conf",
            "mib2c.create-dataset.conf",
            "mib2c.container.conf",
            "mib2c.genhtml.conf",
            "mib2c.int_watch.conf",
            "mib2c.conf",
            "mib2c.mfd.conf",
            "mib2c.notify.conf",
            "mib2c.iterate.conf",
            "mib2c.old-api.conf",
            "mib2c.iterate_access.conf",
            "mib2c.scalar.conf",
            "mib2c.perl.conf"
          ],
          "public": 1,
          "adversary": "DragonForce Malaysia",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [
            {
              "id": "Esc",
              "display_name": "Esc",
              "target": null
            },
            {
              "id": "SelectAll",
              "display_name": "SelectAll",
              "target": null
            },
            {
              "id": "Vim Tutor",
              "display_name": "Vim Tutor",
              "target": null
            },
            {
              "id": "Todo",
              "display_name": "Todo",
              "target": null
            },
            {
              "id": "AdaCore",
              "display_name": "AdaCore",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            },
            {
              "id": "T1070",
              "name": "Indicator Removal on Host",
              "display_name": "T1070 - Indicator Removal on Host"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1134",
              "name": "Access Token Manipulation",
              "display_name": "T1134 - Access Token Manipulation"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1036",
              "name": "Masquerading",
              "display_name": "T1036 - Masquerading"
            },
            {
              "id": "T1176",
              "name": "Browser Extensions",
              "display_name": "T1176 - Browser Extensions"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1119",
              "name": "Automated Collection",
              "display_name": "T1119 - Automated Collection"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1030",
              "name": "Data Transfer Size Limits",
              "display_name": "T1030 - Data Transfer Size Limits"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 109,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "ilyailya",
            "id": "298851",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CVE": 2,
            "email": 635,
            "hostname": 840,
            "URL": 2021,
            "FileHash-SHA1": 6,
            "domain": 378,
            "FileHash-SHA256": 548
          },
          "indicator_count": 4430,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 36,
          "modified_text": "446 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "677df11e9c5a567ccf700842",
          "name": "jaws (\u015blady z\u0142o\u015bliwego aktu)440338da3b5857e1ff499843f74e4bb8598e7014b5b7dc291106329e28b4638b",
          "description": "",
          "modified": "2025-02-07T03:04:58.652000",
          "created": "2025-01-08T03:29:34.744000",
          "tags": [
            "danie",
            "okrndata",
            "centos",
            "gmtrnetag",
            "cieka",
            "sport",
            "dostawa witaj",
            "wiecie http",
            "dostawa",
            "binchmod",
            "awinwkqonp",
            "usrbincurl o",
            "mips",
            "mipsi wersja",
            "sysv",
            "typzdarzenia",
            "ciekapliku",
            "resolverror",
            "znacznik",
            "xfcvxe3xb6",
            "zapisuje",
            "stdout",
            "znaki",
            "txfcvxe3xb6",
            "rxfcvxe3xb6",
            "elf binary",
            "upx compression",
            "roth",
            "nextron",
            "info"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 15,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 206,
            "FileHash-SHA1": 204,
            "FileHash-SHA256": 730,
            "domain": 37,
            "URL": 138,
            "hostname": 80,
            "CVE": 1,
            "YARA": 1
          },
          "indicator_count": 1397,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "478 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "674229b10c2364e895e83fb1",
          "name": "Skrypt pow\u0142oki  331883651   hiroz3x.sh",
          "description": "1. Downloads the file using both `wget` and `curl`.\n2. Concatenates the downloaded content to a file named `hiroz3x`.\n3. Makes `hiroz3x` executable.\n4. Executes `hiroz3x` with the argument `hiro.payload`.\nThe script attempts to change the working directory to `/tmp`, `/var/run`, `/mnt`, `/root`, or `/` before each download attempt\nhttp://45.13.227.151/h0r0zx00xh0r0zx00xdefault/\n6188f876ce4244dd2f4bacaa3e3ab7fa2462f39848b83ec705eb8c749e8ac09b",
          "modified": "2024-12-27T00:01:27.205000",
          "created": "2024-11-23T19:14:57.957000",
          "tags": [
            "elf sha256",
            "matches rule",
            "threats open",
            "o http",
            "request",
            "get http",
            "snort",
            "misc attack",
            "potentially bad",
            "traffic matches",
            "shell",
            "trojan",
            "body",
            "sandbox",
            "speed",
            "web request",
            "commands",
            "cmdlets",
            "commandline",
            "james pemberton",
            "endgame",
            "jhasenbusch",
            "austin songer",
            "austinsonger",
            "getcommand",
            "homenet",
            "externalnet",
            "perimeter",
            "tgi hunt",
            "httpports",
            "major",
            "checks-hostname",
            "detect-debug-environment",
            "self-delete",
            "sets-process-name",
            "telnet-communication"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "downloader.medusa/shell",
              "display_name": "downloader.medusa/shell",
              "target": null
            },
            {
              "id": "medusa shell bash",
              "display_name": "medusa shell bash",
              "target": null
            },
            {
              "id": "downloader trojan",
              "display_name": "downloader trojan",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1064",
              "name": "Scripting",
              "display_name": "T1064 - Scripting"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1070.004",
              "name": "File Deletion",
              "display_name": "T1070.004 - File Deletion"
            },
            {
              "id": "T1222",
              "name": "File and Directory Permissions Modification",
              "display_name": "T1222 - File and Directory Permissions Modification"
            },
            {
              "id": "T1564",
              "name": "Hide Artifacts",
              "display_name": "T1564 - Hide Artifacts"
            },
            {
              "id": "T1564.001",
              "name": "Hidden Files and Directories",
              "display_name": "T1564.001 - Hidden Files and Directories"
            },
            {
              "id": "T1003",
              "name": "OS Credential Dumping",
              "display_name": "T1003 - OS Credential Dumping"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1518",
              "name": "Software Discovery",
              "display_name": "T1518 - Software Discovery"
            },
            {
              "id": "T1518.001",
              "name": "Security Software Discovery",
              "display_name": "T1518.001 - Security Software Discovery"
            },
            {
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "display_name": "T1048 - Exfiltration Over Alternative Protocol"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1571",
              "name": "Non-Standard Port",
              "display_name": "T1571 - Non-Standard Port"
            },
            {
              "id": "T1489",
              "name": "Service Stop",
              "display_name": "T1489 - Service Stop"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 405,
            "FileHash-SHA1": 407,
            "FileHash-SHA256": 2369,
            "IPv4": 366,
            "URL": 685,
            "domain": 80,
            "hostname": 130,
            "YARA": 5
          },
          "indicator_count": 4447,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "520 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "671fd3b07ffb71116f2db7fa",
          "name": "dragonforce.io",
          "description": "Throw your MacBook in the trash, where the hackers belong.",
          "modified": "2024-11-27T17:01:13.516000",
          "created": "2024-10-28T18:10:56.355000",
          "tags": [
            "copyright",
            "apple computer",
            "tcpip",
            "supported",
            "quantum",
            "postfix",
            "mail",
            "aliases",
            "postfix version",
            "restrict",
            "wietse venema",
            "sample",
            "note",
            "person",
            "basic system",
            "general",
            "column",
            "tiff",
            "linus walleij",
            "triad",
            "greg roelofs",
            "html",
            "daniel quinlan",
            "aiff",
            "music",
            "wave",
            "formats",
            "magic",
            "form",
            "crunch",
            "freeze",
            "maker",
            "format",
            "postscript",
            "this",
            "ifmodule",
            "include",
            "virtualhost",
            "directory",
            "require",
            "serverroot",
            "listen",
            "ifdefine",
            "loadmodule",
            "errordocument",
            "apache",
            "win32",
            "example",
            "main",
            "webdav",
            "internet",
            "mime type",
            "xlm xla",
            "xlc xlt",
            "xlam",
            "xlsb",
            "xlsm",
            "xltm",
            "z7 z8",
            "xhtml xht",
            "addiconbytype",
            "adddescription",
            "fancyindexed",
            "gzip",
            "indexignore",
            "indexes",
            "versionsort",
            "fancyindexing",
            "alias icons",
            "full",
            "minrate500",
            "keepalive",
            "prod",
            "email",
            "apache http",
            "server",
            "timeout",
            "number",
            "minimal",
            "major",
            "addlanguage",
            "addcharset",
            "defaultlanguage",
            "fallback",
            "polish",
            "addlanguage pl",
            "catalan",
            "english",
            "greekmodern",
            "korean",
            "turkish",
            "browsermatch",
            "davlockdb",
            "requireany",
            "usergroup",
            "alias",
            "authtype digest",
            "davupload admin",
            "authuserfile",
            "errorhttp",
            "http",
            "yourincludepath",
            "apache version",
            "serversignature",
            "alias error",
            "addhandler",
            "threadsperchild",
            "startservers",
            "minsparethreads",
            "maxsparethreads",
            "maximum number",
            "pidfile",
            "mpms",
            "threadstacksize",
            "extendedstatus",
            "change",
            "sethandler",
            "require host",
            "get information",
            "allow server",
            "allow",
            "userdir sites",
            "control access",
            "userdir",
            "sslsessioncache",
            "configure",
            "ocsp stapling",
            "ssl engine",
            "sslrequire",
            "ssltls standard",
            "prng",
            "sslrandomseed",
            "openssl",
            "high",
            "first",
            "refer",
            "servername",
            "virtualhost 80",
            "serveradmin",
            "documentroot",
            "errorlog",
            "customlog",
            "hosts",
            "please",
            "almost",
            "loadfile c",
            "proxyhtmllinks",
            "ascii",
            "unicode",
            "windows",
            "must",
            "location",
            "w3c html",
            "directoryindex",
            "allowoverride",
            "manual",
            "provide access",
            "options indexes",
            "files",
            "removetype tr",
            "traditionally",
            "addlanguage da",
            "addtype",
            "a facility",
            "claim",
            "file",
            "level error",
            "sender",
            "store",
            "level",
            "facility",
            "category",
            "time",
            "host",
            "threadid",
            "function",
            "line",
            "message",
            "guest",
            "access",
            "kernel",
            "usereventagent",
            "springboard",
            "message sep",
            "message mc",
            "message secure",
            "ca message",
            "multitouchhid",
            "use directory",
            "home autohome",
            "automounter map",
            "get home",
            "ps1h",
            "make bash",
            "s checkwinsize",
            "etcbashrc",
            "termprogram",
            "level info",
            "broadcast",
            "ignore",
            "rules",
            "true",
            "t option",
            "mount",
            "force",
            "environment",
            "automountdenv",
            "promptcommand",
            "shellsessiondir",
            "histfile",
            "histfilesize",
            "terminal",
            "myvar",
            "histtimeformat",
            "arrange",
            "bashrematch",
            "tell",
            "limit",
            "order deny",
            "authtype",
            "default require",
            "require user",
            "owner",
            "authkey",
            "lpadmin",
            "order",
            "system",
            "local",
            "cups scheduler",
            "list",
            "synconclose no",
            "default user",
            "user lp",
            "group lp",
            "group value",
            "restrict access",
            "cups",
            "inpck",
            "nnnbaud",
            "berkeley",
            "parity",
            "pc entry",
            "pass8",
            "parenb istrip",
            "fixed speed",
            "entry",
            "clocal mode",
            "host database",
            "maxhistsize",
            "promptmode",
            "verbose end",
            "etcirbrcloaded",
            "default",
            "setup",
            "history file",
            "readline",
            "error",
            "searchpaths",
            "freebsd",
            "tmpdir",
            "fcodes",
            "prunepaths",
            "vartmp",
            "prunedirs",
            "filesystems",
            "status mailfrom",
            "returnpath via",
            "open directory",
            "jabber",
            "group database",
            "cyrus",
            "calendar",
            "dovecot",
            "postfix scsd",
            "networkd",
            "nroff",
            "manpath",
            "uncomment",
            "manpager",
            "whatispager",
            "manlocale",
            "every",
            "manpath optman",
            "maybe",
            "troff",
            "flags",
            "bcgjnuwz",
            "d0 j",
            "ldap defaults",
            "base dcexample",
            "uri ldap",
            "sizelimit",
            "timelimit",
            "deref",
            "syntax",
            "kerberos",
            "name",
            "corba object",
            "desc",
            "schema",
            "openldap",
            "redistribution",
            "public license",
            "license",
            "collective",
            "shall not",
            "ldap",
            "co llective",
            "equality",
            "sup name",
            "structural must",
            "singlevalue",
            "auxiliary must",
            "auxiliary may",
            "guid",
            "desc account",
            "desc mount",
            "desc password",
            "service",
            "info",
            "tiger",
            "multi",
            "d esc",
            "rfc1274",
            "structural may",
            "quality",
            "substr caseigno",
            "corba",
            "ldap directory",
            "reserved",
            "ldap server",
            "dynamic group",
            "netscape",
            "not recommended",
            "for production",
            "attribute",
            "name managedby",
            "name leaf",
            "duas",
            "internetdrafts",
            "coast",
            "project",
            "java object",
            "java class",
            "de sc",
            "pkcs",
            "inetorgperson",
            "rfc2798",
            "signeddata",
            "smime",
            "openldap note",
            "hold",
            "code",
            "java",
            "jndi reference",
            "jndi",
            "with syntax",
            "definitions",
            "kerberos v",
            "kdc schema",
            "oid base",
            "size",
            "subclass of",
            "may contain",
            "objectclass",
            "must contain",
            "matches for",
            "obsolete",
            "des c",
            "abstract must",
            "sup person",
            "microsoft",
            "advanced server",
            "schema mapping",
            "netinfo",
            "config",
            "groups",
            "netinfo preset",
            "crypt",
            "netinfo rpcs",
            "rpcs number",
            "oncrpcnumber",
            "ipnetmasknumber",
            "assistant",
            "may description",
            "rfc2307",
            "rfc2252",
            "match syntax",
            "openldaproot",
            "openldaporg",
            "openldapou",
            "equal ity",
            "kind",
            "rule",
            "attcertpath",
            "rolesyntax",
            "ldif",
            "blank",
            "ldap entry",
            "spaces",
            "cosine pilot",
            "directory forum",
            "password policy",
            "false",
            "april",
            "auxiliary",
            "passwd",
            "account",
            "desc pool",
            "unix",
            "structural",
            "sup rpcentry",
            "sup container",
            "abstract may",
            "sup ipsecbase",
            "Chelsea Manning Help Me",
            "Aishah Siti Lazim",
            "Aishah Lazim",
            "194 Green Street",
            "Human Subjects",
            "cybernetic",
            "RNA molecule",
            "matches",
            "postfix smtp",
            "domain",
            "ipv6 host",
            "reject",
            "reply",
            "prior",
            "bugs",
            "reject empty",
            "canonical",
            "tables",
            "post",
            "replace user",
            "address",
            "generic",
            "smtp",
            "isp mail",
            "mail delivery",
            "charset",
            "report",
            "postfix dsn",
            "mail returned",
            "only",
            "mime",
            "headerchecks",
            "readme files",
            "filters while",
            "posix",
            "empty",
            "body",
            "pass",
            "write",
            "date",
            "program",
            "agreement",
            "contributor",
            "recipient",
            "contribution",
            "the program",
            "corporation",
            "contributors",
            "product x",
            "as expressly",
            "arch",
            "arch x8664",
            "pipe wall",
            "wimplicit",
            "ranlib",
            "warn",
            "switch",
            "start",
            "systype",
            "smtp server",
            "specify",
            "mx host",
            "unix password",
            "user unknown",
            "pathbin",
            "postfix queue",
            "path",
            "beware",
            "class",
            "uucp",
            "shell",
            "outlook",
            "postfix master",
            "begin",
            "server admin",
            "mail backend",
            "modern smtp",
            "iana",
            "many",
            "postfix pipe",
            "recent cyrus",
            "amos gouaux",
            "old example",
            "update",
            "usrsbin",
            "file format",
            "no group",
            "daemondirectory",
            "relocated",
            "matches user",
            "synopsis",
            "or even",
            "lutz jaenicke",
            "technology",
            "cottbus",
            "germany",
            "openssl package",
            "openssl project",
            "europe",
            "remember that",
            "use of",
            "virtual",
            "virtual alias",
            "redirect mail",
            "deliver mail",
            "transport",
            "description",
            "result format",
            "bashno",
            "r etcbashrc",
            "protocol",
            "ipv6",
            "icmp",
            "cisco",
            "monitoring",
            "argus",
            "chaos",
            "rsvp",
            "encapsulation",
            "aris",
            "isis",
            "kame",
            "id key",
            "specification",
            "auto exit",
            "vpn socket",
            "networkup",
            "term",
            "devnull",
            "common setup",
            "set command",
            "sunnet manager",
            "rpcsrc",
            "netlicense",
            "apple",
            "netbootmount",
            "netbootshadow",
            "computername",
            "localonly",
            "localnetbootdir",
            "netboot",
            "define",
            "purpose",
            "networkonly",
            "waiting",
            "auditing",
            "solaris",
            "openbsm",
            "secsrvr",
            "allocation",
            "bsm event",
            "solaris kernel",
            "openbsm kernel",
            "solaris auemac",
            "solaris umount",
            "integer",
            "array",
            "data",
            "state",
            "opendirectoryd",
            "ipv4",
            "plist",
            "dict",
            "session",
            "commcenter",
            "airport",
            "cfbasichash",
            "thread",
            "cfrunloop",
            "cfrunloopmode",
            "usrbinsudo",
            "usrsbinnetbiosd",
            "removed"
          ],
          "references": [
            "afpovertcp.cfg",
            "aliases",
            "magic",
            "httpd.conf",
            "mime.types",
            "httpd-autoindex.conf",
            "httpd-default.conf",
            "httpd-languages.conf",
            "httpd-dav.conf",
            "httpd-multilang-errordoc.conf",
            "httpd-mpm.conf",
            "httpd-info.conf",
            "httpd-userdir.conf",
            "httpd-ssl.conf",
            "httpd-vhosts.conf",
            "proxy-html.conf",
            "httpd-manual.conf",
            "php7.conf",
            "mpm.conf",
            "com.apple.eventmonitor",
            "com.apple.authd",
            "com.apple.cdscheduler",
            "com.apple.contacts.ContactsAutocomplete",
            "com.apple.install",
            "com.apple.coreduetd",
            "com.apple.login.guest",
            "com.apple.mkb",
            "com.apple.mail",
            "com.apple.MessageTracer",
            "com.apple.mkb.internal",
            "com.apple.iokit.power",
            "com.apple.performance",
            "com.apple.networking.boringssl",
            "auto_master",
            "auto_home",
            "bashrc",
            "asl.conf",
            "autofs.conf",
            "bashrc_Apple_Terminal",
            "csh.cshrc",
            "csh.logout",
            "com.apple.screensharing.agent.launchd",
            "csh.login",
            "cupsd.conf",
            "cups-files.conf.default",
            "cupsd.conf.O",
            "cupsd.conf.default",
            "cups-files.conf",
            "snmp.conf",
            "snmp.conf.default",
            "dragonforce.io",
            "find.codes",
            "ftpusers",
            "hosts.equiv",
            "gettytab",
            "hosts",
            "kern_loader.conf",
            "irbrc",
            "locate.rc",
            "mail.rc",
            "group",
            "man.conf",
            "networks",
            "manpaths",
            "newsyslog.conf",
            "com.apple.slapconfig.conf",
            "files.conf",
            "com.apple.xscertd.conf",
            "wifi.conf",
            "com.apple.slapd.conf",
            "nfs.conf",
            "ntp.conf",
            "notify.conf",
            "ntp_opendirectory.conf",
            "AppleOpenLDAP.plist",
            "ldap.conf",
            "ldap.conf.default",
            "apple_auxillary.schema",
            "corba.ldif",
            "collective.schema",
            "collective.ldif",
            "core.ldif",
            "apple.schema",
            "cosine.ldif",
            "core.schema",
            "corba.schema",
            "duaconf.ldif",
            "dyngroup.ldif",
            "fmserver.schema",
            "duaconf.schema",
            "java.ldif",
            "inetorgperson.schema",
            "inetorgperson.ldif",
            "java.schema",
            "krb5-kdc.schema",
            "cosine.schema",
            "misc.ldif",
            "microsoft.std.schema",
            "misc.schema",
            "netinfo.schema",
            "nis.schema",
            "nis.ldif",
            "openldap.schema",
            "dyngroup.schema",
            "pmi.ldif",
            "ppolicy.ldif",
            "pmi.schema",
            "openldap.ldif",
            "README",
            "ppolicy.schema",
            "samba.schema",
            "microsoft.schema",
            "access",
            "custom_header_checks",
            "canonical",
            "generic",
            "bounce.cf.default",
            "header_checks",
            "LICENSE",
            "makedefs.out",
            "main.cf",
            "master.cf.default",
            "master.cf",
            "main.cf.proto",
            "master.cf.proto",
            "postfix-files",
            "relocated",
            "TLS_LICENSE",
            "virtual",
            "main.cf.default",
            "transport",
            "profile",
            "protocols",
            "racoon.conf",
            "rmtab",
            "rc.common",
            "rpc",
            "rtadvd.conf",
            "rc.netboot",
            "audit_class",
            "audit_warn",
            "audit_event",
            "audit_control"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America",
            "Bahrain",
            "Israel",
            "India"
          ],
          "malware_families": [
            {
              "id": "DirectoryIndex",
              "display_name": "DirectoryIndex",
              "target": null
            },
            {
              "id": "AllowOverride",
              "display_name": "AllowOverride",
              "target": null
            },
            {
              "id": "Malaysia, Truly Asia",
              "display_name": "Malaysia, Truly Asia",
              "target": null
            },
            {
              "id": "9002 RAT",
              "display_name": "9002 RAT",
              "target": null
            },
            {
              "id": "Virus:DOS/PSMPC_386",
              "display_name": "Virus:DOS/PSMPC_386",
              "target": "/malware/Virus:DOS/PSMPC_386"
            },
            {
              "id": "TEL:TrojanSpy:Win32/KediRat",
              "display_name": "TEL:TrojanSpy:Win32/KediRat",
              "target": null
            },
            {
              "id": "TrojanSpy:iOS/XcodeGhost",
              "display_name": "TrojanSpy:iOS/XcodeGhost",
              "target": "/malware/TrojanSpy:iOS/XcodeGhost"
            },
            {
              "id": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
              "display_name": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
              "target": null
            },
            {
              "id": "Ultra VNC",
              "display_name": "Ultra VNC",
              "target": null
            },
            {
              "id": "TrojanDownloader:Win32/Bridge",
              "display_name": "TrojanDownloader:Win32/Bridge",
              "target": "/malware/TrojanDownloader:Win32/Bridge"
            },
            {
              "id": "Virus:DOS/Cyberwar_5300",
              "display_name": "Virus:DOS/Cyberwar_5300",
              "target": "/malware/Virus:DOS/Cyberwar_5300"
            },
            {
              "id": "Backdoor:Win32/Espion",
              "display_name": "Backdoor:Win32/Espion",
              "target": "/malware/Backdoor:Win32/Espion"
            },
            {
              "id": "Pegasus for iOS - S0289",
              "display_name": "Pegasus for iOS - S0289",
              "target": null
            },
            {
              "id": "Pegasus - MOB-S0005",
              "display_name": "Pegasus - MOB-S0005",
              "target": null
            },
            {
              "id": "Pegasus for Android - S0316",
              "display_name": "Pegasus for Android - S0316",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
              "display_name": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:BackdoorLinux/Mirai",
              "display_name": "ALF:HeraklezEval:BackdoorLinux/Mirai",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
              "display_name": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1564",
              "name": "Hide Artifacts",
              "display_name": "T1564 - Hide Artifacts"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1562",
              "name": "Impair Defenses",
              "display_name": "T1562 - Impair Defenses"
            },
            {
              "id": "T1543",
              "name": "Create or Modify System Process",
              "display_name": "T1543 - Create or Modify System Process"
            },
            {
              "id": "T1003",
              "name": "OS Credential Dumping",
              "display_name": "T1003 - OS Credential Dumping"
            },
            {
              "id": "T1070",
              "name": "Indicator Removal on Host",
              "display_name": "T1070 - Indicator Removal on Host"
            },
            {
              "id": "T1404",
              "name": "Exploit OS Vulnerability",
              "display_name": "T1404 - Exploit OS Vulnerability"
            },
            {
              "id": "T1445",
              "name": "Abuse of iOS Enterprise App Signing Key",
              "display_name": "T1445 - Abuse of iOS Enterprise App Signing Key"
            },
            {
              "id": "T1001.002",
              "name": "Steganography",
              "display_name": "T1001.002 - Steganography"
            },
            {
              "id": "T1003.004",
              "name": "LSA Secrets",
              "display_name": "T1003.004 - LSA Secrets"
            },
            {
              "id": "T1001.001",
              "name": "Junk Data",
              "display_name": "T1001.001 - Junk Data"
            },
            {
              "id": "T1003.001",
              "name": "LSASS Memory",
              "display_name": "T1003.001 - LSASS Memory"
            },
            {
              "id": "T1003.005",
              "name": "Cached Domain Credentials",
              "display_name": "T1003.005 - Cached Domain Credentials"
            },
            {
              "id": "T1001.003",
              "name": "Protocol Impersonation",
              "display_name": "T1001.003 - Protocol Impersonation"
            },
            {
              "id": "T1026",
              "name": "Multiband Communication",
              "display_name": "T1026 - Multiband Communication"
            },
            {
              "id": "T1562.004",
              "name": "Disable or Modify System Firewall",
              "display_name": "T1562.004 - Disable or Modify System Firewall"
            },
            {
              "id": "T1025",
              "name": "Data from Removable Media",
              "display_name": "T1025 - Data from Removable Media"
            },
            {
              "id": "T1055.002",
              "name": "Portable Executable Injection",
              "display_name": "T1055.002 - Portable Executable Injection"
            },
            {
              "id": "T1018",
              "name": "Remote System Discovery",
              "display_name": "T1018 - Remote System Discovery"
            },
            {
              "id": "T1021.006",
              "name": "Windows Remote Management",
              "display_name": "T1021.006 - Windows Remote Management"
            },
            {
              "id": "T1021",
              "name": "Remote Services",
              "display_name": "T1021 - Remote Services"
            }
          ],
          "industries": [
            "Media",
            "LGBTQ+ Activists",
            "Technology",
            "Telecommunications",
            "Hospitality",
            "Energy",
            "NGO",
            "Semiconductor",
            "Human Subjects"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 35,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "ravescoutllc.",
            "id": "288912",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 669,
            "URL": 1976,
            "email": 21,
            "hostname": 1198,
            "FileHash-SHA256": 277,
            "CVE": 2,
            "CIDR": 3
          },
          "indicator_count": 4146,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 35,
          "modified_text": "549 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "671fd3afa974b93284d6bac1",
          "name": "dragonforce.io",
          "description": "Throw your MacBook in the trash, where the hackers belong.",
          "modified": "2024-11-27T17:01:13.516000",
          "created": "2024-10-28T18:10:55.712000",
          "tags": [
            "copyright",
            "apple computer",
            "tcpip",
            "supported",
            "quantum",
            "postfix",
            "mail",
            "aliases",
            "postfix version",
            "restrict",
            "wietse venema",
            "sample",
            "note",
            "person",
            "basic system",
            "general",
            "column",
            "tiff",
            "linus walleij",
            "triad",
            "greg roelofs",
            "html",
            "daniel quinlan",
            "aiff",
            "music",
            "wave",
            "formats",
            "magic",
            "form",
            "crunch",
            "freeze",
            "maker",
            "format",
            "postscript",
            "this",
            "ifmodule",
            "include",
            "virtualhost",
            "directory",
            "require",
            "serverroot",
            "listen",
            "ifdefine",
            "loadmodule",
            "errordocument",
            "apache",
            "win32",
            "example",
            "main",
            "webdav",
            "internet",
            "mime type",
            "xlm xla",
            "xlc xlt",
            "xlam",
            "xlsb",
            "xlsm",
            "xltm",
            "z7 z8",
            "xhtml xht",
            "addiconbytype",
            "adddescription",
            "fancyindexed",
            "gzip",
            "indexignore",
            "indexes",
            "versionsort",
            "fancyindexing",
            "alias icons",
            "full",
            "minrate500",
            "keepalive",
            "prod",
            "email",
            "apache http",
            "server",
            "timeout",
            "number",
            "minimal",
            "major",
            "addlanguage",
            "addcharset",
            "defaultlanguage",
            "fallback",
            "polish",
            "addlanguage pl",
            "catalan",
            "english",
            "greekmodern",
            "korean",
            "turkish",
            "browsermatch",
            "davlockdb",
            "requireany",
            "usergroup",
            "alias",
            "authtype digest",
            "davupload admin",
            "authuserfile",
            "errorhttp",
            "http",
            "yourincludepath",
            "apache version",
            "serversignature",
            "alias error",
            "addhandler",
            "threadsperchild",
            "startservers",
            "minsparethreads",
            "maxsparethreads",
            "maximum number",
            "pidfile",
            "mpms",
            "threadstacksize",
            "extendedstatus",
            "change",
            "sethandler",
            "require host",
            "get information",
            "allow server",
            "allow",
            "userdir sites",
            "control access",
            "userdir",
            "sslsessioncache",
            "configure",
            "ocsp stapling",
            "ssl engine",
            "sslrequire",
            "ssltls standard",
            "prng",
            "sslrandomseed",
            "openssl",
            "high",
            "first",
            "refer",
            "servername",
            "virtualhost 80",
            "serveradmin",
            "documentroot",
            "errorlog",
            "customlog",
            "hosts",
            "please",
            "almost",
            "loadfile c",
            "proxyhtmllinks",
            "ascii",
            "unicode",
            "windows",
            "must",
            "location",
            "w3c html",
            "directoryindex",
            "allowoverride",
            "manual",
            "provide access",
            "options indexes",
            "files",
            "removetype tr",
            "traditionally",
            "addlanguage da",
            "addtype",
            "a facility",
            "claim",
            "file",
            "level error",
            "sender",
            "store",
            "level",
            "facility",
            "category",
            "time",
            "host",
            "threadid",
            "function",
            "line",
            "message",
            "guest",
            "access",
            "kernel",
            "usereventagent",
            "springboard",
            "message sep",
            "message mc",
            "message secure",
            "ca message",
            "multitouchhid",
            "use directory",
            "home autohome",
            "automounter map",
            "get home",
            "ps1h",
            "make bash",
            "s checkwinsize",
            "etcbashrc",
            "termprogram",
            "level info",
            "broadcast",
            "ignore",
            "rules",
            "true",
            "t option",
            "mount",
            "force",
            "environment",
            "automountdenv",
            "promptcommand",
            "shellsessiondir",
            "histfile",
            "histfilesize",
            "terminal",
            "myvar",
            "histtimeformat",
            "arrange",
            "bashrematch",
            "tell",
            "limit",
            "order deny",
            "authtype",
            "default require",
            "require user",
            "owner",
            "authkey",
            "lpadmin",
            "order",
            "system",
            "local",
            "cups scheduler",
            "list",
            "synconclose no",
            "default user",
            "user lp",
            "group lp",
            "group value",
            "restrict access",
            "cups",
            "inpck",
            "nnnbaud",
            "berkeley",
            "parity",
            "pc entry",
            "pass8",
            "parenb istrip",
            "fixed speed",
            "entry",
            "clocal mode",
            "host database",
            "maxhistsize",
            "promptmode",
            "verbose end",
            "etcirbrcloaded",
            "default",
            "setup",
            "history file",
            "readline",
            "error",
            "searchpaths",
            "freebsd",
            "tmpdir",
            "fcodes",
            "prunepaths",
            "vartmp",
            "prunedirs",
            "filesystems",
            "status mailfrom",
            "returnpath via",
            "open directory",
            "jabber",
            "group database",
            "cyrus",
            "calendar",
            "dovecot",
            "postfix scsd",
            "networkd",
            "nroff",
            "manpath",
            "uncomment",
            "manpager",
            "whatispager",
            "manlocale",
            "every",
            "manpath optman",
            "maybe",
            "troff",
            "flags",
            "bcgjnuwz",
            "d0 j",
            "ldap defaults",
            "base dcexample",
            "uri ldap",
            "sizelimit",
            "timelimit",
            "deref",
            "syntax",
            "kerberos",
            "name",
            "corba object",
            "desc",
            "schema",
            "openldap",
            "redistribution",
            "public license",
            "license",
            "collective",
            "shall not",
            "ldap",
            "co llective",
            "equality",
            "sup name",
            "structural must",
            "singlevalue",
            "auxiliary must",
            "auxiliary may",
            "guid",
            "desc account",
            "desc mount",
            "desc password",
            "service",
            "info",
            "tiger",
            "multi",
            "d esc",
            "rfc1274",
            "structural may",
            "quality",
            "substr caseigno",
            "corba",
            "ldap directory",
            "reserved",
            "ldap server",
            "dynamic group",
            "netscape",
            "not recommended",
            "for production",
            "attribute",
            "name managedby",
            "name leaf",
            "duas",
            "internetdrafts",
            "coast",
            "project",
            "java object",
            "java class",
            "de sc",
            "pkcs",
            "inetorgperson",
            "rfc2798",
            "signeddata",
            "smime",
            "openldap note",
            "hold",
            "code",
            "java",
            "jndi reference",
            "jndi",
            "with syntax",
            "definitions",
            "kerberos v",
            "kdc schema",
            "oid base",
            "size",
            "subclass of",
            "may contain",
            "objectclass",
            "must contain",
            "matches for",
            "obsolete",
            "des c",
            "abstract must",
            "sup person",
            "microsoft",
            "advanced server",
            "schema mapping",
            "netinfo",
            "config",
            "groups",
            "netinfo preset",
            "crypt",
            "netinfo rpcs",
            "rpcs number",
            "oncrpcnumber",
            "ipnetmasknumber",
            "assistant",
            "may description",
            "rfc2307",
            "rfc2252",
            "match syntax",
            "openldaproot",
            "openldaporg",
            "openldapou",
            "equal ity",
            "kind",
            "rule",
            "attcertpath",
            "rolesyntax",
            "ldif",
            "blank",
            "ldap entry",
            "spaces",
            "cosine pilot",
            "directory forum",
            "password policy",
            "false",
            "april",
            "auxiliary",
            "passwd",
            "account",
            "desc pool",
            "unix",
            "structural",
            "sup rpcentry",
            "sup container",
            "abstract may",
            "sup ipsecbase",
            "Chelsea Manning Help Me",
            "Aishah Siti Lazim",
            "Aishah Lazim",
            "194 Green Street",
            "Human Subjects",
            "cybernetic",
            "RNA molecule",
            "matches",
            "postfix smtp",
            "domain",
            "ipv6 host",
            "reject",
            "reply",
            "prior",
            "bugs",
            "reject empty",
            "canonical",
            "tables",
            "post",
            "replace user",
            "address",
            "generic",
            "smtp",
            "isp mail",
            "mail delivery",
            "charset",
            "report",
            "postfix dsn",
            "mail returned",
            "only",
            "mime",
            "headerchecks",
            "readme files",
            "filters while",
            "posix",
            "empty",
            "body",
            "pass",
            "write",
            "date",
            "program",
            "agreement",
            "contributor",
            "recipient",
            "contribution",
            "the program",
            "corporation",
            "contributors",
            "product x",
            "as expressly",
            "arch",
            "arch x8664",
            "pipe wall",
            "wimplicit",
            "ranlib",
            "warn",
            "switch",
            "start",
            "systype",
            "smtp server",
            "specify",
            "mx host",
            "unix password",
            "user unknown",
            "pathbin",
            "postfix queue",
            "path",
            "beware",
            "class",
            "uucp",
            "shell",
            "outlook",
            "postfix master",
            "begin",
            "server admin",
            "mail backend",
            "modern smtp",
            "iana",
            "many",
            "postfix pipe",
            "recent cyrus",
            "amos gouaux",
            "old example",
            "update",
            "usrsbin",
            "file format",
            "no group",
            "daemondirectory",
            "relocated",
            "matches user",
            "synopsis",
            "or even",
            "lutz jaenicke",
            "technology",
            "cottbus",
            "germany",
            "openssl package",
            "openssl project",
            "europe",
            "remember that",
            "use of",
            "virtual",
            "virtual alias",
            "redirect mail",
            "deliver mail",
            "transport",
            "description",
            "result format",
            "bashno",
            "r etcbashrc",
            "protocol",
            "ipv6",
            "icmp",
            "cisco",
            "monitoring",
            "argus",
            "chaos",
            "rsvp",
            "encapsulation",
            "aris",
            "isis",
            "kame",
            "id key",
            "specification",
            "auto exit",
            "vpn socket",
            "networkup",
            "term",
            "devnull",
            "common setup",
            "set command",
            "sunnet manager",
            "rpcsrc",
            "netlicense",
            "apple",
            "netbootmount",
            "netbootshadow",
            "computername",
            "localonly",
            "localnetbootdir",
            "netboot",
            "define",
            "purpose",
            "networkonly",
            "waiting",
            "auditing",
            "solaris",
            "openbsm",
            "secsrvr",
            "allocation",
            "bsm event",
            "solaris kernel",
            "openbsm kernel",
            "solaris auemac",
            "solaris umount",
            "integer",
            "array",
            "data",
            "state",
            "opendirectoryd",
            "ipv4",
            "plist",
            "dict",
            "session",
            "commcenter",
            "airport",
            "cfbasichash",
            "thread",
            "cfrunloop",
            "cfrunloopmode",
            "usrbinsudo",
            "usrsbinnetbiosd",
            "removed"
          ],
          "references": [
            "afpovertcp.cfg",
            "aliases",
            "magic",
            "httpd.conf",
            "mime.types",
            "httpd-autoindex.conf",
            "httpd-default.conf",
            "httpd-languages.conf",
            "httpd-dav.conf",
            "httpd-multilang-errordoc.conf",
            "httpd-mpm.conf",
            "httpd-info.conf",
            "httpd-userdir.conf",
            "httpd-ssl.conf",
            "httpd-vhosts.conf",
            "proxy-html.conf",
            "httpd-manual.conf",
            "php7.conf",
            "mpm.conf",
            "com.apple.eventmonitor",
            "com.apple.authd",
            "com.apple.cdscheduler",
            "com.apple.contacts.ContactsAutocomplete",
            "com.apple.install",
            "com.apple.coreduetd",
            "com.apple.login.guest",
            "com.apple.mkb",
            "com.apple.mail",
            "com.apple.MessageTracer",
            "com.apple.mkb.internal",
            "com.apple.iokit.power",
            "com.apple.performance",
            "com.apple.networking.boringssl",
            "auto_master",
            "auto_home",
            "bashrc",
            "asl.conf",
            "autofs.conf",
            "bashrc_Apple_Terminal",
            "csh.cshrc",
            "csh.logout",
            "com.apple.screensharing.agent.launchd",
            "csh.login",
            "cupsd.conf",
            "cups-files.conf.default",
            "cupsd.conf.O",
            "cupsd.conf.default",
            "cups-files.conf",
            "snmp.conf",
            "snmp.conf.default",
            "dragonforce.io",
            "find.codes",
            "ftpusers",
            "hosts.equiv",
            "gettytab",
            "hosts",
            "kern_loader.conf",
            "irbrc",
            "locate.rc",
            "mail.rc",
            "group",
            "man.conf",
            "networks",
            "manpaths",
            "newsyslog.conf",
            "com.apple.slapconfig.conf",
            "files.conf",
            "com.apple.xscertd.conf",
            "wifi.conf",
            "com.apple.slapd.conf",
            "nfs.conf",
            "ntp.conf",
            "notify.conf",
            "ntp_opendirectory.conf",
            "AppleOpenLDAP.plist",
            "ldap.conf",
            "ldap.conf.default",
            "apple_auxillary.schema",
            "corba.ldif",
            "collective.schema",
            "collective.ldif",
            "core.ldif",
            "apple.schema",
            "cosine.ldif",
            "core.schema",
            "corba.schema",
            "duaconf.ldif",
            "dyngroup.ldif",
            "fmserver.schema",
            "duaconf.schema",
            "java.ldif",
            "inetorgperson.schema",
            "inetorgperson.ldif",
            "java.schema",
            "krb5-kdc.schema",
            "cosine.schema",
            "misc.ldif",
            "microsoft.std.schema",
            "misc.schema",
            "netinfo.schema",
            "nis.schema",
            "nis.ldif",
            "openldap.schema",
            "dyngroup.schema",
            "pmi.ldif",
            "ppolicy.ldif",
            "pmi.schema",
            "openldap.ldif",
            "README",
            "ppolicy.schema",
            "samba.schema",
            "microsoft.schema",
            "access",
            "custom_header_checks",
            "canonical",
            "generic",
            "bounce.cf.default",
            "header_checks",
            "LICENSE",
            "makedefs.out",
            "main.cf",
            "master.cf.default",
            "master.cf",
            "main.cf.proto",
            "master.cf.proto",
            "postfix-files",
            "relocated",
            "TLS_LICENSE",
            "virtual",
            "main.cf.default",
            "transport",
            "profile",
            "protocols",
            "racoon.conf",
            "rmtab",
            "rc.common",
            "rpc",
            "rtadvd.conf",
            "rc.netboot",
            "audit_class",
            "audit_warn",
            "audit_event",
            "audit_control"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America",
            "Bahrain",
            "Israel",
            "India"
          ],
          "malware_families": [
            {
              "id": "DirectoryIndex",
              "display_name": "DirectoryIndex",
              "target": null
            },
            {
              "id": "AllowOverride",
              "display_name": "AllowOverride",
              "target": null
            },
            {
              "id": "Malaysia, Truly Asia",
              "display_name": "Malaysia, Truly Asia",
              "target": null
            },
            {
              "id": "9002 RAT",
              "display_name": "9002 RAT",
              "target": null
            },
            {
              "id": "Virus:DOS/PSMPC_386",
              "display_name": "Virus:DOS/PSMPC_386",
              "target": "/malware/Virus:DOS/PSMPC_386"
            },
            {
              "id": "TEL:TrojanSpy:Win32/KediRat",
              "display_name": "TEL:TrojanSpy:Win32/KediRat",
              "target": null
            },
            {
              "id": "TrojanSpy:iOS/XcodeGhost",
              "display_name": "TrojanSpy:iOS/XcodeGhost",
              "target": "/malware/TrojanSpy:iOS/XcodeGhost"
            },
            {
              "id": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
              "display_name": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
              "target": null
            },
            {
              "id": "Ultra VNC",
              "display_name": "Ultra VNC",
              "target": null
            },
            {
              "id": "TrojanDownloader:Win32/Bridge",
              "display_name": "TrojanDownloader:Win32/Bridge",
              "target": "/malware/TrojanDownloader:Win32/Bridge"
            },
            {
              "id": "Virus:DOS/Cyberwar_5300",
              "display_name": "Virus:DOS/Cyberwar_5300",
              "target": "/malware/Virus:DOS/Cyberwar_5300"
            },
            {
              "id": "Backdoor:Win32/Espion",
              "display_name": "Backdoor:Win32/Espion",
              "target": "/malware/Backdoor:Win32/Espion"
            },
            {
              "id": "Pegasus for iOS - S0289",
              "display_name": "Pegasus for iOS - S0289",
              "target": null
            },
            {
              "id": "Pegasus - MOB-S0005",
              "display_name": "Pegasus - MOB-S0005",
              "target": null
            },
            {
              "id": "Pegasus for Android - S0316",
              "display_name": "Pegasus for Android - S0316",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
              "display_name": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:BackdoorLinux/Mirai",
              "display_name": "ALF:HeraklezEval:BackdoorLinux/Mirai",
              "target": null
            },
            {
              "id": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
              "display_name": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1564",
              "name": "Hide Artifacts",
              "display_name": "T1564 - Hide Artifacts"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1562",
              "name": "Impair Defenses",
              "display_name": "T1562 - Impair Defenses"
            },
            {
              "id": "T1543",
              "name": "Create or Modify System Process",
              "display_name": "T1543 - Create or Modify System Process"
            },
            {
              "id": "T1003",
              "name": "OS Credential Dumping",
              "display_name": "T1003 - OS Credential Dumping"
            },
            {
              "id": "T1070",
              "name": "Indicator Removal on Host",
              "display_name": "T1070 - Indicator Removal on Host"
            },
            {
              "id": "T1404",
              "name": "Exploit OS Vulnerability",
              "display_name": "T1404 - Exploit OS Vulnerability"
            },
            {
              "id": "T1445",
              "name": "Abuse of iOS Enterprise App Signing Key",
              "display_name": "T1445 - Abuse of iOS Enterprise App Signing Key"
            },
            {
              "id": "T1001.002",
              "name": "Steganography",
              "display_name": "T1001.002 - Steganography"
            },
            {
              "id": "T1003.004",
              "name": "LSA Secrets",
              "display_name": "T1003.004 - LSA Secrets"
            },
            {
              "id": "T1001.001",
              "name": "Junk Data",
              "display_name": "T1001.001 - Junk Data"
            },
            {
              "id": "T1003.001",
              "name": "LSASS Memory",
              "display_name": "T1003.001 - LSASS Memory"
            },
            {
              "id": "T1003.005",
              "name": "Cached Domain Credentials",
              "display_name": "T1003.005 - Cached Domain Credentials"
            },
            {
              "id": "T1001.003",
              "name": "Protocol Impersonation",
              "display_name": "T1001.003 - Protocol Impersonation"
            },
            {
              "id": "T1026",
              "name": "Multiband Communication",
              "display_name": "T1026 - Multiband Communication"
            },
            {
              "id": "T1562.004",
              "name": "Disable or Modify System Firewall",
              "display_name": "T1562.004 - Disable or Modify System Firewall"
            },
            {
              "id": "T1025",
              "name": "Data from Removable Media",
              "display_name": "T1025 - Data from Removable Media"
            },
            {
              "id": "T1055.002",
              "name": "Portable Executable Injection",
              "display_name": "T1055.002 - Portable Executable Injection"
            },
            {
              "id": "T1018",
              "name": "Remote System Discovery",
              "display_name": "T1018 - Remote System Discovery"
            },
            {
              "id": "T1021.006",
              "name": "Windows Remote Management",
              "display_name": "T1021.006 - Windows Remote Management"
            },
            {
              "id": "T1021",
              "name": "Remote Services",
              "display_name": "T1021 - Remote Services"
            }
          ],
          "industries": [
            "Media",
            "LGBTQ+ Activists",
            "Technology",
            "Telecommunications",
            "Hospitality",
            "Energy",
            "NGO",
            "Semiconductor",
            "Human Subjects"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 34,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "ravescoutllc.",
            "id": "288912",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 669,
            "URL": 1976,
            "email": 21,
            "hostname": 1198,
            "FileHash-SHA256": 277,
            "CVE": 2,
            "CIDR": 3
          },
          "indicator_count": 4146,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 33,
          "modified_text": "549 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64dc6fef08ab71bf5dfa993c",
          "name": "Tyler Mashburn",
          "description": "",
          "modified": "2024-01-01T00:10:41.234000",
          "created": "2023-08-16T06:42:55.773000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": "64d55df2bb8a8a3f210bb0c9",
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Ibewmashburn@icloud",
            "id": "248545",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 2,
            "URL": 3,
            "domain": 2,
            "email": 3
          },
          "indicator_count": 10,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 30,
          "modified_text": "881 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a1aa360cc88cf348557b",
          "name": "InQuest - 06-09-2023",
          "description": "",
          "modified": "2023-12-06T16:30:34.009000",
          "created": "2023-12-06T16:30:34.009000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 257,
            "hostname": 208,
            "FileHash-MD5": 979,
            "URL": 745,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3286,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a185efc1841f0d8cae24",
          "name": "InQuest - 05-09-2023",
          "description": "",
          "modified": "2023-12-06T16:29:57.462000",
          "created": "2023-12-06T16:29:57.462000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 255,
            "hostname": 206,
            "FileHash-MD5": 1000,
            "URL": 724,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3282,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a1822e97b9fce90093c2",
          "name": "InQuest - 04-09-2023",
          "description": "",
          "modified": "2023-12-06T16:29:54.091000",
          "created": "2023-12-06T16:29:54.091000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 258,
            "hostname": 206,
            "FileHash-MD5": 1000,
            "URL": 732,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3293,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a17da4ef145116f15938",
          "name": "InQuest - 03-09-2023",
          "description": "",
          "modified": "2023-12-06T16:29:49.347000",
          "created": "2023-12-06T16:29:49.347000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 264,
            "hostname": 205,
            "FileHash-MD5": 998,
            "URL": 736,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3300,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a179d3ae1a152a8840a8",
          "name": "InQuest - 02-09-2023",
          "description": "",
          "modified": "2023-12-06T16:29:45.407000",
          "created": "2023-12-06T16:29:45.407000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 255,
            "hostname": 205,
            "FileHash-MD5": 998,
            "URL": 723,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3278,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a13dd08c5fb937175f50",
          "name": "InQuest - 01-09-2023",
          "description": "",
          "modified": "2023-12-06T16:28:45.779000",
          "created": "2023-12-06T16:28:45.779000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 255,
            "hostname": 205,
            "FileHash-MD5": 998,
            "URL": 723,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3278,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a135e7d74f25c209652c",
          "name": "InQuest - 31-08-2023",
          "description": "",
          "modified": "2023-12-06T16:28:37.773000",
          "created": "2023-12-06T16:28:37.773000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 264,
            "hostname": 205,
            "FileHash-MD5": 998,
            "URL": 736,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3300,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a12ca0652458c6534f1d",
          "name": "InQuest - 30-08-2023",
          "description": "",
          "modified": "2023-12-06T16:28:28.885000",
          "created": "2023-12-06T16:28:28.885000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 520,
            "domain": 271,
            "hostname": 205,
            "FileHash-MD5": 968,
            "URL": 729,
            "FileHash-SHA1": 597
          },
          "indicator_count": 3290,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a121970ec6097f14145c",
          "name": "InQuest - 29-08-2023",
          "description": "",
          "modified": "2023-12-06T16:28:17.914000",
          "created": "2023-12-06T16:28:17.914000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 528,
            "domain": 215,
            "hostname": 244,
            "FileHash-MD5": 998,
            "URL": 724,
            "FileHash-SHA1": 603
          },
          "indicator_count": 3312,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a10da48ef5014cd9e478",
          "name": "InQuest - 28-08-2023",
          "description": "",
          "modified": "2023-12-06T16:27:57.494000",
          "created": "2023-12-06T16:27:57.494000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 435,
            "FileHash-SHA256": 498,
            "hostname": 284,
            "FileHash-MD5": 587,
            "URL": 1157,
            "FileHash-SHA1": 130
          },
          "indicator_count": 3091,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a1025f19b27aafa1c705",
          "name": "InQuest - 27-08-2023",
          "description": "",
          "modified": "2023-12-06T16:27:46.540000",
          "created": "2023-12-06T16:27:46.540000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 432,
            "FileHash-SHA256": 409,
            "hostname": 295,
            "FileHash-MD5": 590,
            "URL": 1171,
            "FileHash-SHA1": 130
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a0f2b55816611379fc75",
          "name": "InQuest - 26-08-2023",
          "description": "",
          "modified": "2023-12-06T16:27:30.200000",
          "created": "2023-12-06T16:27:30.200000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 432,
            "FileHash-SHA256": 409,
            "hostname": 295,
            "FileHash-MD5": 590,
            "URL": 1171,
            "FileHash-SHA1": 130
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a0ce0f08bbc22b5f90c9",
          "name": "InQuest - 25-08-2023",
          "description": "",
          "modified": "2023-12-06T16:26:54.844000",
          "created": "2023-12-06T16:26:54.844000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 432,
            "FileHash-SHA256": 409,
            "hostname": 295,
            "FileHash-MD5": 590,
            "URL": 1171,
            "FileHash-SHA1": 130
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6570a0c269092274d6ba0e35",
          "name": "InQuest - 24-08-2023",
          "description": "",
          "modified": "2023-12-06T16:26:42.076000",
          "created": "2023-12-06T16:26:42.076000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 432,
            "FileHash-SHA256": 410,
            "hostname": 305,
            "FileHash-MD5": 586,
            "URL": 1171,
            "FileHash-SHA1": 126
          },
          "indicator_count": 3030,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f90c8c68d2d8366df66981",
          "name": "InQuest - 06-09-2023",
          "description": "",
          "modified": "2023-10-06T23:03:14.766000",
          "created": "2023-09-06T23:34:36.647000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "FileHash-MD5": 979,
            "hostname": 208,
            "URL": 745,
            "domain": 257,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3286,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "967 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f7bc72da7bffbd3eb1d0cd",
          "name": "InQuest - 05-09-2023",
          "description": "",
          "modified": "2023-10-05T23:01:12.461000",
          "created": "2023-09-05T23:40:34.790000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "FileHash-SHA1": 539,
            "FileHash-MD5": 1000,
            "hostname": 206,
            "URL": 724,
            "domain": 255
          },
          "indicator_count": 3282,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "968 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f66a333369a8f8533c7b6f",
          "name": "InQuest - 04-09-2023",
          "description": "",
          "modified": "2023-10-04T23:04:05.846000",
          "created": "2023-09-04T23:37:23.965000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "FileHash-MD5": 1000,
            "URL": 732,
            "hostname": 206,
            "domain": 258,
            "FileHash-SHA1": 539
          },
          "indicator_count": 3293,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1624,
          "modified_text": "969 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f518963e4703ce1d90d5c1",
          "name": "InQuest - 03-09-2023",
          "description": "",
          "modified": "2023-10-03T23:00:28",
          "created": "2023-09-03T23:36:54.275000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 264,
            "URL": 736,
            "FileHash-MD5": 998,
            "FileHash-SHA1": 539,
            "hostname": 205
          },
          "indicator_count": 3300,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1622,
          "modified_text": "970 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f3c77a6916c53d3554cbf0",
          "name": "InQuest - 02-09-2023",
          "description": "",
          "modified": "2023-10-02T23:05:27.575000",
          "created": "2023-09-02T23:38:34.696000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 16,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 255,
            "URL": 723,
            "FileHash-MD5": 998,
            "FileHash-SHA1": 539,
            "hostname": 205
          },
          "indicator_count": 3278,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1622,
          "modified_text": "971 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f275999e7cd850bbe0559f",
          "name": "InQuest - 01-09-2023",
          "description": "",
          "modified": "2023-10-01T23:00:17.810000",
          "created": "2023-09-01T23:36:57.590000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 15,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 255,
            "URL": 723,
            "FileHash-MD5": 998,
            "FileHash-SHA1": 539,
            "hostname": 205
          },
          "indicator_count": 3278,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1621,
          "modified_text": "972 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64f124b9e9f823e6fe3c4484",
          "name": "InQuest - 31-08-2023",
          "description": "",
          "modified": "2023-09-30T23:05:04.433000",
          "created": "2023-08-31T23:39:37.388000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 558,
            "domain": 264,
            "URL": 736,
            "FileHash-MD5": 998,
            "FileHash-SHA1": 539,
            "hostname": 205
          },
          "indicator_count": 3300,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "973 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64efd394eeaaf4e16e10cf99",
          "name": "InQuest - 30-08-2023",
          "description": "",
          "modified": "2023-09-29T23:05:34.777000",
          "created": "2023-08-30T23:41:08.937000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 271,
            "URL": 729,
            "FileHash-SHA256": 520,
            "FileHash-MD5": 968,
            "FileHash-SHA1": 597,
            "hostname": 205
          },
          "indicator_count": 3290,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "974 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ee81c78b8e43abe567fe48",
          "name": "InQuest - 29-08-2023",
          "description": "",
          "modified": "2023-09-28T23:02:46.957000",
          "created": "2023-08-29T23:39:51.628000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 12,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 215,
            "URL": 724,
            "FileHash-SHA256": 528,
            "FileHash-SHA1": 603,
            "FileHash-MD5": 998,
            "hostname": 244
          },
          "indicator_count": 3312,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1622,
          "modified_text": "975 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ed30738598093319da3800",
          "name": "InQuest - 28-08-2023",
          "description": "",
          "modified": "2023-09-27T23:02:22.908000",
          "created": "2023-08-28T23:40:35.967000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 12,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 435,
            "URL": 1157,
            "FileHash-SHA256": 498,
            "hostname": 284,
            "FileHash-MD5": 587,
            "FileHash-SHA1": 130
          },
          "indicator_count": 3091,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "976 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ebdf066fe205bf143ae522",
          "name": "InQuest - 27-08-2023",
          "description": "",
          "modified": "2023-09-26T23:02:04.122000",
          "created": "2023-08-27T23:40:54.430000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 15,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 409,
            "domain": 432,
            "URL": 1171,
            "hostname": 295,
            "FileHash-SHA1": 130,
            "FileHash-MD5": 590
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1621,
          "modified_text": "977 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ea8dd077cd9c3e91963d61",
          "name": "InQuest - 26-08-2023",
          "description": "",
          "modified": "2023-09-25T23:01:30.471000",
          "created": "2023-08-26T23:42:08.178000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 17,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 409,
            "domain": 432,
            "URL": 1171,
            "hostname": 295,
            "FileHash-SHA1": 130,
            "FileHash-MD5": 590
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1621,
          "modified_text": "978 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64e93bd951f0516678c93051",
          "name": "InQuest - 25-08-2023",
          "description": "",
          "modified": "2023-09-24T23:02:17.815000",
          "created": "2023-08-25T23:40:09.517000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 409,
            "domain": 432,
            "URL": 1171,
            "hostname": 295,
            "FileHash-SHA1": 130,
            "FileHash-MD5": 590
          },
          "indicator_count": 3027,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1621,
          "modified_text": "979 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64e7eaa597de176e1181ef21",
          "name": "InQuest - 24-08-2023",
          "description": "",
          "modified": "2023-09-23T23:00:36.707000",
          "created": "2023-08-24T23:41:25.417000",
          "tags": [],
          "references": [
            "https://labs.inquest.net/iocdb"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 410,
            "domain": 432,
            "URL": 1171,
            "FileHash-MD5": 586,
            "hostname": 305,
            "FileHash-SHA1": 126
          },
          "indicator_count": 3030,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1621,
          "modified_text": "980 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ed81509070c4359c9834c6",
          "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study",
          "description": "",
          "modified": "2023-08-29T05:25:36.966000",
          "created": "2023-08-29T05:25:36.966000",
          "tags": [
            "deepdns",
            "dns tunneling",
            "coinloader",
            "sunburst"
          ],
          "references": [
            "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1572",
              "name": "Protocol Tunneling",
              "display_name": "T1572 - Protocol Tunneling"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": "64ed6e6841659795470a14ee",
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Tr1sa111",
            "id": "192483",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 2,
            "domain": 15,
            "hostname": 1
          },
          "indicator_count": 18,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 276,
          "modified_text": "1006 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ed6e6841659795470a14ee",
          "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study",
          "description": "",
          "modified": "2023-08-29T04:04:56.864000",
          "created": "2023-08-29T04:04:56.864000",
          "tags": [
            "deepdns",
            "dns tunneling",
            "coinloader",
            "sunburst"
          ],
          "references": [
            "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1572",
              "name": "Protocol Tunneling",
              "display_name": "T1572 - Protocol Tunneling"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": "64e8688ae20e56da413ac148",
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "tr2222200",
            "id": "207905",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 2,
            "domain": 15,
            "hostname": 1
          },
          "indicator_count": 18,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 186,
          "modified_text": "1006 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64ea12687d3450d3b1c703c3",
          "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns [by @AlienVault]",
          "description": "",
          "modified": "2023-08-26T14:55:36.546000",
          "created": "2023-08-26T14:55:36.546000",
          "tags": [
            "deepdns",
            "dns tunneling",
            "coinloader",
            "sunburst"
          ],
          "references": [
            "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            },
            {
              "id": "T1572",
              "name": "Protocol Tunneling",
              "display_name": "T1572 - Protocol Tunneling"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": "64e8688ae20e56da413ac148",
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "OctoSeek",
            "id": "243548",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 2,
            "domain": 15,
            "hostname": 1
          },
          "indicator_count": 18,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 220,
          "modified_text": "1008 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64e9678eb06859ce508b8fd3",
          "name": "August 26th, 2023 - CryptoGen Cyber Threat Intelligence Advisory #3123 - Used Generative Modules to Expose DNS Tunneling Campaign",
          "description": "",
          "modified": "2023-08-26T02:46:38.155000",
          "created": "2023-08-26T02:46:38.155000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "cryptocti",
            "id": "110256",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 3,
            "FileHash-SHA1": 3,
            "FileHash-SHA256": 3,
            "domain": 16,
            "hostname": 16
          },
          "indicator_count": 41,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 499,
          "modified_text": "1009 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "64e89445f1145c1698631852",
          "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study - Check Point Research",
          "description": "In this blog post, security firm Check Point outlines how it is using Generative AI (AI) to thwart malicious campaigns using the Domain Name Server (DNS) protocol to communicate with C&C servers.",
          "modified": "2023-08-25T11:45:09.059000",
          "created": "2023-08-25T11:45:09.059000",
          "tags": [
            "addr",
            "deepdns",
            "dns tunneling",
            "abstractmethod",
            "false",
            "dict",
            "dns protocol",
            "funct",
            "check point",
            "coinloader",
            "sunburst",
            "python",
            "error"
          ],
          "references": [
            "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1560",
              "name": "Archive Collected Data",
              "display_name": "T1560 - Archive Collected Data"
            },
            {
              "id": "T1106",
              "name": "Native API",
              "display_name": "T1106 - Native API"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1102",
              "name": "Web Service",
              "display_name": "T1102 - Web Service"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunter_NL",
            "id": "171283",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 1,
            "domain": 17,
            "hostname": 7
          },
          "indicator_count": 25,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 863,
          "modified_text": "1009 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "apple.schema",
        "form.vim",
        "pf.vim",
        "tutor.tr.utf-8",
        "java_methods_style_signature_04.vim",
        "phtml.vim",
        "java_annotations_signature_04.dump",
        "java_methods_indent8_signature_01.vim",
        "upstart.vim",
        "java_generics_signature_04.dump",
        "pandoc.vim",
        "sass.vim",
        "bzl.vim",
        "gp.vim",
        "redif.vim",
        "acorn",
        "master.vim",
        "sgml.vim",
        "c64",
        "mib2c.perl.conf",
        "logindefs.vim",
        "java_methods_indent2_signature_04.dump",
        "crontab.vim",
        "gitconfig.vim",
        "jargon.vim",
        "dots_19",
        "sh_02.sh",
        "cmake.vim",
        "java_comments_html_03.dump",
        "krl.vim",
        "opl.vim",
        "mma.vim",
        "modula2_iso_01.dump",
        "ber",
        "autofs.conf",
        "uc.vim",
        "vim_ex_execute.vim",
        "dns.vim",
        "elinks.vim",
        "aidl.vim",
        "Mac-42FD25EABCABB274.plist",
        "opam.vim",
        "java_contextual_keywords_00.dump",
        "java_comments_markdown_02.dump",
        "java_previews_430.java",
        "spice.vim",
        "jsonc.vim",
        "vim_ex_no_comment_strings.vim",
        "modula2_iso_00.dump",
        "vim9_keymap.vim",
        "vim9_expr.vim",
        "hosts",
        "asl.conf",
        "group",
        "java_methods_indent4_signature_02.dump",
        "m3build.vim",
        "openvpn.vim",
        "algol68",
        "adacomplete.vim",
        "com.apple.fontd.support.sb",
        "iss.vim",
        "httpd-autoindex.conf",
        "bm",
        "hostsaccess.vim",
        "com.apple.login.guest",
        "tutor.hr.utf-8",
        "vim_ex_catch.vim",
        "gzip.vim",
        "README.txt",
        "defaults.vim",
        "esqlc.vim",
        "b.vim",
        "kern_loader.conf",
        "ftpusers",
        "pascal.vim",
        "java_annotations_02.dump",
        "Mac-9AE82516C7C6B903.plist",
        "java_generics_05.dump",
        "raml.vim",
        "colortest.vim",
        "dylan.vim",
        "sinda.vim",
        "xcmdsrv_client.c",
        "java_module_info.vim",
        "bytecode",
        "gitolite.vim",
        "com.apple.softwareupdated.sb",
        "verilogams.vim",
        "svg.vim",
        "snmp.conf",
        "com.apple.atsd.support.sb",
        "gift.vim",
        "com.apple.msrpc.mdssvc.sb",
        "calendar.vim",
        "gedcom.vim",
        "mib2c.scalar.conf",
        "java_comments_html_06.dump",
        "tutor.sr.utf-8",
        "ahdl.vim",
        "java_methods_indent4_05.dump",
        "antlr4.vim",
        "tutor.vim",
        "com.apple.ckdiscretionaryd.sb",
        "java_method_references_10.dump",
        "com.apple.atsd.internal.sb",
        "bluetoothd.sb",
        "java_string.java",
        "model.vim",
        "java_methods_indent8_signature_06.vim",
        "he.vim",
        "hog.vim",
        "messages.vim",
        "AppleOpenLDAP.plist",
        "vimball.vim",
        "json5.vim",
        "kivy.vim",
        "javascriptreact.vim",
        "java_method_references_signature_04.dump",
        "icemenu.vim",
        "mail.rc",
        "tt2html.vim",
        "liquid.vim",
        "java_methods_indent2_signature_02.vim",
        "bflt",
        "header_checks",
        "vim_ex_comment-vim9.vim",
        "lyrics.vim",
        "html401t.vim",
        "com.apple.contacts.ContactsAutocomplete",
        "ibasic.vim",
        "blank.vim",
        "sshdconfig.vim",
        "java_annotations.java",
        "amanda",
        "autoit.vim",
        "java_switch_02.dump",
        "acedb.vim",
        "apachestyle.vim",
        "udevconf.vim",
        "vim_ex_let_heredoc.vim",
        "RstFold.vim",
        "fpcmake.vim",
        "java_methods_indent4_signature_03.dump",
        "csh.vim",
        "demoserver.py",
        "java_methods_indent2_04.vim",
        "com.apple.FontValidator.sb",
        "java_enfoldment_00.dump",
        "java_generics_signature_07.dump",
        "java_method_references_signature_00.dump",
        "dictconf.vim",
        "java_methods_indent8_05.vim",
        "apache.vim",
        "elmfilt.vim",
        "cupsd.conf",
        "modula2_pim_06.dump",
        "nis.ldif",
        "art.vim",
        "cl.vim",
        "debversions.vim",
        "postfix-files",
        "java_methods_indent4_02.dump",
        "moo.vim",
        "upstreamrpt.vim",
        "java_methods_indent2_05.dump",
        "corba.ldif",
        "bc.vim",
        "zip.vim",
        "main.cf.proto",
        "sed.vim",
        "cmusrc.vim",
        "att3b",
        "ccfilter.1",
        "adventure",
        "xmlformat.vim",
        "chuck.vim",
        "cvs.vim",
        "manpaths",
        "mib2c.container.conf",
        "java_methods_indent2_05.vim",
        "claris",
        "java_switch_07.dump",
        "slrnsc.vim",
        "blender",
        "bitbake.vim",
        "pim.vim",
        "biosig",
        "allegro",
        "upstreaminstalllog.vim",
        "routeros.vim",
        "lite.vim",
        "structurizr.vim",
        "hlsplaylist.vim",
        "java_escapes_01.dump",
        "tutor.bar.utf-8",
        "cabalconfig.vim",
        "config.vim",
        "lilo.vim",
        "dots_18",
        "tutor.pt.utf-8",
        "java_method_references_signature_02.dump",
        "com.apple.fontd.internal.sb",
        "sh_10.sh",
        "modula3.vim",
        "modula2_pim.def",
        "pythoncomplete.vim",
        "chord",
        "tutor.it.utf-8",
        "sisu.vim",
        "ia64.vim",
        "sil.vim",
        "godoc.vim",
        "tutor.uk.utf-8",
        "clojure",
        "magic",
        "gretl.vim",
        "tutor.zh.utf-8",
        "master.cf.default",
        "slang.vim",
        "setserial.vim",
        "maple.vim",
        "java_methods_indent2_signature_03.vim",
        "java_methods_indent4_signature_02.vim",
        "poefilter.vim",
        "mailcap.vim",
        "java_methods_indent8_signature_04.vim",
        "kcm.sb",
        "assembler",
        "modula2_iso_03.dump",
        "ld.vim",
        "java_numbers_00.dump",
        "tutor.el.utf-8",
        "main.cf",
        "dts.vim",
        "java_escapes_00.dump",
        "stp.vim",
        "nqc.vim",
        "java_lambda_expressions_02.dump",
        "change.vim",
        "tutor",
        "java_escapes_06.dump",
        "autodoc.vim",
        "sml.vim",
        "java_module_info.java",
        "eviews.vim",
        "java_method_references_signature_05.dump",
        "java_methods_indent2_signature_02.dump",
        "citrus",
        "java_methods_indent8_signature_00.dump",
        "vim_ex_map.vim",
        "java_methods_style_signature_01.vim",
        "postscr.vim",
        "bashrc",
        "vim_ex_def_nested_fold.vim",
        "java_lambda_expressions_signature_03.dump",
        "tssgm.vim",
        "cgdbrc.vim",
        "vim_ex_function_def_tail_comments.vim",
        "com.apple.iokit.power",
        "arch.vim",
        "dots_03",
        "default.plist",
        "rc.netboot",
        "git.vim",
        "pdf.vim",
        "java_methods_indent4_01.dump",
        "sqlanywhere.vim",
        "atlas.vim",
        "com.apple.taskgated-helper.sb",
        "sqlinformix.vim",
        "java_methods_indent4_signature_01.vim",
        "com.apple.mobileassetd.sb",
        "java_lambda_expressions_01.dump",
        "menu.vim",
        "eiffel.vim",
        "markdown_conceal_00.dump",
        "datascript.vim",
        "pccts.vim",
        "btm.vim",
        "Mac-FFE5EF870D7BA81A.plist",
        "jal.vim",
        "mime.types",
        "kix.vim",
        "c.c",
        "dots_16",
        "elm.vim",
        "httpd-userdir.conf",
        "protocols.vim",
        "lout.vim",
        "proto.vim",
        "java_methods_indent4_05.vim",
        "slice.vim",
        "pike.vim",
        "access",
        "modula2_iso_02.dump",
        "mib2c.access_functions.conf",
        "dcd.vim",
        "vim_ex_loadkeymap_after_colon.vim",
        "proxy-html.conf",
        "sicad.vim",
        "udevrules.vim",
        "obse.vim",
        "modula2_pim_04.dump",
        "openldap.ldif",
        "sl.vim",
        "vim_ex_substitute.vim",
        "objc.vim",
        "java_methods_indent4_03.dump",
        "rc.vim",
        "audit_event",
        "com.apple.eventmonitor",
        "sdl.vim",
        "vim132",
        "java_methods_style_03.dump",
        "markdown_conceal.markdown",
        "html40s.vim",
        "java.ldif",
        "java_methods_indent8_signature_00.vim",
        "mds_stores.sb",
        "java_annotations_signature_03.dump",
        "vb.vim",
        "tcsh.vim",
        "Mac-EE2EBD4B90B839A8.plist",
        "java_escapes_02.dump",
        "html_03.dump",
        "cucumber.vim",
        "esmtprc.vim",
        "tar.vim",
        "vim_keymap.vim",
        "java_method_references_signature_09.dump",
        "java_methods_indent8_02.vim",
        "rrst.vim",
        "com.apple.MessageTracer",
        "ratpoison.vim",
        "tutor.zh_cn.utf-8",
        "kscript.vim",
        "jq.vim",
        "netrc.vim",
        "sh_04.sh",
        "synmenu.vim",
        "html_01.dump",
        "Mac-27ADBB7B4CEE8E61.plist",
        "mplayerconf.vim",
        "context-data-metafun.vim",
        "pfmain.vim",
        "cleanadd.vim",
        "amigaos",
        "java_generics_signature_06.dump",
        "8th.vim",
        "dtml.vim",
        "dosini.vim",
        "mDNSResponder.sb",
        "sd.vim",
        "com.apple.netbiosd.sb",
        "java_lambda_expressions_signature_08.dump",
        "kdc.sb",
        "rcs.vim",
        "java_methods_style_signature_01.dump",
        "tutor.de.utf-8",
        "Mac-DB15BD556843C820.plist",
        "java_generics_02.dump",
        "java_methods_indent2_signature_05.dump",
        "com.apple.install",
        "java_annotations_04.dump",
        "elf.vim",
        "tcl.vim",
        "mgl.vim",
        "dots_07",
        "dylanlid.vim",
        "mib2c.check_values.conf",
        "gettytab",
        "sqr.vim",
        "vim.vim",
        "com.apple.cdscheduler",
        "ecd.vim",
        "cabalproject.vim",
        "javaformat.vim",
        "slpconf.vim",
        "ave.vim",
        "contextcomplete.vim",
        "vrml.vim",
        "euphoria3.vim",
        "ninja.vim",
        "kwt.vim",
        "dirpager.vim",
        "ncf.vim",
        "modula2_iso_06.dump",
        "java_methods_style_signature_02.vim",
        "slrnrc.vim",
        "https://labs.inquest.net/iocdb",
        "java_methods_style_04.vim",
        "Mac-BE0E8AC46FE800CC.plist",
        "typescript.vim",
        "avra.vim",
        "ccfilter_README.txt",
        "d.vim",
        "procmail.vim",
        "java_methods_style_03.vim",
        "rustfmt.vim",
        "bashrc_Apple_Terminal",
        "sexplib.vim",
        "haste.vim",
        "java_unfoldment.java",
        "java_methods_indent4_01.vim",
        "quicklook-satellite-general.sb",
        "optwin.vim",
        "java_switch.java",
        "automake.vim",
        "java_comments_markdown_08.dump",
        "dockerfile.vim",
        "debsources.vim",
        "java_numbers_05.dump",
        "aspvbs.vim",
        "ayacc.vim",
        "manual.vim",
        "java_methods_style_signature_02.dump",
        "BTLEServer.sb",
        "java_module_info_02.dump",
        "java.schema",
        "falcon.vim",
        "xsd.vim",
        "vim_ex_function_fold.vim",
        "obj.vim",
        "custom_header_checks",
        "java_lambda_expressions_05.dump",
        "java_unfoldment_05.dump",
        "hare.vim",
        "dots_01",
        "vim_ex_range.vim",
        "kdl.vim",
        "java_comments_html_02.dump",
        "abap.vim",
        "com.apple.msrpc.srvsvc.sb",
        "registry.vim",
        "fetchmail.vim",
        "java_generics_04.dump",
        "ruby.vim",
        "ppwiz.vim",
        "haml.vim",
        "dircolors.vim",
        "prolog.vim",
        "asmh8300.vim",
        "airportd.sb",
        "shtags.pl",
        "meson.vim",
        "asf",
        "java_methods_indent2_01.dump",
        "udevperm.vim",
        "tap.vim",
        "r.vim",
        "java_previews_430_00.dump",
        "dots_11",
        "Mac-06F11FD93F0323C5.plist",
        "exports.vim",
        "mix.vim",
        "httpd-ssl.conf",
        "jgraph.vim",
        "ldif.vim",
        "services.vim",
        "modula2_r10_00.dump",
        "tutor.zh_tw.utf-8",
        "cvmsServer.sb",
        "vim_ex_match.vim",
        "ada.vim",
        "html_07.dump",
        "Mac-189A3D4F975D5FFC.plist",
        "makedefs.out",
        "radiance.vim",
        "kotlin.vim",
        "occam.vim",
        "sudoers.vim",
        "collective.ldif",
        "java_lambda_expressions_signature_05.dump",
        "scilab.vim",
        "rebol.vim",
        "javacc.vim",
        "sindacmp.vim",
        "java_comments_markdown_03.dump",
        "libao.vim",
        "clipper",
        "vim_key_notation.vim",
        "sendpr.vim",
        "julia.vim",
        "iso.vim",
        "java_methods_indent4_signature_04.dump",
        "swayconfig.vim",
        "luau.vim",
        "java_enfoldment.java",
        "java_methods_indent8_signature_04.dump",
        "java_methods_indent4_signature_05.dump",
        "mib2c.column_storage.conf",
        "synload.vim",
        "pli.vim",
        "n1ql.vim",
        "java_numbers_01.dump",
        "httpd-mpm.conf",
        "named.vim",
        "focexec.vim",
        "spup.vim",
        "nosyntax.vim",
        "bzr.vim",
        "ldap.conf.default",
        "httpd-vhosts.conf",
        "gsp.vim",
        "java_methods_indent4_signature_00.vim",
        "latte.vim",
        "quicklookd-job-creation.sb",
        "specman.vim",
        "quarto.vim",
        "duaconf.ldif",
        "expect.vim",
        "modula2_pim_01.dump",
        "chatito.vim",
        "blcr",
        "swift.vim",
        "mib2c.conf",
        "animation",
        "paste.vim",
        "com.apple.coreduetd",
        "masm.vim",
        "com.apple.authd",
        "asciidoc.vim",
        "omnimark.vim",
        "mdworker-bundle.sb",
        "vim_ex_sleep.vim",
        "netrwFileHandlers.vim",
        "snnsres.vim",
        "tutor.fr.utf-8",
        "java_numbers_04.dump",
        "modula2_pim_02.dump",
        "clarion",
        "sh_08.sh",
        "nsis.vim",
        "clojure.vim",
        "vim_ex_menu.vim",
        "com.apple.msrpc.lsarpc.sb",
        "Mac-E43C1C25D4880AD6.plist",
        "tsv.vim",
        "java_previews_455_02.dump",
        "java_unfoldment_02.dump",
        "java_numbers.java",
        "java_methods_indent2_02.dump",
        "gitsendemail.vim",
        "desktop.vim",
        "java_methods_indent4_signature_03.vim",
        "edif.vim",
        "csh.login",
        "kadmind.sb",
        "autohotkey.vim",
        "aes",
        "dots_12",
        "dots_15",
        "java_lambda_expressions_08.dump",
        "master.cf",
        "gdscript.vim",
        "clojurecomplete.vim",
        "samba.vim",
        "awdd.sb",
        "java_methods_indent8_signature.java",
        "java_comments_html_04.dump",
        "robots.vim",
        "vim9_ex_commands.vim",
        "rib.vim",
        "pinfo.vim",
        "squirrel.vim",
        "perl.vim",
        "tutor.da.utf-8",
        "apt",
        "mve.awk",
        "template.vim",
        "tasm.vim",
        "dragonforce.io",
        "java_switch_00.dump",
        "samba.schema",
        "java_contextual_keywords_03.dump",
        "java_escapes_04.dump",
        "cisco",
        "php7.conf",
        "httpd.conf",
        "lynx.vim",
        "jinja.vim",
        "rc.common",
        "dosbatch.vim",
        "java_methods_style_02.vim",
        "m3quake.vim",
        "java_methods_indent4_03.vim",
        "indoff.vim",
        "asn.vim",
        "msmessages.vim",
        "java_previews_455_03.dump",
        "modula2_pim_03.dump",
        "modula2_pim_00.dump",
        "java_methods_style_00.vim",
        "fstab.vim",
        "qlmanage.sb",
        "less.vim",
        "mrxvtrc.vim",
        "htmlangular.vim",
        "aout",
        "java_methods_indent2_01.vim",
        "sysctl.vim",
        "dots_20",
        "java_methods_style_02.dump",
        "qml.vim",
        "virtual",
        "mojo.vim",
        "remind.vim",
        "inittab.vim",
        "cuda.vim",
        "modula2_r10.def",
        "racoon.conf",
        "takout.vim",
        "java_method_references_01.dump",
        "fontmoverinternal.sb",
        "basis",
        "yaml.yaml",
        "tutor.eo.utf-8",
        "ntp_opendirectory.conf",
        "usw2kagtlog.vim",
        "rubycomplete.vim",
        "html_02.dump",
        "cmakecache.vim",
        "unison.vim",
        "java_methods_indent8_06.dump",
        "htmlm4.vim",
        "java_methods_indent2_00.dump",
        "ora.vim",
        "ppolicy.ldif",
        "csp.vim",
        "html_00.dump",
        "chill.vim",
        "html.vim",
        "java_method_references_signature_08.dump",
        "goaccess.vim",
        "rhelp.vim",
        "php.vim",
        "mediawiki.vim",
        "com.apple.smbd.sb",
        "verilog.vim",
        "sqlforms.vim",
        "aml.vim",
        "racket.vim",
        "master.cf.proto",
        "mf.vim",
        "hosts.equiv",
        "java_generics.java",
        "rexx.vim",
        "wfs.sb",
        "LICENSE",
        "apple",
        "tutor.lt.utf-8",
        "java_numbers_02.dump",
        "monk.vim",
        "java_methods_indent8_signature_05.dump",
        "desc.vim",
        "Mac-FA842E06C61E91C5.plist",
        "cosine.ldif",
        "vim_new.vim",
        "vim_shebang.vim",
        "dune.vim",
        "html32.vim",
        "ssa.vim",
        "java_methods_indent8_03.vim",
        "arm",
        "dcl.vim",
        "chicken.vim",
        "gitrebase.vim",
        "netrw.vim",
        "denyhosts.vim",
        "confini.vim",
        "java_generics_07.dump",
        "sh_11_00.dump",
        "cynlib.vim",
        "sindaout.vim",
        "nis.schema",
        "gtkrc.vim",
        "ccfilter.c",
        "java_lambda_expressions_signature_00.dump",
        "typst.vim",
        "efm_filter.txt",
        "plsql.vim",
        "java_methods_indent4_signature_06.dump",
        "coco.vim",
        "krb5-kdc.schema",
        "syntax.vim",
        "java_methods_indent4_signature.java",
        "java_method_references_06.dump",
        "dart.vim",
        "java_methods_style_signature_00.dump",
        "vim_vs_net.cmd",
        "httpd-languages.conf",
        "Mac-06F11F11946D27C5.plist",
        "make.vim",
        "spellfile.vim",
        "vim9_ex_no_comment_strings.vim",
        "java_generics_signature_00.dump",
        "skill.vim",
        "fontworkerinternal.sb",
        "systemd.vim",
        "dots_09",
        "html_08.dump",
        "cfg.vim",
        "mush.vim",
        "nastran.vim",
        "yi.vim",
        "README",
        "java_methods_indent4_signature_00.dump",
        "java_lambda_expressions_signature_07.dump",
        "java_methods_indent2_signature_00.dump",
        "cynpp.vim",
        "nasm.vim",
        "spec.vim",
        "java_lambda_expressions_signature_04.dump",
        "editorconfig.vim",
        "com.apple.cloudd.sb",
        "diva.vim",
        "sh_06.sh",
        "group.vim",
        "manconf.vim",
        "mib2c.genhtml.conf",
        "efm_perl.pl",
        "android",
        "csh.cshrc",
        "lss.vim",
        "com.apple.xscertd-helper.sb",
        "java_methods_indent8_02.dump",
        "vim_ex_comment_strings.vim",
        "salt.vim",
        "tutor.lv.utf-8",
        "typescriptreact.vim",
        "java_comments_html_05.dump",
        "tutor.nb.utf-8",
        "java_escapes_03.dump",
        "java_lambda_expressions_signature_06.dump",
        "java_method_references_04.dump",
        "java_method_references_signature_06.dump",
        "lc.vim",
        "sbt.vim",
        "java_comments_html_07.dump",
        "xhtml11.vim",
        "java_comments_html_01.dump",
        "networks",
        "context-data-tex.vim",
        "fontmover.sb",
        "help.vim",
        "gdshader.vim",
        "reva.vim",
        "aap.vim",
        "upstreamdat.vim",
        "tutor.sk.utf-8",
        "java_generics_signature_05.dump",
        "litestep.vim",
        "sql.vim",
        "Mac-B809C3757DA9BB8D.plist",
        "gss-acceptor.sb",
        "man.vim",
        "openscad.vim",
        "context-data-interfaces.vim",
        "dots_17",
        "html.html",
        "valgrind.vim",
        "locate.rc",
        "vimrc",
        "java_methods_indent2.java",
        "vim_variables.vim",
        "java_lambda_expressions_04.dump",
        "java_module_info_00.dump",
        "Mac-66E35819EE2D0D05.plist",
        "ishd.vim",
        "vim_ex_commands.vim",
        "cafebabe",
        "tohtml.vim",
        "plp.vim",
        "Mac-BE088AF8C5EB4FA2.plist",
        "dots_05",
        "sh_07.sh",
        "natural.vim",
        "java_contextual_keywords_01.dump",
        "viminfo.vim",
        "catalog.vim",
        "java_methods_style_01.dump",
        "taskdata.vim",
        "com.apple.mkb",
        "abel.vim",
        "dots_14",
        "sshconfig.vim",
        "mib2c.array-user.conf",
        "dots_10",
        "chaskell.vim",
        "java_unfoldment_00.dump",
        "java_string_01.dump",
        "passwd.vim",
        "gprof.vim",
        "gnash.vim",
        "vim_ex_menutranslate.vim",
        "snnsnet.vim",
        "gkrellmrc.vim",
        "sgmllnx.vim",
        "ref",
        "java_methods_indent2_03.vim",
        "Mac-77EB7D7DAF985301.plist",
        "dtrace.vim",
        "loginaccess.vim",
        "cddb",
        "httpd-dav.conf",
        "java_methods_indent2_04.dump",
        "java_methods_indent4_00.vim",
        "vim9_shebang.vim",
        "livebook.vim",
        "lscript.vim",
        "Mac-CAD6701F7CEA0921.plist",
        "vdf.vim",
        "modula2_iso.def",
        "typeset.vim",
        "cheetah.vim",
        "java_method_references_05.dump",
        "notify.conf",
        "inform.vim",
        "groff.vim",
        "vimrc_example.vim",
        "Mac-A369DDC4E67F1C45.plist",
        "mve.txt",
        "pmi.ldif",
        "gvim.desktop",
        "ppolicy.schema",
        "dot.vim",
        "modula2_iso_04.dump",
        "communications",
        "microsoft.std.schema",
        "fan.vim",
        "vim_line_continuation.vim",
        "asy.vim",
        "snnspat.vim",
        "debcontrol.vim",
        "typescriptcommon.vim",
        "relocated",
        "deb822sources.vim",
        "cweb.vim",
        "hgcommit.vim",
        "indent.vim",
        "vim_ex_def_nested.vim",
        "find.codes",
        "wifi.conf",
        "mib2c.column_defines.conf",
        "lifelines.vim",
        "java_methods_indent8_signature_05.vim",
        "nginx.vim",
        "idl.vim",
        "tags.vim",
        "html40f.vim",
        "dots_06",
        "java_comments_html_00.dump",
        "gnat.vim",
        "TLS_LICENSE",
        "esterel.vim",
        "java_methods_indent2_signature_04.vim",
        "tutor.no.utf-8",
        "lftp.vim",
        "java_method_references_signature_01.dump",
        "java_methods_indent2_signature.java",
        "java_comments_markdown_07.dump",
        "dots_13",
        "vimspell.txt",
        "java_methods_indent8_01.dump",
        "java_methods_indent4_signature_05.vim",
        "html40t.vim",
        "forth.vim",
        "java_methods_indent8_signature_03.vim",
        "tak.vim",
        "markdown_conceal.vim",
        "com.apple.slapd.conf",
        "java_generics_signature_02.dump",
        "java_generics_01.dump",
        "java_lambda_expressions_03.dump",
        "cdrdaoconf.vim",
        "pcap.vim",
        "java_contextual_keywords_02.dump",
        "java_methods_indent4_04.vim",
        "java_methods_style_signature_00.vim",
        "idlang.vim",
        "cvsrc.vim",
        "squid.vim",
        "vim_ex_abbreviate.vim",
        "java_methods_indent2_03.dump",
        "sather.vim",
        "newsyslog.conf",
        "scheme.vim",
        "st.vim",
        "ant.vim",
        "csdl.vim",
        "stylus.vim",
        "vim9_legacy_header.vim",
        "tutor.ja.utf-8",
        "pacmanlog.vim",
        "bindzone.vim",
        "java_methods_indent8_signature_06.dump",
        "changelog.vim",
        "java_methods_indent8_signature_02.dump",
        "dep3patch.vim",
        "python2.vim",
        "cargo.vim",
        "firmlinks",
        "Make_all.mak",
        "glsl.vim",
        "java_methods_indent8_05.dump",
        "srec.vim",
        "java_switch_01.dump",
        "cupsd.conf.O",
        "rapid.vim",
        "filetype.vim",
        "java_methods_style_signature_03.dump",
        "com.apple.USBAgent.sb",
        "grads.vim",
        "c.vim",
        "vim_ex_function_def_tail_comment_errors.vim",
        "svn.vim",
        "java_annotations_01.dump",
        "vim_ex_command_00.dump",
        "scripts.vim",
        "msql.vim",
        "vim.desktop",
        "core.schema",
        "sqlhana.vim",
        "hitest.vim",
        "mib2c.iterate.conf",
        "sieve.vim",
        "vim_ex_syntax.vim",
        "java_escapes_05.dump",
        "lsl.vim",
        "convex",
        "vera.vim",
        "logtalk.vim",
        "evim.vim",
        "vim_ex_function_nested_fold.vim",
        "java_numbers_03.dump",
        "java_switch_04.dump",
        "java_method_references_signature_10.dump",
        "java_methods_indent8_signature_03.dump",
        "mib.vim",
        "vim9_ex_function_def_tail_comments.vim",
        "cobol.vim",
        "transport",
        "profile",
        "vim_ex_command.vim",
        "misc.schema",
        "apple_auxillary.schema",
        "ccomplete.vim",
        "java_lambda_expressions_06.dump",
        "modconf.vim",
        "netinfo.schema",
        "duaconf.schema",
        "tutor.bg.utf-8",
        "clipper.vim",
        "go.vim",
        "Mac-B4831CEBD52A0C4C.plist",
        "psl.vim",
        "racc.vim",
        "rpc",
        "java_methods_indent8_03.dump",
        "context.vim",
        "sgmldecl.vim",
        "fasm.vim",
        "core.ldif",
        "nanorc.vim",
        "syntaxcomplete.vim",
        "m4.vim",
        "updatedb.vim",
        "tutor.ca.utf-8",
        "com.apple.slapconfig.conf",
        "java_lambda_expressions_signature_01.dump",
        "html_06.dump",
        "coff",
        "bsdi",
        "javascript.vim",
        "java_enfoldment_01.dump",
        "hastepreproc.vim",
        "eruby.vim",
        "nroff.vim",
        "vgrindefs.vim",
        "ps1.vim",
        "java_methods_indent4_04.dump",
        "lpc.vim",
        "erlang.vim",
        "java_annotations_signature_02.dump",
        "man.conf",
        "pyrex.vim",
        "java.vim",
        "msidl.vim",
        "json.vim",
        "fgl.vim",
        "mmix.vim",
        "java_string_04.dump",
        "httpd-multilang-errordoc.conf",
        "java_annotations_signature_00.dump",
        "muttrc.vim",
        "gitattributes.vim",
        "inetorgperson.ldif",
        "papp.vim",
        "ldap.conf",
        "vim9_legacy_header_fold.vim",
        "java_comments.java",
        "vim_object_methods.vim",
        "rst.vim",
        "spyce.vim",
        "lprolog.vim",
        "csv.vim",
        "clean.vim",
        "Mac-2BD1B31983FE1663.plist",
        "rtadvd.conf",
        "java_generics_00.dump",
        "scss.vim",
        "com.apple.performance",
        "aliases",
        "com.apple.xscertd.conf",
        "canonical",
        "prescribe.vim",
        "bout",
        "Stopwords.plist",
        "cdl.vim",
        "dicrc",
        "java_methods_style_00.dump",
        "vim9_ex_comment_strings.vim",
        "audit_warn",
        "icon.vim",
        "plaintex.vim",
        "groovy.vim",
        "snmp.conf.default",
        "docbk.vim",
        "aflex.vim",
        "java_annotations_signature.java",
        "mel.vim",
        "natpmpd.sb",
        "grub.vim",
        "mupad.vim",
        "ch.vim",
        "docbkxml.vim",
        "httpd-manual.conf",
        "tutor.cs.utf-8",
        "bugreport.vim",
        "quicklook-satellite.sb",
        "rmd.vim",
        "btsnoop",
        "cbor",
        "rpcgen.vim",
        "archive",
        "tutor.utf-8",
        "qf.vim",
        "mds.sb",
        "com.apple.mail",
        "javascriptcomplete.vim",
        "cmod.vim",
        "mib2c.create-dataset.conf",
        "apl",
        "files.conf",
        "java_switch_03.dump",
        "vim_expr.vim",
        "fish.vim",
        "taskedit.vim",
        "vim9_ex_function_def_tail_comment_errors.vim",
        "java_comments_markdown_05.dump",
        "uci.vim",
        "cups-files.conf",
        "terraform.vim",
        "mermaid.vim",
        "java_annotations_00.dump",
        "maxima.vim",
        "abc.vim",
        "lace.vim",
        "com.apple.genatsdb.internal.sb",
        "dictdconf.vim",
        "abaqus.vim",
        "cvmsCompAgent.sb",
        "python3complete.vim",
        "virata.vim",
        "mdworker-scan.sb",
        "fdcc.vim",
        "mib2c.check_values_local.conf",
        "vim_ex_comment.vim",
        "gvpr.vim",
        "jsp.vim",
        "java_escapes_07.dump",
        "gdb.vim",
        "ampl.vim",
        "ondir.vim",
        "systemverilog.vim",
        "pfd.sb",
        "mailaliases.vim",
        "bash.vim",
        "openroad.vim",
        "java_previews_455_01.dump",
        "amiga.vim",
        "rmtab",
        "java_lambda_expressions_signature_02.dump",
        "sh_08_02.dump",
        "sas.vim",
        "java_methods_indent4_00.dump",
        "hamster.vim",
        "decada.vim",
        "dtd.vim",
        "smarty.vim",
        "java_methods_indent8_01.vim",
        "markdown.vim",
        "tutor.sv.utf-8",
        "csc.vim",
        "java_methods_indent8.java",
        "quickfix.vim",
        "freebasic.vim",
        "exim.vim",
        "csh.logout",
        "r10.vim",
        "htmldjango.vim",
        "a65.vim",
        "java_generics_signature.java",
        "modula2_r10_03.dump",
        "smcl.vim",
        "java_methods_indent2_signature_05.vim",
        "gdresource.vim",
        "fvwm.vim",
        "microsoft.schema",
        "java_methods_style_signature.java",
        "java_methods_style_04.dump",
        "kconfig.vim",
        "gnuplot.vim",
        "avm",
        "java_methods_indent2_signature_01.vim",
        "nix.vim",
        "java_methods_indent4_signature_01.dump",
        "j.vim",
        "initng.vim",
        "mail.vim",
        "hercules.vim",
        "voscm.vim",
        "xhtml10t.vim",
        "vim_ex_throw.vim",
        "mdworker-mail.sb",
        "apache",
        "tutor.ko.utf-8",
        "httpd-default.conf",
        "ist.vim",
        "Mac-35C1E88140C3E6CF.plist",
        "tads.vim",
        "tutor.hu.utf-8",
        "shtags.1",
        "asterisk.vim",
        "haskellcomplete.vim",
        "xhtml10s.vim",
        "gitignore.vim",
        "java_methods_indent2_00.vim",
        "lhaskell.vim",
        "mgp.vim",
        "java_methods_indent8_04.dump",
        "gpg.vim",
        "com.apple.corespotlightservice.sb",
        "euphoria4.vim",
        "conf.vim",
        "scala.vim",
        "java_method_references_signature.java",
        "smith.vim",
        "help_ru.vim",
        "java_methods_indent2_02.vim",
        "gvimrc_example.vim",
        "rnoweb.vim",
        "requirements.vim",
        "java_method_references_07.dump",
        "java_string_03.dump",
        "htmlcomplete.vim",
        "com.apple.msrpc.wkssvc.sb",
        "java_method_references_03.dump",
        "openldap.schema",
        "2html.vim",
        "objcpp.vim",
        "arduino.vim",
        "mp.vim",
        "sh_01.sh",
        "css.vim",
        "java_methods_style.java",
        "conaryrecipe.vim",
        "def.vim",
        "mdworker.sb",
        "debchangelog.vim",
        "lex.vim",
        "basic.vim",
        "odin.vim",
        "modula2.vim",
        "vmasm.vim",
        "Mac-9F18E312C5C2BF0B.plist",
        "promela.vim",
        "pilrc.vim",
        "awk.vim",
        "ppd.vim",
        "raku.vim",
        "com.apple.usbd.sb",
        "rng.vim",
        "stata.vim",
        "applix",
        "slpspi.vim",
        "irbrc",
        "java_switch_06.dump",
        "java_previews_455.java",
        "mswin.vim",
        "tutor.nl.utf-8",
        "charset.pivot",
        "sh.vim",
        "cabal.vim",
        "com.apple.spotlightknowledged.importer.sb",
        "application",
        "beetle",
        "java_methods_indent4_06.dump",
        "fmserver.schema",
        "pod.vim",
        "java_methods_style_01.vim",
        "ntp.conf",
        "rpl.vim",
        "rcslog.vim",
        "quicklookd.sb",
        "mmp.vim",
        "xhtml10f.vim",
        "gemtext.vim",
        "java_previews_455_00.dump",
        "vim_ex_loadkeymap_after_bar.vim",
        "swig.vim",
        "java_method_references_00.dump",
        "java_string_05.dump",
        "collective.schema",
        "scdoc.vim",
        "watool.sb",
        "fortran.vim",
        "progress.vim",
        "cups-files.conf.default",
        "sh_11.sh",
        "webdav_agent.sb",
        "asm.vim",
        "hcl.vim",
        "mdworker-sizing.sb",
        "gen_syntax_vim.vim",
        "java_methods_style_signature_03.vim",
        "quake.vim",
        "haskell.vim",
        "crm.vim",
        "syncolor.vim",
        "com.apple.mkb.internal",
        "java_generics_signature_01.dump",
        "readline.vim",
        "ocaml.vim",
        "tutor.es.utf-8",
        "java_methods_indent8_00.dump",
        "cuplsim.vim",
        "Mac-7DF21CB3ED6977E5.plist",
        "vim_ex_call.vim",
        "c-lang",
        "java_comments_markdown.java",
        "modula2_pim_05.dump",
        "lotos.vim",
        "splint.vim",
        "psf.vim",
        "jam.vim",
        "sqloracle.vim",
        "vim_ex_abbreviate_01.dump",
        "java_string_02.dump",
        "auto_master",
        "jess.vim",
        "Mac-35C5E08120C7EEAF.plist",
        "cad",
        "Make_mvc.mak",
        "ftoff.vim",
        "urlshortcut.vim",
        "html401f.vim",
        "adi",
        "Mac-031B6874CF7F642A.plist",
        "Mac-4B682C642B45593E.plist",
        "com.apple.softwareupdate_firstrun_tasks.sb",
        "vim_ex_def.vim",
        "dylanintr.vim",
        "java_methods_indent8_signature_01.dump",
        "python.vim",
        "java_comments_markdown_01.dump",
        "README.md",
        "java_annotations_03.dump",
        "mysql.vim",
        "pamconf.vim",
        "smil.vim",
        "diff.vim",
        "html401s.vim",
        "html_05.dump",
        "cpp.vim",
        "sh_07_01.dump",
        "srt.vim",
        "java_comments_markdown_06.dump",
        "wifivelocityd.sb",
        "lua.vim",
        "xmlcomplete.vim",
        "upstreamlog.vim",
        "bhl",
        "java_module_info_01.dump",
        "vim_ex_augroup.vim",
        "netrwSettings.vim",
        "mib2c.old-api.conf",
        "corba.schema",
        "misc.ldif",
        "docbksgml.vim",
        "vim_ex_behave.vim",
        "README.ru.utf-8.txt",
        "flexwiki.vim",
        "plm.vim",
        "blit",
        "mdflagwriter.sb",
        "tt2js.vim",
        "java_comments_markdown_00.dump",
        "blink.c",
        "java_methods_style_signature_04.dump",
        "cupl.vim",
        "java_methods_indent4_02.vim",
        "com.apple.msrpc.netlogon.sb",
        "update_date.vim",
        "htmlcheetah.vim",
        "sdc.vim",
        "tssop.vim",
        "bioinformatics",
        "pic.vim",
        "pltags.pl",
        "dnsmasq.vim",
        "context-data-context.vim",
        "uil.vim",
        "java_methods_indent8_00.vim",
        "bsi",
        "pamenv.vim",
        "dyngroup.ldif",
        "neomuttrc.vim",
        "asterix",
        "progress_comments.p",
        "debcopyright.vim",
        "com.apple.xscertd.sb",
        "po.vim",
        "audio",
        "povini.vim",
        "chordpro.vim",
        "cs.vim",
        "framescript.vim",
        "a2ps.vim",
        "java_method_references_08.dump",
        "rnc.vim",
        "java_method_references_signature_03.dump",
        "mib2c.mfd.conf",
        "ctrlh.vim",
        "xsl.vim",
        "hex.vim",
        "protocols",
        "sh_03.sh",
        "qb64.vim",
        "doxygen.vim",
        "gdmo.vim",
        "mib2c.iterate_access.conf",
        "dots_08",
        "com.apple.screensharing.agent.launchd",
        "java_generics_06.dump",
        "usserverlog.vim",
        "vim_ex_echo.vim",
        "java_methods_indent4_signature_04.vim",
        "java_unfoldment_01.dump",
        "java_methods_indent2_signature_01.dump",
        "rego.vim",
        "java_method_references_02.dump",
        "java_generics_03.dump",
        "Mac-473D31EABEB93F9B.plist",
        "getscript.vim",
        "astro.vim",
        "strace.vim",
        "java_annotations_signature_01.dump",
        "cupsd.conf.default",
        "csscomplete.vim",
        "gitcommit.vim",
        "ipfilter.vim",
        "emoji_list.vim",
        "pmi.schema",
        "vim_ex_function.vim",
        "mpm.conf",
        "java_lambda_expressions_00.dump",
        "java_methods_indent4.java",
        "generic",
        "modsim3.vim",
        "auto_home",
        "Mac-551B86E5744E2388.plist",
        "java_escapes.java",
        "audit_class",
        "java_switch_05.dump",
        "tutor.ko",
        "pov.vim",
        "vim_ex_highlight.vim",
        "bounce.cf.default",
        "asteriskvm.vim",
        "Mac-3CBD00234E554E41.plist",
        "mib2c.notify.conf",
        "vimm",
        "matlab.vim",
        "cterm.vim",
        "pymanifest.vim",
        "asm68k.vim",
        "dots_04",
        "mallard.vim",
        "alliant",
        "sh_05.sh",
        "vhdl.vim",
        "sqlcomplete.vim",
        "rtf.vim",
        "java_lambda_expressions_signature.java",
        "blackberry",
        "takcmp.vim",
        "java_methods_indent2_signature_03.dump",
        "java_enfoldment_02.dump",
        "dsl.vim",
        "simula.vim",
        "java_method_references_09.dump",
        "gss-initiator.sb",
        "teraterm.vim",
        "java_generics_signature_03.dump",
        "cdrtoc.vim",
        "java_method_references_signature_07.dump",
        "vim_ex_set.vim",
        "mason.vim",
        "sqlj.vim",
        "java_methods_indent8_signature_02.vim",
        "netrw_gitignore.vim",
        "modula2_iso_05.dump",
        "initex.vim",
        "sm.vim",
        "inetorgperson.schema",
        "rasi.vim",
        "aspperl.vim",
        "java_contextual_keywords.java",
        "sensors.vim",
        "swiftgyb.vim",
        "hgcommitDiff.vim",
        "main.cf.default",
        "purifylog.vim",
        "delmenu.vim",
        "bdf.vim",
        "baan.vim",
        "quicklook-satellite-personal.sb",
        "antlr.vim",
        "dracula.vim",
        "tutor.pl.utf-8",
        "java_methods_indent8_04.vim",
        "lisp.vim",
        "tutor.ru.utf-8",
        "privoxy.vim",
        "hb.vim",
        "tt2.vim",
        "murphi.vim",
        "i3config.vim",
        "rust.vim",
        "resolv.vim",
        "ftp-proxy.sb",
        "dyngroup.schema",
        "cf.vim",
        "ftplugin.vim",
        "django.vim",
        "sh_09.sh",
        "com.apple.bootinstalld.sb",
        "alsaconf.vim",
        "snobol4.vim",
        "java_lambda_expressions.java",
        "audit_control",
        "ftplugof.vim",
        "java_comments_markdown_04.dump",
        "bsdl.vim",
        "afpovertcp.cfg",
        "slpreg.vim",
        "nfs.conf",
        "vim_ex_def_fold.vim",
        "tutor.vi.utf-8",
        "foxpro.vim",
        "limits.vim",
        "httpd-info.conf",
        "bib.vim",
        "com.apple.CommCenter.sb",
        "com.apple.managedcorespotlightd.sb",
        "java_lambda_expressions_07.dump",
        "mapper.dir",
        "com.apple.networking.boringssl",
        "fvwm2m4.vim",
        "chaiscript.vim",
        "java_unfoldment_03.dump",
        "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/",
        "gyp.vim",
        "efm_filter.pl",
        "mib2c.column_enums.conf",
        "html_04.dump",
        "eterm.vim",
        "terminfo.vim",
        "vim_ex_function_nested.vim",
        "pine.vim",
        "vim.vim.base",
        "cosine.schema",
        "unicode.vim",
        "ptcap.vim",
        "bst.vim",
        "ldapconf.vim",
        "hostconf.vim",
        "dots_02",
        "screen.vim",
        "pbtxt.vim",
        "htmlos.vim",
        "haredoc.vim",
        "solidity.vim",
        "java_string_00.dump",
        "aptconf.vim",
        "java_methods_indent2_signature_00.vim",
        "mib2c.int_watch.conf"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [
            "DragonForce Malaysia"
          ],
          "malware_families": [
            "Directoryindex",
            "Alf:heraklezeval:backdoorlinux/mirai",
            "Virus:dos/psmpc_386",
            "Trojandownloader:win32/bridge",
            "Virus:dos/cyberwar_5300",
            "Pegasus for android - s0316",
            "Alf:heraklezeval:backdoor:linux/tsunami",
            "Tel:trojanspy:win32/kedirat",
            "Medusa shell bash",
            "Adacore",
            "Backdoor:win32/espion",
            "Downloader.medusa/shell",
            "Allowoverride",
            "Todo",
            "Pegasus - mob-s0005",
            "Alf:heraklezeval:backdoor:linux/mirai",
            "Pegasus for ios - s0289",
            "Esc",
            "Trojanspy:ios/xcodeghost",
            "Ultra vnc",
            "Downloader trojan",
            "Malaysia, truly asia",
            "Selectall",
            "Alf:hstr:trojanspy:msil/keylogger",
            "9002 rat",
            "Vim tutor"
          ],
          "industries": [
            "Semiconductor",
            "Hospitality",
            "Ngo",
            "Human subjects",
            "Telecommunications",
            "Lgbtq+ activists",
            "Technology",
            "Energy",
            "Media"
          ]
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 44,
  "pulses": [
    {
      "id": "64e8688ae20e56da413ac148",
      "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study",
      "description": "Generative AI has been around for nearly a decade, strictly speaking, but the recent boom in this technology has inspired renewed interest in its possible applications to challenges facing the information security community. Finding these challenges entails searching through a very large haystack consisting of brand-new binaries, documents, domains and other artifacts that flood the web every day.",
      "modified": "2023-08-25T08:38:33.465000",
      "created": "2023-08-25T08:38:33.465000",
      "tags": [
        "deepdns",
        "dns tunneling",
        "coinloader",
        "sunburst"
      ],
      "references": [
        "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        },
        {
          "id": "T1560",
          "name": "Archive Collected Data",
          "display_name": "T1560 - Archive Collected Data"
        },
        {
          "id": "T1106",
          "name": "Native API",
          "display_name": "T1106 - Native API"
        },
        {
          "id": "T1095",
          "name": "Non-Application Layer Protocol",
          "display_name": "T1095 - Non-Application Layer Protocol"
        },
        {
          "id": "T1082",
          "name": "System Information Discovery",
          "display_name": "T1082 - System Information Discovery"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1102",
          "name": "Web Service",
          "display_name": "T1102 - Web Service"
        },
        {
          "id": "T1572",
          "name": "Protocol Tunneling",
          "display_name": "T1572 - Protocol Tunneling"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 375,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "AlienVault",
        "id": "2",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
        "is_subscribed": true,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 2,
        "domain": 15,
        "hostname": 1
      },
      "indicator_count": 18,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 386497,
      "modified_text": "1009 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "687d5d33d16ab7837e23bc01",
      "name": "howmanyofme.com  - Packed | Palantir",
      "description": "howmanyofme.com was a honeypot. The names listed are potentially monitored targets. One was verified target.||\nhttp://howmanyofme.com/search/?given=Tsara&sur=Brashears/\nhttp://ww2.howmanyofme.com/people/Carrie_Henn/\nhttp://ww2.howmanyofme.com/people/Rockmond_Dunbar/\nhttp://howmanyofme.com/people/John_Hurt/\nhttp://howmanyofme.com/people/Mary_Gross/\nhttp://howmanyofme.com/people/Kenneth_Tobey/\nhttp://ww2.howmanyofme.com/people/Royce_Clayton/\n\n\n#Palantir # #honeypot #howmanyofme",
      "modified": "2025-09-18T23:05:18.490000",
      "created": "2025-07-20T21:18:43.974000",
      "tags": [
        "united",
        "unknown ns",
        "a domains",
        "ip address",
        "search",
        "privacy service",
        "fbo registrant",
        "date",
        "entries",
        "how many",
        "destination",
        "port",
        "windows nt",
        "msie",
        "unknown",
        "et trojan",
        "poodle attack",
        "policy sslv3",
        "united kingdom",
        "suspicious",
        "copy",
        "virustotal",
        "malware",
        "write",
        "hostile",
        "next",
        "triton",
        "super node",
        "get reloaded",
        "x11 snf",
        "png image",
        "rgba",
        "post reloaded",
        "ascii text",
        "crlf line",
        "gnu message",
        "ms windows",
        "intel",
        "pe32",
        "host",
        "get babylon",
        "show",
        "babylon"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1060",
          "name": "Registry Run Keys / Startup Folder",
          "display_name": "T1060 - Registry Run Keys / Startup Folder"
        },
        {
          "id": "T1119",
          "name": "Automated Collection",
          "display_name": "T1119 - Automated Collection"
        },
        {
          "id": "T1047",
          "name": "Windows Management Instrumentation",
          "display_name": "T1047 - Windows Management Instrumentation"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1057",
          "name": "Process Discovery",
          "display_name": "T1057 - Process Discovery"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 13,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 7185,
        "domain": 706,
        "hostname": 1906,
        "email": 5,
        "FileHash-SHA256": 3645,
        "FileHash-MD5": 330,
        "FileHash-SHA1": 135,
        "CVE": 1
      },
      "indicator_count": 13913,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 144,
      "modified_text": "254 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "689d5115ad786de4ff048e5b",
      "name": "TEL:ECCert!SSLCO | Mirai Malware Hosting | Multi user Tracker",
      "description": "https://api.mirai.com/MiraiWebService/passbook/180823-77257/4001645 [Malware hosting]\n*TEL:ECCert!SSLCO\nYARA Detections:\nDelphi\nThis program must be run under Win32\ncompilers.\nCode Overlap of Trojan Droppers Backdoors , TrojanSpy\n\n\n#injection_inter_process\n#creates_largekey\n#network_bind\n#ransomware_file_modifications\n#antivm_generic_bios\n#antivm_generic_disk\n#enumerates_physical_drives\n#physical_drive_access\n#deletes_executed_files\n#recon_fingerprint\n#suspicious_command_tools\n#anomalous_deletefile\n#antisandbox_sleep\n#dead_connect\n#dynamic_function_loading\n#http_request\n#ipc_namedpipe\n#network_anomaly\n#powershell_download\n#powershell_request #track #locate #remote_access",
      "modified": "2025-09-13T02:00:42.729000",
      "created": "2025-08-14T02:59:33.036000",
      "tags": [
        "url https",
        "url http",
        "search",
        "type indicator",
        "role title",
        "added active",
        "related pulses",
        "showing",
        "entries",
        "present sep",
        "united",
        "present aug",
        "present jul",
        "present jun",
        "moved",
        "unknown ns",
        "present may",
        "present apr",
        "passive dns",
        "date",
        "encrypt",
        "body",
        "cookie",
        "gmt server",
        "content type",
        "dynamicloader",
        "medium",
        "x17x03x01",
        "download studio",
        "high",
        "read c",
        "show",
        "windows",
        "copy",
        "powershell",
        "write",
        "anomaly",
        "next",
        "unknown",
        "next associated",
        "urls show",
        "date checked",
        "url hostname",
        "server response",
        "ip address",
        "google safe",
        "yara detections",
        "delphi",
        "codeoverlap",
        "win32",
        "rgba",
        "memcommit",
        "delete",
        "png image",
        "hash",
        "dock",
        "execution",
        "malware",
        "wine emulator",
        "dynamic",
        "msie",
        "windows nt",
        "wow64",
        "slcc2",
        "media center",
        "capture",
        "persistence",
        "sha256",
        "submitted",
        "copy md5",
        "copy sha1",
        "copy sha256",
        "sha1",
        "script",
        "mitre att",
        "ck id",
        "show technique",
        "ck matrix",
        "null",
        "august",
        "span",
        "refresh",
        "meta",
        "mirai",
        "february",
        "april",
        "june",
        "hybrid",
        "general",
        "local",
        "path",
        "click",
        "strings",
        "error",
        "tools",
        "caribe",
        "rest",
        "accept",
        "friday",
        "look",
        "verify",
        "restart"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1119",
          "name": "Automated Collection",
          "display_name": "T1119 - Automated Collection"
        },
        {
          "id": "T1053",
          "name": "Scheduled Task/Job",
          "display_name": "T1053 - Scheduled Task/Job"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1082",
          "name": "System Information Discovery",
          "display_name": "T1082 - System Information Discovery"
        },
        {
          "id": "T1129",
          "name": "Shared Modules",
          "display_name": "T1129 - Shared Modules"
        },
        {
          "id": "T1143",
          "name": "Hidden Window",
          "display_name": "T1143 - Hidden Window"
        },
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        },
        {
          "id": "T1112",
          "name": "Modify Registry",
          "display_name": "T1112 - Modify Registry"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1057",
          "name": "Process Discovery",
          "display_name": "T1057 - Process Discovery"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1480",
          "name": "Execution Guardrails",
          "display_name": "T1480 - Execution Guardrails"
        },
        {
          "id": "T1539",
          "name": "Steal Web Session Cookie",
          "display_name": "T1539 - Steal Web Session Cookie"
        },
        {
          "id": "T1553",
          "name": "Subvert Trust Controls",
          "display_name": "T1553 - Subvert Trust Controls"
        },
        {
          "id": "T1583",
          "name": "Acquire Infrastructure",
          "display_name": "T1583 - Acquire Infrastructure"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 24,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 6211,
        "domain": 682,
        "hostname": 1661,
        "FileHash-MD5": 117,
        "FileHash-SHA1": 100,
        "FileHash-SHA256": 1386,
        "SSLCertFingerprint": 5
      },
      "indicator_count": 10162,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 144,
      "modified_text": "260 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6892e73b32af18aa302df0dc",
      "name": "Part 1.5",
      "description": "Dark web media \u2022 Political news \u2022 Malvertizing\nlocate \u2022\ntrack [stalk] \u2022 record calls \u2022 control media [youtube , etc] http://t.name?n[++i]=e:this.removeEventListener\t\t\nJeeng &\nPowebox [ accidentally left out in original post pulse]",
      "modified": "2025-09-05T04:03:06.929000",
      "created": "2025-08-06T05:25:15.369000",
      "tags": [
        "chromeua",
        "optout",
        "object",
        "path",
        "value",
        "access type",
        "setval",
        "windir",
        "localappdata",
        "null",
        "win64",
        "error",
        "generator",
        "close",
        "roboto",
        "date",
        "format",
        "light",
        "span",
        "template",
        "void",
        "android",
        "body",
        "trident",
        "mexico",
        "sonic",
        "black",
        "critical",
        "desktop",
        "dark",
        "meta",
        "this",
        "june",
        "hybrid",
        "apache",
        "write",
        "crypto",
        "autodetect",
        "face",
        "courier",
        "gigi",
        "impact",
        "shadow",
        "click",
        "strings",
        "cray",
        "smwg",
        "eret",
        "footer",
        "infinity",
        "window",
        "canvas",
        "legend",
        "nuke",
        "lion",
        "4629",
        "ahav",
        "olsa",
        "false",
        "learn",
        "command",
        "ck id",
        "name tactics",
        "suspicious",
        "informative",
        "spawns",
        "defense evasion",
        "t1480 execution",
        "file defense",
        "copy md5",
        "copy sha1",
        "copy sha256",
        "sha1",
        "sha256",
        "script",
        "mitre att",
        "pattern match",
        "show technique",
        "iframe",
        "refresh",
        "august",
        "general",
        "local",
        "tools",
        "demo",
        "look",
        "verify",
        "restart",
        "url http",
        "small",
        "pulses url",
        "tellyoun",
        "showing",
        "entries",
        "url https",
        "indicator role",
        "title added",
        "active related",
        "type indicator",
        "role title",
        "added active",
        "related pulses",
        "cc08",
        "f06a6b",
        "sfurl",
        "filehashsha256",
        "types",
        "indicators show",
        "search",
        "pulses",
        "filehashsha1",
        "adversaries",
        "found",
        "webp image",
        "ascii text",
        "riff",
        "size",
        "encrypt",
        "legacy",
        "filehashmd5",
        "united",
        "flag",
        "server",
        "markmonitor",
        "name server",
        "llc name",
        "overview dns",
        "requests domain",
        "country",
        "win32",
        "av detections",
        "ids detections",
        "yara detections",
        "alerts",
        "analysis date",
        "file score",
        "medium risk",
        "yara",
        "detections",
        "malware",
        "copy",
        "show",
        "icmp traffic",
        "packing t1045",
        "t1045",
        "pdb path",
        "pe resource",
        "extraction",
        "data upload",
        "enter sc",
        "type",
        "extra data",
        "please",
        "failed",
        "review",
        "exclude data",
        "included review",
        "ic data",
        "suggeste",
        "stop",
        "type onow",
        "domain",
        "passive dns",
        "urls",
        "files related",
        "pulses none",
        "related tags",
        "none google",
        "safe browsing",
        "sc data",
        "extr amanuav",
        "review included",
        "manualy",
        "sugges excluded",
        "filehash",
        "md5 add",
        "pulse pulses",
        "url add",
        "http",
        "hostname",
        "files domain",
        "pulses otx",
        "virustotal",
        "hsmi192547107",
        "pulses hostname",
        "r dec",
        "customer dec",
        "iski dec",
        "decision dec",
        "va dec",
        "bitcoin",
        "bitcoin dec",
        "petra",
        "torstatus dec",
        "paul dec",
        "sodesc",
        "planet dec",
        "emilia",
        "heroin dec",
        "difference dec",
        "palantir dec",
        "loraxlive dec",
        "chaturbate dec",
        "sandra",
        "free dec",
        "marvel dec",
        "benjis dec",
        "fresh dec",
        "sodesc dec",
        "srdirport",
        "srhostname",
        "link dec",
        "types of",
        "italy",
        "china",
        "australia",
        "france",
        "turkey",
        "discovery",
        "information",
        "ck ids",
        "t1005",
        "local system",
        "t1007",
        "system service",
        "part",
        "track",
        "locate",
        "political",
        "civil society",
        "news",
        "created",
        "hours ago",
        "report spam",
        "t1555",
        "password",
        "t1560",
        "collected data",
        "t1573",
        "channel",
        "t1574",
        "execution flow",
        "scan",
        "iocs",
        "t1497",
        "u0lhmq",
        "mtawmq",
        "t1480",
        "guardrails",
        "t1486",
        "data encrypted",
        "learn more",
        "unsubscribe aug",
        "protocol",
        "t1074",
        "staged",
        "t1083",
        "t1102",
        "web service",
        "t1105",
        "tool transfer",
        "t1140",
        "data engineer",
        "candidate",
        "tlsv1",
        "odigicert inc",
        "stcalifornia",
        "lsan jose",
        "oadobe systems",
        "incorporated",
        "cndigicert sha2",
        "push",
        "next",
        "high",
        "write c",
        "ireland as16509",
        "delete",
        "dirty",
        "tags",
        "t1012",
        "flow endpoint",
        "security scan",
        "t1106",
        "copyright",
        "levelblue"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1005",
          "name": "Data from Local System",
          "display_name": "T1005 - Data from Local System"
        },
        {
          "id": "T1007",
          "name": "System Service Discovery",
          "display_name": "T1007 - System Service Discovery"
        },
        {
          "id": "T1012",
          "name": "Query Registry",
          "display_name": "T1012 - Query Registry"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1033",
          "name": "System Owner/User Discovery",
          "display_name": "T1033 - System Owner/User Discovery"
        },
        {
          "id": "T1036",
          "name": "Masquerading",
          "display_name": "T1036 - Masquerading"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1057",
          "name": "Process Discovery",
          "display_name": "T1057 - Process Discovery"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1074",
          "name": "Data Staged",
          "display_name": "T1074 - Data Staged"
        },
        {
          "id": "T1083",
          "name": "File and Directory Discovery",
          "display_name": "T1083 - File and Directory Discovery"
        },
        {
          "id": "T1102",
          "name": "Web Service",
          "display_name": "T1102 - Web Service"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1106",
          "name": "Native API",
          "display_name": "T1106 - Native API"
        },
        {
          "id": "T1112",
          "name": "Modify Registry",
          "display_name": "T1112 - Modify Registry"
        },
        {
          "id": "T1120",
          "name": "Peripheral Device Discovery",
          "display_name": "T1120 - Peripheral Device Discovery"
        },
        {
          "id": "T1129",
          "name": "Shared Modules",
          "display_name": "T1129 - Shared Modules"
        },
        {
          "id": "T1132",
          "name": "Data Encoding",
          "display_name": "T1132 - Data Encoding"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1480",
          "name": "Execution Guardrails",
          "display_name": "T1480 - Execution Guardrails"
        },
        {
          "id": "T1486",
          "name": "Data Encrypted for Impact",
          "display_name": "T1486 - Data Encrypted for Impact"
        },
        {
          "id": "T1497",
          "name": "Virtualization/Sandbox Evasion",
          "display_name": "T1497 - Virtualization/Sandbox Evasion"
        },
        {
          "id": "T1555",
          "name": "Credentials from Password Stores",
          "display_name": "T1555 - Credentials from Password Stores"
        },
        {
          "id": "T1560",
          "name": "Archive Collected Data",
          "display_name": "T1560 - Archive Collected Data"
        },
        {
          "id": "T1573",
          "name": "Encrypted Channel",
          "display_name": "T1573 - Encrypted Channel"
        },
        {
          "id": "T1574",
          "name": "Hijack Execution Flow",
          "display_name": "T1574 - Hijack Execution Flow"
        },
        {
          "id": "T1553",
          "name": "Subvert Trust Controls",
          "display_name": "T1553 - Subvert Trust Controls"
        },
        {
          "id": "T1562",
          "name": "Impair Defenses",
          "display_name": "T1562 - Impair Defenses"
        },
        {
          "id": "T1568",
          "name": "Dynamic Resolution",
          "display_name": "T1568 - Dynamic Resolution"
        },
        {
          "id": "T1583",
          "name": "Acquire Infrastructure",
          "display_name": "T1583 - Acquire Infrastructure"
        },
        {
          "id": "T1045",
          "name": "Software Packing",
          "display_name": "T1045 - Software Packing"
        },
        {
          "id": "T1018",
          "name": "Remote System Discovery",
          "display_name": "T1018 - Remote System Discovery"
        },
        {
          "id": "T1041",
          "name": "Exfiltration Over C2 Channel",
          "display_name": "T1041 - Exfiltration Over C2 Channel"
        },
        {
          "id": "T1114",
          "name": "Email Collection",
          "display_name": "T1114 - Email Collection"
        },
        {
          "id": "T1063",
          "name": "Security Software Discovery",
          "display_name": "T1063 - Security Software Discovery"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 18,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 608,
        "FileHash-SHA1": 433,
        "FileHash-SHA256": 3663,
        "URL": 17104,
        "domain": 1316,
        "email": 39,
        "hostname": 4208,
        "SSLCertFingerprint": 17
      },
      "indicator_count": 27388,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 143,
      "modified_text": "268 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6892a73593f73dfc969779b0",
      "name": "Part I | Track | Locate | Political & Civil society \u2018news\u2019 campaigns",
      "description": "Part I | Track | Locate | Political & Civil society \u2018news\u2019 campaigns\n*[ddddd.msg]\n[http://tracking.eu1.glintinc.com]\n[stormer5v52vjsw66jmds7ndeecudq444woadhzr2plxlaayexnh6eqd]\n[stackstorm.ops.dev.az.glintinc.com]\n\u2022 http://stormer5v52vjsw66jmds7ndeecudq444woadhzr2plxlaayexnh6eqd.onion/peter-thiel-running-database-to-root-out-those-disloyal-to-the-leader/\\n \u2022\n[http://pixelrz.com/lists/keywords/tsara-brashears-assaulted-at-concentra/360]\n[http://pixelrz.com/lists/keywords/tsara-brashears-dead/360]",
      "modified": "2025-09-05T00:03:23.223000",
      "created": "2025-08-06T00:52:05.051000",
      "tags": [
        "url http",
        "small",
        "indicator role",
        "title added",
        "active related",
        "pulses hostname",
        "tellyoun",
        "n aug",
        "entries",
        "data upload",
        "extraction",
        "windows error",
        "june",
        "fwd urgent",
        "justice czech",
        "copy sha256",
        "rejectedfailed",
        "timestamp input",
        "message status",
        "actions august",
        "file",
        "actions june",
        "actions may",
        "cta4 https",
        "context related",
        "associated urls",
        "campaigncodedsc",
        "language",
        "uid http",
        "community",
        "sha256",
        "size42b type",
        "submitted",
        "august",
        "april",
        "internal error",
        "previous1",
        "iframe",
        "community score",
        "scan analysis",
        "malicious",
        "intelligence",
        "learn",
        "falcon sandbox",
        "submissions",
        "status",
        "adversaries",
        "ck id",
        "name tactics",
        "suspicious",
        "informative",
        "defense evasion",
        "windows folder",
        "found",
        "dlls",
        "impact",
        "chromeua",
        "optout",
        "object",
        "path",
        "value",
        "access type",
        "setval",
        "windir",
        "localappdata",
        "null",
        "win64",
        "error",
        "generator",
        "close",
        "roboto",
        "date",
        "format",
        "light",
        "span",
        "template",
        "void",
        "android",
        "body",
        "trident",
        "mexico",
        "sonic",
        "black",
        "critical",
        "desktop",
        "dark",
        "meta",
        "this",
        "hybrid",
        "apache",
        "write",
        "crypto",
        "autodetect",
        "face",
        "courier",
        "gigi",
        "shadow",
        "click",
        "strings",
        "cray",
        "smwg",
        "eret",
        "footer",
        "infinity",
        "window",
        "canvas",
        "legend",
        "nuke",
        "lion",
        "4629",
        "ahav",
        "olsa",
        "false"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1005",
          "name": "Data from Local System",
          "display_name": "T1005 - Data from Local System"
        },
        {
          "id": "T1007",
          "name": "System Service Discovery",
          "display_name": "T1007 - System Service Discovery"
        },
        {
          "id": "T1012",
          "name": "Query Registry",
          "display_name": "T1012 - Query Registry"
        },
        {
          "id": "T1018",
          "name": "Remote System Discovery",
          "display_name": "T1018 - Remote System Discovery"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1033",
          "name": "System Owner/User Discovery",
          "display_name": "T1033 - System Owner/User Discovery"
        },
        {
          "id": "T1036",
          "name": "Masquerading",
          "display_name": "T1036 - Masquerading"
        },
        {
          "id": "T1041",
          "name": "Exfiltration Over C2 Channel",
          "display_name": "T1041 - Exfiltration Over C2 Channel"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1057",
          "name": "Process Discovery",
          "display_name": "T1057 - Process Discovery"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1074",
          "name": "Data Staged",
          "display_name": "T1074 - Data Staged"
        },
        {
          "id": "T1083",
          "name": "File and Directory Discovery",
          "display_name": "T1083 - File and Directory Discovery"
        },
        {
          "id": "T1102",
          "name": "Web Service",
          "display_name": "T1102 - Web Service"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1106",
          "name": "Native API",
          "display_name": "T1106 - Native API"
        },
        {
          "id": "T1112",
          "name": "Modify Registry",
          "display_name": "T1112 - Modify Registry"
        },
        {
          "id": "T1114",
          "name": "Email Collection",
          "display_name": "T1114 - Email Collection"
        },
        {
          "id": "T1120",
          "name": "Peripheral Device Discovery",
          "display_name": "T1120 - Peripheral Device Discovery"
        },
        {
          "id": "T1129",
          "name": "Shared Modules",
          "display_name": "T1129 - Shared Modules"
        },
        {
          "id": "T1132",
          "name": "Data Encoding",
          "display_name": "T1132 - Data Encoding"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1480",
          "name": "Execution Guardrails",
          "display_name": "T1480 - Execution Guardrails"
        },
        {
          "id": "T1486",
          "name": "Data Encrypted for Impact",
          "display_name": "T1486 - Data Encrypted for Impact"
        },
        {
          "id": "T1497",
          "name": "Virtualization/Sandbox Evasion",
          "display_name": "T1497 - Virtualization/Sandbox Evasion"
        },
        {
          "id": "T1555",
          "name": "Credentials from Password Stores",
          "display_name": "T1555 - Credentials from Password Stores"
        },
        {
          "id": "T1560",
          "name": "Archive Collected Data",
          "display_name": "T1560 - Archive Collected Data"
        },
        {
          "id": "T1573",
          "name": "Encrypted Channel",
          "display_name": "T1573 - Encrypted Channel"
        },
        {
          "id": "T1574",
          "name": "Hijack Execution Flow",
          "display_name": "T1574 - Hijack Execution Flow"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 9,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 9062,
        "domain": 707,
        "hostname": 2318,
        "FileHash-MD5": 86,
        "FileHash-SHA1": 26,
        "FileHash-SHA256": 2096,
        "email": 5,
        "FilePath": 2,
        "URI": 1
      },
      "indicator_count": 14303,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 143,
      "modified_text": "268 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "67a801c7a6074eb73a688c51",
      "name": "#OpsBedil Targeted Attack: Malicious Windows Spyware VIM on OS",
      "description": "The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines; including: \nT1027 - Obfuscated Files or Information\nT1030 - Data Transfer Size Limits\nT1036 - Masquerading\nT1056 - Input Capture\nT1059 - Command and Scripting Interpreter\nT1070 - Indicator Removal on Host\nT1105 - Ingress Tool Transfer\nT1106 - Native API\nT1119 - Automated Collection\nT1134 - Access Token Manipulation\nT1140 - Deobfuscate/Decode Files or Information\nT1176 - Browser Extensions\nT1547 - Boot or Logon Autostart Execution",
      "modified": "2025-03-11T00:00:59.533000",
      "created": "2025-02-09T01:15:51.632000",
      "tags": [
        "code",
        "range",
        "file offset",
        "ecxedi20xa",
        "edi0x6d",
        "ebp20x20",
        "esi0x67",
        "edx0x6f",
        "esi0x61",
        "ebp20x62",
        "hopper",
        "cve20072438",
        "normally",
        "use vim",
        "checkfile",
        "vimruntime",
        "checkdir",
        "vim project",
        "https",
        "bram moolenaar",
        "bram",
        "files",
        "silent",
        "insert mode",
        "down",
        "pumvisible",
        "vim script",
        "evim",
        "maintainer",
        "spellpopupmenu",
        "aunmenu",
        "tlunmenu",
        "loadbuffermenu",
        "revert",
        "difforig",
        "show",
        "ctrlu",
        "diffthis",
        "bail",
        "win32",
        "vim support",
        "remove",
        "comment",
        "genericname",
        "name",
        "keywords",
        "gvim",
        "edit",
        "zhcn",
        "editor",
        "metin",
        "rediger",
        "loadftplugin",
        "filetype",
        "expand",
        "amatch",
        "make",
        "sinsert",
        "middlemouse",
        "unix",
        "amiga",
        "mswindows",
        "loadindent",
        "end def",
        "visual mode",
        "shiftdel",
        "copy",
        "vim default",
        "selectmode",
        "insert",
        "load",
        "detectfiletype",
        "addoption",
        "optiong",
        "binoptiong",
        "optionl",
        "binoptionl",
        "header",
        "space",
        "python",
        "find",
        "open",
        "mark",
        "shell",
        "ruby",
        "install",
        "vim desktop",
        "substitute",
        "vunmenu",
        "paste",
        "script",
        "selectall",
        "word",
        "popup",
        "menu",
        "line",
        "close",
        "window",
        "back",
        "toolbar",
        "compiler",
        "next",
        "hack",
        "vimvimrc",
        "haiku",
        "openvms",
        "setsyn",
        "lang",
        "syntax menu",
        "description",
        "define",
        "setsyn function",
        "assembly",
        "maya",
        "bufnewfile",
        "bufread",
        "starsetf",
        "setf",
        "language",
        "visual basic",
        "xml au",
        "latex",
        "setfiletypesh",
        "endif",
        "lilo",
        "apache",
        "postscript",
        "rexx",
        "atom",
        "meta",
        "clipper",
        "desktop",
        "gift",
        "hercules",
        "julia",
        "mercurial",
        "pacman",
        "trigger",
        "puppet",
        "path",
        "powershell",
        "info",
        "ziggy",
        "speedup",
        "systemd",
        "form",
        "format",
        "calendar",
        "dracula",
        "config",
        "sfile",
        "esc",
        "iconv",
        "psflags",
        "if defined",
        "newitem force",
        "itemtype file",
        "iso88591 t",
        "utf8",
        "utf8 t",
        "iconvpath",
        "t iso88591",
        "makefile",
        "converted",
        "bob ware",
        "colorado school",
        "mines",
        "vim editor",
        "on your",
        "original copy",
        "please",
        "golden",
        "translation",
        "lesson",
        "enter",
        "type",
        "filename",
        "press",
        "normal mode",
        "repeat",
        "summary",
        "notice",
        "ruler",
        "test",
        "letzn",
        "mrkl",
        "zeil",
        "strg",
        "bewg nn",
        "end von",
        "druck",
        "dautticht",
        "zipf",
        "zaichen",
        "netty",
        "moveu el",
        "entrar",
        "premeu",
        "fitxer",
        "normal",
        "prova",
        "repetiu",
        "sumari",
        "desprs",
        "ara premeu",
        "cont",
        "ctrl",
        "ctrld",
        "append",
        "ctrlr",
        "ctrli",
        "shift",
        "backspace",
        "lekce",
        "napi",
        "dek oznaen",
        "normlnm mdu",
        "pesu",
        "stla",
        "soubor",
        "pesu kurzor",
        "opakuj",
        "toto",
        "lektion",
        "flyt",
        "skriv",
        "tryk p",
        "gentag",
        "bemrk",
        "filnavn",
        "nr der",
        "tryk",
        "zeile",
        "bewege den",
        "tippe",
        "zeichen",
        "cursor zu",
        "cursor zum",
        "kommandos",
        "cursor",
        "null",
        "tutor",
        "ctrlg",
        "shiftg",
        "shiftn",
        "msdos",
        "vimtutor",
        "capslock",
        "michael",
        "movu la",
        "leciono",
        "enenklavo",
        "kursoron al",
        "tajpu",
        "kursoron e",
        "testo",
        "premu",
        "dosiernomo",
        "resumo",
        "nova",
        "anon",
        "leccin",
        "mueva el",
        "intro",
        "pulse",
        "escriba",
        "para",
        "ahora",
        "insertar",
        "esto",
        "repita",
        "antes",
        "tenga",
        "como",
        "este",
        "leon",
        "tapez",
        "dplacez",
        "entre",
        "chap",
        "insertion",
        "puis tapez",
        "rptez",
        "appuyez",
        "lekcija",
        "otipkajte",
        "pritisnite",
        "ponovite",
        "kako bi",
        "insert mod",
        "prijeite",
        "saetak",
        "imedatoteke",
        "note",
        "windows",
        "yank",
        "mozgassuk",
        "fjlnv",
        "parancs",
        "lecke",
        "teszt",
        "j sort",
        "nyomja meg",
        "norml mdban",
        "ismtelje",
        "muovi il",
        "batti",
        "lezione",
        "invio",
        "premi",
        "ripeti i",
        "nomefile",
        "modalit normale",
        "adesso batti",
        "nota",
        "alla",
        "stata",
        "replace",
        "change",
        "subtitute",
        "school",
        "emiau",
        "spustelkite",
        "testas",
        "pirmj",
        "failovardas",
        "fail",
        "normalij",
        "santrauka",
        "ymeklis",
        "raid",
        "ramen",
        "tagad",
        "ievadiet",
        "piemram",
        "apkopojums",
        "lai izdzstu",
        "lai ievietotu",
        "ievadot",
        "ievrojiet",
        "js varat",
        "macos",
        "leksjon",
        "flytt",
        "trykk",
        "slette",
        "repeter",
        "erstatte",
        "sette",
        "kommandoen",
        "sett",
        "tips",
        "vise",
        "druk",
        "het commando",
        "herhaal de",
        "als je",
        "deze",
        "de cursor",
        "gebruik",
        "voeg",
        "bestandsnaam",
        "zorg",
        "mova",
        "digite",
        "teste",
        "agora",
        "pressione",
        "insero",
        "mais",
        "lekcja",
        "przenie kursor",
        "wcinij",
        "vima",
        "wpisz",
        "teraz",
        "powtarzaj",
        "nazwapliku",
        "uwaga",
        "jest",
        "dmesine",
        "ders",
        "ilk satra",
        "bu satrda",
        "normal kipe",
        "normal kipte",
        "daha fazla",
        "pomerite kursor",
        "otkucajte",
        "preite",
        "imefajla",
        "rezime lekcije",
        "za zamenu",
        "flytta",
        "filnamn",
        "normallge",
        "tryck",
        "om du",
        "sammanfattning",
        "genom",
        "lekcia",
        "presu kurzor",
        "presu",
        "napsanie",
        "zopakuj",
        "poznmka",
        "lcmessages",
        "lcall",
        "slovak tutor",
        "vim tutor",
        "amatria",
        "thevimproject",
        "slovak",
        "czech",
        "number",
        "motion",
        "ignore",
        "hjkl",
        "by gi",
        "di chuyn",
        "cu lnh",
        "u tin",
        "thay",
        "tntptin",
        "nu bn",
        "tng kt",
        "vim c",
        "lodi",
        "caps",
        "lock",
        "abc de",
        "command",
        "krishna",
        "spellerrors",
        "display dpy",
        "none",
        "false",
        "xfree",
        "sendinit",
        "isserialname",
        "staticspace",
        "xsync",
        "sendtovim",
        "main",
        "k command",
        "shell script",
        "vt100",
        "term vt100w",
        "dec locator",
        "vsnet",
        "tools",
        "external tools",
        "title",
        "arguments",
        "curline",
        "itempath",
        "init dir",
        "empty",
        "fbshtagsfp",
        "create",
        "options",
        "tags",
        "bourne shell",
        "perl",
        "fbkshfp korn",
        "tcl shell",
        "tk windowing",
        "parse",
        "new buffer",
        "buildcasetable",
        "printf",
        "buildwidthtable",
        "keys",
        "parsefoldprops",
        "parsewidthprops",
        "variabletags",
        "argv",
        "stephen riehm",
        "david woodfall",
        "getopt",
        "v include",
        "print version",
        "suppress",
        "reason",
        "file",
        "severity",
        "o ccfilter",
        "following",
        "this first",
        "ccfilter",
        "quickfix format",
        "though",
        "start",
        "john lange",
        "primitivem",
        "errorformat",
        "perl script",
        "executecore",
        "aerts",
        "sw developer",
        "sony telecom",
        "europe",
        "b1130 brussels",
        "belgium",
        "port",
        "host",
        "server",
        "vim channel",
        "chopen",
        "localhost8765",
        "json message",
        "linelength",
        "compilernames",
        "irix",
        "solaris",
        "hpux",
        "pablo ariel",
        "c compiler",
        "compilerqty",
        "usage",
        "project",
        "collector",
        "written",
        "ives aerts",
        "notes",
        "r decrement",
        "v verbose",
        "outputs",
        "o treat",
        "program",
        "q errorfile",
        "stdout",
        "copyright",
        "joerg ziefle",
        "perl w",
        "first",
        "maketag",
        "version",
        "exuberant ctags",
        "statement",
        "loop",
        "michael schaap",
        "support",
        "packagename",
        "look",
        "february",
        "push",
        "sgi mipspro",
        "error int",
        "error",
        "doit",
        "vim9 function",
        "nr2char",
        "c program",
        "vim quickfix",
        "awk script",
        "dec terminal",
        "make vim",
        "errors",
        "begin",
        "kirchgatterer",
        "opcodes syn",
        "addresses",
        "numbers",
        "types syn",
        "blocks syn",
        "strings syn",
        "program counter",
        "hilo byte",
        "quit",
        "todo todo",
        "aappythonscript",
        "python line",
        "python block",
        "blockline",
        "abap",
        "statement hi",
        "string hi",
        "structure",
        "vim abap",
        "abapr4",
        "marius piedallu",
        "james allwright",
        "april",
        "klmpqwvw",
        "comment hi",
        "type hi",
        "identifier hi",
        "constant let",
        "abel",
        "john cook",
        "johncook3",
        "a bunch",
        "todo xxx",
        "fixme",
        "c style",
        "abaqus",
        "carl osterwisch",
        "costerwi",
        "remark",
        "abaqus comment",
        "abaqus keyword",
        "include hi",
        "todo hi",
        "acedb model",
        "stewart morris",
        "thu apr",
        "syntax file",
        "acedb software",
        "xref syn",
        "rest",
        "preproc hi",
        "delimiter hi",
        "nikolai weibull",
        "include",
        "useroption",
        "options medium",
        "defaultprinter",
        "outputfirstline",
        "filecommand",
        "todo fixme",
        "martin krischik",
        "kind",
        "keyword",
        "mk bram",
        "standard",
        "character",
        "stype",
        "date",
        "vim syn",
        "altera ahdl",
        "x syn",
        "todo",
        "xnor syn",
        "specialchar hi",
        "builtin",
        "define hi",
        "builtin rect",
        "operator hi",
        "special hi",
        "dbus",
        "g3drop",
        "builtin dump",
        "builtin number",
        "builtin call",
        "redir",
        "stream",
        "screen",
        "function hi",
        "aflex",
        "lex syntax",
        "mathieu clabaut",
        "lastchange",
        "ada syntax",
        "aflex stuff",
        "patterns",
        "dominique pelle",
        "storageclass hi",
        "keyword let",
        "endlet",
        "htmlformat",
        "htmlcolor",
        "span",
        "htmlformatn",
        "foldcolumnbuild",
        "css1",
        "foldedid",
        "html",
        "generator",
        "fixme todo",
        "xxx note",
        "spell",
        "amigados",
        "campbell",
        "former url",
        "syntaxamiga",
        "krief david",
        "display drop",
        "beta cauchy",
        "irand224 syn",
        "normal poisson",
        "antlr4",
        "another tool",
        "yinzuo jiang",
        "jiangyinzuo",
        "july",
        "option value",
        "ben rubson",
        "hammers",
        "changelog",
        "option value1",
        "option",
        "value1",
        "david necas",
        "yeti",
        "base",
        "xxx not",
        "core",
        "antlr",
        "javacc parser",
        "azaz09",
        "parserend",
        "parserbegin",
        "token skip",
        "antsyntaxscript",
        "doug kearns",
        "zellner",
        "xmlcdatastart",
        "xmlcdataend",
        "xmltag",
        "xmlendtag",
        "ayer",
        "atch",
        "orkspace",
        "ngle",
        "rity",
        "mbol",
        "ffset",
        "istory",
        "osition",
        "xport",
        "stack",
        "tack",
        "digi",
        "flip",
        "shade",
        "cluster",
        "keyb",
        "arch",
        "moran",
        "ecode",
        "gnu arch",
        "source",
        "keyword hi",
        "simulate",
        "aptitude",
        "state",
        "yann amar",
        "quidame",
        "aptconf",
        "incomplete",
        "ebug",
        "autodetect",
        "fast",
        "marker",
        "score",
        "arduino",
        "hoff",
        "october",
        "license",
        "vim license",
        "arduino ide",
        "erik nomitch",
        "adam obeng",
        "artenterprise",
        "dorai sitaram",
        "ds26",
        "thilo six",
        "number hi",
        "edfghprs",
        "gnu assembler",
        "erik wognsen",
        "kdahlhaus",
        "kevin",
        "label hi",
        "macro hi",
        "title hi",
        "deprecated",
        "skip",
        "none hi",
        "claudio fleiner",
        "claudio",
        "end imports",
        "exports from",
        "implicitstags",
        "explicitstags",
        "absent present",
        "size universal",
        "strings",
        "aspperlscript",
        "perlscript",
        "aaron hope",
        "constant hi",
        "bwlsdxp",
        "macro",
        "specialchar",
        "error hi",
        "aspvbserror",
        "aspvbsfunction",
        "aspvbsmethods",
        "aspvbsstatement",
        "aspvbsnumber",
        "aspvbscript",
        "aspvbscomment",
        "aspvbs",
        "exits",
        "floating point",
        "asterisk",
        "tilghman lesher",
        "corydon76",
        "zonemessages",
        "atlas",
        "inaki saez",
        "jisaez",
        "flags bef",
        "orange syn",
        "containsasytodo",
        "asymptote",
        "avid seeker",
        "c syntax",
        "autodoc",
        "berg",
        "xml dl",
        "display",
        "contains",
        "borz",
        "kdpds",
        "oneline",
        "hotstring",
        "comspec",
        "hotkey",
        "reload",
        "common",
        "autoit",
        "soundplay",
        "autoit v3",
        "jared breland",
        "ping",
        "shutdown",
        "vim maintainers",
        "john williams",
        "action",
        "makefile syntax",
        "avenue",
        "arcview",
        "wagner",
        "esri",
        "string",
        "integer number",
        "operator syn",
        "xor mod",
        "hitachi h8300h",
        "xorc syn",
        "identifier let",
        "avr assembler",
        "avra",
        "avra home",
        "avra version",
        "marius ghita",
        "mhitza",
        "gawk ref",
        "functions syn",
        "awk ref",
        "effective awk",
        "programming",
        "keeps",
        "astro",
        "style",
        "fold",
        "enable",
        "astrojavascript",
        "htmlpreproc",
        "wuelner martnez",
        "html tag",
        "azaz",
        "ayaccuniongroup",
        "ayacc",
        "clusters",
        "aunis",
        "bash",
        "a formal",
        "method",
        "contributor",
        "csaba hoch",
        "undef",
        "defaultchar",
        "startstartfont",
        "bdfboundingbox",
        "containsbdftodo",
        "bibtex",
        "bernd feige",
        "ignore case",
        "xdata customa",
        "xref",
        "ams mref",
        "data",
        "basic",
        "quickbasic",
        "trim",
        "metacommands",
        "kill",
        "zonenumber",
        "bind zone",
        "mehnle",
        "slava gorbanev",
        "generates syn",
        "bcall",
        "vlado",
        "keywords syn",
        "string syn",
        "comment syn",
        "parent",
        "sulejman",
        "blank",
        "xspo",
        "bitbake",
        "chris larson",
        "kergoth",
        "daniel kho",
        "bsdl",
        "vhdl syntax",
        "tim pope",
        "vimnospam",
        "highlight",
        "imperfect",
        "bstnumber",
        "entry function",
        "integers macro",
        "bazel",
        "david barnett",
        "label",
        "digit",
        "john leo",
        "spetz",
        "boolean",
        "statuses",
        "bazaar",
        "dmitry vasiliev",
        "dima",
        "diff",
        "nospell",
        "synchronization",
        "baanerror",
        "selecteos",
        "updateerror",
        "d rows",
        "default",
        "selectempty",
        "selecterror",
        "updateempty",
        "union",
        "hooks",
        "normal hi",
        "case",
        "haskell cabal",
        "build file",
        "profunctor",
        "benchmark",
        "import",
        "cabalconfigpath",
        "cabal config",
        "original author",
        "cabalconfigkey",
        "false ghc",
        "cabal project",
        "true false",
        "cabalprojectnat",
        "boolean hi",
        "cparengroup",
        "cstringgroup",
        "ccommentgroup",
        "clabelgroup",
        "iso c99",
        "elifs",
        "ifndef",
        "ccppoutingroup",
        "optional",
        "accept",
        "public dtddecl",
        "entity catalog",
        "errormsg hi",
        "cdlcommentgroup",
        "raul segura",
        "acevedo",
        "xcheck",
        "childsname",
        "parentsname",
        "grpsdescription",
        "fixme xxx",
        "fullburn",
        "readdriver",
        "writedevice",
        "readdevice",
        "cfgcomment",
        "uncpath",
        "cfgstring",
        "cfgsection",
        "prischepoff",
        "on off",
        "yes no",
        "dos drive",
        "zhenyu",
        "documentation",
        "and fold",
        "operator",
        "punctuation",
        "transparent",
        "region and",
        "cfmlcorekeyword",
        "linden",
        "coldfusion",
        "skipwhite",
        "nextgroup",
        "cdrtoctrack",
        "cdtext",
        "performer",
        "silence",
        "zero",
        "softintegration",
        "cc interpreter",
        "declspec",
        "exception hi",
        "structure let",
        "built",
        "chaiscript",
        "jason turner",
        "lefticus",
        "escape",
        "web changes",
        "andreas scherer",
        "details",
        "cweb",
        "knuth",
        "silvio levy",
        "webcweb",
        "november",
        "haskell",
        "armin sander",
        "changelog file",
        "menesis",
        "vinschen",
        "june",
        "chatito",
        "observeroftime",
        "import syn",
        "intent syn",
        "slot syn",
        "cheetah",
        "max ischenko",
        "matches",
        "precondit hi",
        "evan hanson",
        "scheme",
        "chicken",
        "repository",
        "scheme syntax",
        "lighten",
        "heredocs",
        "cc syntax",
        "hse1",
        "chorus",
        "startofverse",
        "startofbridge",
        "startoftab",
        "startofabc",
        "startofly",
        "chordfont",
        "chill",
        "repeat hi",
        "avoid",
        "youngsang yoon",
        "image",
        "ccitt high",
        "this",
        "ember",
        "sifs0",
        "sinclude",
        "calendarinclude",
        "andrea callea",
        "chuck",
        "object event",
        "ugen array",
        "pieter van",
        "engelen",
        "arthur van",
        "leeuwen",
        "start syn",
        "int real",
        "char bool",
        "zamana",
        "flagship",
        "mario eusebio",
        "accept append",
        "blank from",
        "highlight value",
        "cmake",
        "comments",
        "match key",
        "cmakecachekey",
        "advanced",
        "highlight str",
        "stringstr",
        "nickspoons",
        "internal",
        "clever language",
        "clever",
        "multibase",
        "philip uren",
        "philuspax",
        "cmod",
        "cmodautodoc",
        "supports",
        "init init",
        "exit gcrecurse",
        "browser",
        "cocor",
        "shukla",
        "any characters",
        "context end",
        "from if",
        "nested pragmas",
        "to tokens",
        "cword",
        "fnameescape",
        "supplement",
        "must",
        "dgacfbe",
        "clojuretop",
        "arraychunk",
        "vecnode",
        "vecseq",
        "x00x7f",
        "partstart",
        "gondi",
        "inst",
        "etcdisktab",
        "acmsg",
        "acmsgtype",
        "hammesr",
        "yngve inntjore",
        "levinsen",
        "khym chanur",
        "james mccoy",
        "well",
        "anything",
        "conary recipe",
        "addallflags syn",
        "run automake",
        "makeinstall syn",
        "install copy",
        "move symlink",
        "link remove",
        "doc syn",
        "crm114",
        "modemsg hi",
        "imported",
        "target",
        "true",
        "interface",
        "quiet",
        "private",
        "write",
        "multi",
        "never",
        "unknown",
        "fatalerror",
        "sensitive",
        "android",
        "download",
        "guard",
        "exact",
        "locale",
        "trace",
        "alphabet",
        "john hoelzel",
        "hours days",
        "commands",
        "llll",
        "hminsmsusnsi",
        "ffll",
        "ken shan",
        "ccshan",
        "context",
        "synname",
        "startstartz",
        "endstopz1",
        "mptop",
        "luatop",
        "csccommentgroup",
        "if else",
        "endif elseif",
        "lev sy",
        "iallancestors",
        "curgen sy",
        "warningmsg hi",
        "essbase",
        "prior",
        "descendants",
        "cshell",
        "syntaxcsh",
        "variables",
        "luul",
        "csall",
        "srecord",
        "az09",
        "processes",
        "amsettimer",
        "sdlmatch",
        "default hi",
        "fdr input",
        "maxim kim",
        "habamax",
        "functions",
        "predefined term",
        "end predefined",
        "term variables",
        "century term",
        "csdl",
        "jacek artymiak",
        "c22032019",
        "call",
        "replacing",
        "comp",
        "recognize",
        "ascii",
        "existing syntax",
        "ctrlhbold",
        "ctrlh",
        "module level",
        "prop",
        "media",
        "cuda",
        "nvidia compute",
        "unified device",
        "architecture",
        "terriberry",
        "device global",
        "host managed",
        "shared syn",
        "restrict",
        "cupl simulation",
        "cupl syntax",
        "matt dunford",
        "sat nov",
        "statement let",
        "tex syntax",
        "cweb source",
        "cc material",
        "webincludedc",
        "double",
        "rc file",
        "dada",
        "dadas",
        "etant",
        "scen",
        "regel",
        "pero",
        "esquema",
        "tapi",
        "kada",
        "dados",
        "maka",
        "fono",
        "cupl",
        "valid integer",
        "signal",
        "phil derrick",
        "phild",
        "cynpp",
        "cynlib",
        "cynlib syntax",
        "posedge negedge",
        "changed syn",
        "instantiate",
        "out inst",
        "url http",
        "default cynscon",
        "standard syntax",
        "include debian",
        "match uri",
        "addremove",
        "byhash",
        "christopher",
        "dcod trts",
        "tnxt crlf",
        "labl syn",
        "cequ cneq",
        "cgte clte",
        "cbit clse",
        "dcomment",
        "jason",
        "pragma",
        "4857",
        "digital command",
        "sword",
        "mine",
        "conditional hi",
        "dart",
        "eugene pr3d4t0r",
        "ciurana",
        "former",
        "gerfried fuchs",
        "alpha",
        "rust",
        "datascript",
        "dscommentgroup",
        "comment let",
        "debcopyright",
        "orig author",
        "rob brady",
        "robb",
        "wu yongwei",
        "library stub",
        "code windows",
        "dos syn",
        "exports imports",
        "dep3 patch",
        "gabriel filion",
        "gabster",
        "specification",
        "authorfrom",
        "adminemail",
        "lockfile",
        "matthijs",
        "match",
        "ttext",
        "ccategory",
        "fflag",
        "llicense",
        "rock linux",
        "ren rebe",
        "spell syn",
        "lastline syn",
        "filter",
        "disablestrat",
        "s un",
        "r en",
        "jakson alves",
        "ansi sgr",
        "ansi sgr8",
        "jan larres",
        "term left",
        "black",
        "green",
        "contact",
        "charityware",
        "uganda",
        "entry",
        "block",
        "parasitic",
        "parameter",
        "devicemos",
        "rules",
        "device",
        "diva",
        "toby schaffer",
        "categories",
        "exectryexec",
        "unmounticon",
        "at wp",
        "chat",
        "django",
        "django template",
        "dave hodder",
        "dnsbind zone",
        "docbook sgml",
        "cest let",
        "docbook xml",
        "docbook",
        "devin weaver",
        "shlomi fish",
        "auto detect",
        "syntax xml",
        "sgml",
        "syntax sgml",
        "rory hunter",
        "json",
        "dockerfiles",
        "honza pokorny",
        "onbuilds",
        "from",
        "add arg",
        "cmd copy",
        "mike williams",
        "mrmrdubya",
        "windows nt",
        "msdosms windows",
        "mckee",
        "nima talebi",
        "hong xu",
        "sept",
        "keyword hilink",
        "hilink",
        "error hilink",
        "nargs hilink",
        "markus mottl",
        "enclosing",
        "scott bordelon",
        "wed apr",
        "cadence",
        "automation",
        "design rule",
        "checking",
        "layout",
        "schematic",
        "dsssl",
        "cest",
        "example",
        "xmlregionhook",
        "dtml",
        "dtml syntax",
        "zope",
        "markup language",
        "jordaan",
        "doxygenhtmltop",
        "synlink",
        "link",
        "syncolor",
        "strong",
        "reflink",
        "cpreprocgroup",
        "actions",
        "dtrace d",
        "d script",
        "solaris dynamic",
        "tracing guide",
        "nicolas weber",
        "nicolasweber",
        "first line",
        "probe",
        "turn",
        "entity",
        "matchgroupnone",
        "document type",
        "definition",
        "brabandt",
        "dune",
        "anton kochkov",
        "samuel hym",
        "simon cruanes",
        "kawahara satoru",
        "urkedal",
        "etienne millon",
        "dylan",
        "justus",
        "fri sep",
        "include let",
        "dylan library",
        "interface files",
        "brent fulgham",
        "bfulgham",
        "string let",
        "fulgham",
        "dnsmasqkeyword",
        "dnsmasqrange",
        "editorconfig",
        "anders",
        "edif version",
        "edif",
        "artem zankovich",
        "zartem",
        "5481988",
        "john beppu",
        "beppu",
        "ecd file",
        "embedix linux",
        "elm filter",
        "syntaxelmfilt",
        "elmfiltnumber",
        "brssow",
        "environments",
        "wraparound",
        "elinksnumber",
        "elinkscolor",
        "savingstylew",
        "imagelinksuffix",
        "homepage",
        "current void",
        "selse",
        "sthen",
        "eiffel",
        "joseph hager",
        "ajhager",
        "typedef hi",
        "lambda",
        "xxxx",
        "kresimir marzic",
        "oscar hellstrm",
        "oscar",
        "kornel",
        "syntax",
        "label highlight",
        "type highlight",
        "identifier",
        "george",
        "exec sql",
        "preproc let",
        "esterel",
        "luca necchi",
        "nikos andrikos",
        "esterel regions",
        "esterel types",
        "esterel comment",
        "identifiers",
        "euphoria",
        "builtins",
        "function",
        "reset",
        "should suffice",
        "etermgeneral",
        "d0xx",
        "mod5",
        "rubytop",
        "eruby",
        "erubysubtypezsw",
        "conventional",
        "text",
        "generated file",
        "david nev",
        "setup",
        "expect",
        "normal expect",
        "ralph jennings",
        "knowbudy",
        "user",
        "sysv",
        "bsd isms",
        "syntaxexports",
        "optset",
        "eviews",
        "vaidotas zemlys",
        "zemlys",
        "az4857",
        "assembler",
        "fasm",
        "ron aaron",
        "vim url",
        "fasm home",
        "fasm version",
        "xmm0 xmm1",
        "xmm2 xmm3",
        "dwayne bailey",
        "dwayne",
        "fdcc",
        "definitions",
        "iso tr",
        "unicode",
        "shell command",
        "output",
        "array",
        "fantom",
        "service",
        "bridle",
        "informix",
        "update",
        "abort abs",
        "absolute accept",
        "access acos",
        "add after",
        "allocate alter",
        "drop",
        "fishnext",
        "fishstatement",
        "fishterminator",
        "fishargument",
        "nicholas boyle",
        "flexwiki",
        "reilly",
        "home",
        "fuse",
        "modify",
        "table",
        "pascal makefile",
        "sections",
        "comments syn",
        "forth79",
        "forth83",
        "char",
        "forth83 syn",
        "body",
        "noname",
        "class",
        "local",
        "tung",
        "thu oct",
        "thomas reiter",
        "manipulation",
        "book",
        "document",
        "textfile",
        "apply",
        "formats",
        "popu",
        "crea",
        "modi",
        "memo",
        "defi",
        "disp",
        "dele",
        "appe",
        "repl",
        "proj",
        "alia",
        "cmon",
        "nvert",
        "mwin",
        "uniq",
        "blin",
        "carr",
        "story",
        "mult",
        "rator",
        "fortran",
        "ends",
        "cray",
        "ulllull",
        "stop",
        "fvwmm4",
        "mainsyntax",
        "fvwm2m4",
        "include m4",
        "include fvwm2",
        "fvwm1",
        "hss1",
        "general syn",
        "szsw",
        "check",
        "journal",
        "hold",
        "fvwm",
        "cursormove",
        "edgeresistance",
        "modulepath",
        "noborder",
        "windowlistskip",
        "backcolor",
        "sticky",
        "refresh",
        "buttons",
        "exclam",
        "slash",
        "gdmo",
        "iso101654",
        "guidelines",
        "managed object",
        "gyuman",
        "chester",
        "godot resource",
        "section syn",
        "ssss",
        "gdb command",
        "simon sobisch",
        "isplay",
        "unset",
        "linkurl",
        "gemtext markup",
        "suneel freimuth",
        "heading",
        "list",
        "quote",
        "heading special",
        "list statement",
        "godot",
        "bug hack",
        "gitdiff",
        "dddd",
        "endt",
        "commit",
        "question hi",
        "giftcef",
        "linenr hi",
        "giftceffw",
        "giftce",
        "conceal hi",
        "gedcom",
        "paul johnson",
        "december",
        "abbr addr",
        "adop adr1",
        "adr2 afn",
        "godot gdscript",
        "website",
        "pattern",
        "attribute syn",
        "macro syn",
        "gitcommitdiff",
        "your",
        "todo let",
        "crrw",
        "creator",
        "xexec",
        "syn match",
        "az4857 syn",
        "adam monsen",
        "opengl shading",
        "modified",
        "godoc",
        "title let",
        "gocommentgroup",
        "chan",
        "foldenable",
        "packagecomment",
        "integer hi",
        "todo regexp",
        "todos",
        "josh wainwright",
        "dot ja",
        "at gmail",
        "dot com",
        "karim belabas",
        "texstyle syntax",
        "todo syntax",
        "todd zullinger",
        "daniel kahn",
        "gillmor",
        "containsgpgtodo",
        "gprof output",
        "flat profile",
        "gretl",
        "gretl genr",
        "variable",
        "grads",
        "fronzek",
        "grid analysis",
        "display system",
        "grads scripting",
        "variables syn",
        "gnashkeyword",
        "gnashcomment",
        "gnashtodo",
        "solreadonly",
        "solsafedir",
        "john marshall",
        "jmarshall",
        "pedro alejandro",
        "lpezvalencia",
        "ddd0xx",
        "pager",
        "terminal",
        "chainloader",
        "groovytop",
        "exception",
        "groovy",
        "debug hi",
        "gtk theme",
        "packer",
        "conceal",
        "json syntax",
        "single",
        "trailing commas",
        "fixme note",
        "gnu server",
        "pages",
        "source html",
        "include java",
        "redefine",
        "argc argv",
        "begin begg",
        "end endg",
        "graph",
        "vim source",
        "matchlist",
        "vimsrcdir",
        "both",
        "getqflist",
        "cent",
        "kword",
        "c function",
        "small",
        "light",
        "vimcontinue",
        "endstr",
        "gensynvim",
        "vim9 syn",
        "vimexprlist",
        "magic",
        "hamlrubytop",
        "hamlcomponent",
        "hamltop",
        "haml",
        "hamlhtmltop",
        "david fishburn",
        "sun oct",
        "hamster classic",
        "hamster",
        "harepostfix",
        "hare",
        "vim syntax",
        "amelia clarke",
        "selene",
        "haredoc",
        "miscellaneous",
        "haste",
        "vlsi ic",
        "c preprocessor",
        "09afaf",
        "treat",
        "varid",
        "error let",
        "hbfilename",
        "hbhtmlstring",
        "hbhtmltagn",
        "hbhtmltag",
        "hbdirectivelib",
        "hbdirectiveset",
        "hbdirectiveout",
        "kkmmgg",
        "upstream",
        "a block",
        "szskkzes",
        "vim program",
        "restorer",
        "defunct",
        "aprl",
        "helplang",
        "intel hex",
        "sams ricahrd",
        "data digit",
        "folding data",
        "records",
        "record syn",
        "ignore hi",
        "vim help",
        "ident",
        "dana edwards",
        "danaedwards",
        "ic design",
        "preprocessor",
        "spacings",
        "resolutions",
        "ranges",
        "slhg",
        "hgcommitdiff",
        "sapling",
        "ken takata",
        "kentkt",
        "max coplan",
        "float hi",
        "hls playlist",
        "benot ryder",
        "comment line",
        "hogvar",
        "hogopnot",
        "hognumber",
        "hogipaddr",
        "hogcomment",
        "hogport",
        "hogoprange",
        "hogcomment syn",
        "hogstring",
        "bind",
        "elseif",
        "html template",
        "dennis",
        "htmltop",
        "htmljavascript",
        "onas",
        "htmlxml",
        "idem",
        "aria",
        "m4top",
        "htmlm4",
        "htmlos",
        "repeat syn",
        "aestiva",
        "jason rust",
        "jrust",
        "django html",
        "scomment",
        "i3configident",
        "i3configstrin",
        "i3configvalue",
        "focus",
        "i3configsh",
        "i3configstrvar",
        "i3configcommand",
        "i3configcolvar",
        "moving",
        "itanium",
        "parth malwankar",
        "pmalwankar",
        "file version",
        "masm syntax",
        "mark manning",
        "markem",
        "allan kelly",
        "ibasic file",
        "icewm menu",
        "james mahler",
        "fri apr",
        "icewm",
        "ids menu",
        "icon special",
        "icemenu",
        "data language",
        "ajelenak",
        "paren hi",
        "paren",
        "billshannon",
        "nlps",
        "npro",
        "graphics",
        "iconpregroup",
        "icon",
        "wendell turner",
        "prelude",
        "inbpc",
        "ddspe",
        "leaderscopy",
        "fontname",
        "badness",
        "elan ruusame",
        "shtop",
        "value",
        "args",
        "substituted",
        "macros",
        "ipfspecial",
        "ipftodo todo",
        "hendrik scholz",
        "hendrik",
        "openbsd pf",
        "ipfcomment",
        "xxx fixme",
        "donovan keohane",
        "syndisplay",
        "global",
        "verbextend",
        "double2",
        "snote",
        "david brgin",
        "dbuergin",
        "continuedoelse",
        "argv binpath",
        "cr crlf",
        "del debug",
        "eav empty",
        "inno setup",
        "my innosetup",
        "jason mills",
        "enterdisk syn",
        "sdsetuptype syn",
        "ifdef",
        "elif",
        "else",
        "cortopassi",
        "istoutspec",
        "peter meszaros",
        "pmeszaros",
        "istinpspec",
        "istcharacter",
        "istnumber",
        "istcomment",
        "jamcommentgroup",
        "jamparengroup",
        "ralf lemke",
        "xxx syn",
        "jargon file",
        "dan church",
        "label let",
        "javascript",
        "jls17",
        "see https",
        "javatop",
        "javadoctags",
        "javahtml",
        "tx0cr",
        "javamarkdown",
        "markdowninline",
        "jinja",
        "jinja template",
        "names syn",
        "standard jess",
        "jess",
        "paul baleme",
        "pbaleme",
        "jonas munsin",
        "xaxis yaxis",
        "x cross",
        "number let",
        "javacc",
        "java compiler",
        "javasoft",
        "vim compiler",
        "vito",
        "doc comment",
        "note xxx",
        "jspjava",
        "java server",
        "rgarciasuarez",
        "darren greaves",
        "patch",
        "thomas kimpton",
        "software",
        "eli parra",
        "json keywords",
        "jsonc",
        "izhak jakov",
        "izhak724",
        "acknowledgement",
        "kevin locke",
        "remove syntax",
        "json5",
        "mazunki hoksaas",
        "guten ye",
        "ywzhaifei",
        "syntax setup",
        "endz1",
        "kconfigconfigif",
        "abstract",
        "juliaexprsnodot",
        "regex",
        "naninf",
        "kdlnumber",
        "kdlnumber d",
        "aram drevekenin",
        "kotlin",
        "generated",
        "annotation syn",
        "kix2001 syn",
        "kixtart",
        "handle",
        "trap",
        "michael piefel",
        "entwurf",
        "cpp mode",
        "preproc",
        "error highlight",
        "storageclass",
        "delimiter",
        "sysvars",
        "false true",
        "kivy",
        "corey prophitt",
        "corey",
        "load python",
        "kivy language",
        "define kivy",
        "lace",
        "jocelyn fiat",
        "constants syn",
        "latte",
        "nick moffitt",
        "pre tag",
        "elsa",
        "glapagrossklag",
        "riley bruins",
        "ribru17",
        "keywords syntax",
        "sections memory",
        "overlay phdrs",
        "version include",
        "absolute addr",
        "names",
        "ldapconfcomment",
        "iso dialect",
        "modula2 dialect",
        "modula2 input",
        "styles",
        "error endif",
        "august",
        "pim dialect",
        "modula2",
        "longbitset",
        "procedure",
        "r10 dialect",
        "sto dos",
        "ldap ldif",
        "zak johnson",
        "zakj",
        "less",
        "jenoma",
        "todo optimize",
        "orce",
        "arset",
        "prox",
        "cache",
        "agent",
        "haskelltop",
        "lhstexcontainer",
        "ian lynagh",
        "tex markup",
        "bird style",
        "markdown style",
        "tex style",
        "lexccode",
        "user code",
        "flex",
        "van engelen",
        "patrick texier",
        "lifelines",
        "xref tag",
        "liquid",
        "liquidstatement",
        "yaml front",
        "matter",
        "liquidyamltop",
        "acdfmnrstuklp",
        "lilonumber hi",
        "number list",
        "niels horn",
        "lite",
        "liteinside",
        "lutz eymers",
        "ixtab",
        "email",
        "sql syntax",
        "errmsg",
        "livebook syntax",
        "lisplistcluster",
        "clisp ffi",
        "standard lisp",
        "keyword lispkey",
        "litestepdir",
        "litestep rc",
        "nethood",
        "winnt",
        "lotos",
        "is8807 syn",
        "specifications",
        "is8807",
        "daniel amyot",
        "damyot",
        "wed aug",
        "except",
        "logtalk",
        "logtalk entity",
        "term",
        "logic",
        "chfnauth",
        "chshauth",
        "createhome",
        "defaulthome",
        "lout",
        "report",
        "lambdaprolog",
        "teyjus",
        "vim version",
        "general",
        "lpccommentgroup",
        "lpcefungroup",
        "nodule",
        "lpcparengroup",
        "lpcpreprocgroup",
        "echo",
        "poet",
        "timo frenay",
        "timo",
        "labels syn",
        "lotusscript",
        "taryn east",
        "ultraedit",
        "textpad",
        "activateapp as",
        "base beep",
        "call case",
        "scott bigham",
        "colorterm",
        "luau",
        "marcus aurelius",
        "farias",
        "carlos augusto",
        "collapsebrtags",
        "lynx web",
        "lynx",
        "todo note",
        "uploader",
        "lyrics",
        "lrcnumber",
        "quake",
        "operators",
        "hascbackend",
        "pkg syn",
        "definelib syn",
        "definepgm syn",
        "importm3lib syn",
        "fleiner",
        "mainsyntaxm4",
        "mailquoteexps",
        "mail",
        "felix von",
        "leitner",
        "am est",
        "ascii character",
        "froms",
        "mallard",
        "jhradilek",
        "mallard markup",
        "draft",
        "skipnl",
        "roland hieber",
        "overrule",
        "ostype",
        "manconfcomment",
        "build",
        "suffix",
        "mason",
        "perltop",
        "hinrik rn",
        "sigursson",
        "pentium",
        "abgl",
        "ceopsz",
        "offset",
        "align",
        "floatingpoint",
        "vpmaxsq syn",
        "integer",
        "maple",
        "release",
        "focus master",
        "define syntax",
        "filename suffix",
        "segname segtype",
        "mtaddon",
        "matlab",
        "alex burka",
        "bbddeess",
        "all functions",
        "except keywords",
        "maxima",
        "robert dodier",
        "mermaid",
        "craig maceahern",
        "4857192255",
        "self",
        "accdescr",
        "click",
        "meson",
        "liam beguin",
        "zpetkovic",
        "disabler",
        "wikitop",
        "containshtmltag",
        "wikitableformat",
        "mediawiki",
        "yakov lerner",
        "rfc3339",
        "james vega",
        "melgroup",
        "maya extension",
        "robert minsk",
        "jason franklin",
        "sunghyun nam",
        "goweol",
        "mudunuri",
        "version info",
        "ctrlh syntax",
        "markdown",
        "matchstr",
        "metafont",
        "page",
        "latest revision",
        "magic point",
        "spam",
        "xfont vfont",
        "gero kuhlmann",
        "gero",
        "snmpv1",
        "snmpv2 mib",
        "martin smat",
        "msmat",
        "david pascoe",
        "pascoedj",
        "ax16",
        "donald knuth",
        "taocp",
        "mmix",
        "dirk hsken",
        "knuthstyle",
        "precondit endif",
        "pcimapfile",
        "parportmapfile",
        "model",
        "nil nil",
        "true syn",
        "symbols",
        "mmatop",
        "stub",
        "peter funk",
        "getdialect",
        "timo pedersen",
        "dat97tpe",
        "whitespace",
        "any array",
        "mookeyword",
        "dilnt",
        "multiplication",
        "mojonumber",
        "mojo",
        "stuff",
        "monk",
        "seebeyond",
        "mike litherland",
        "dirk van",
        "deun",
        "metapost",
        "manual",
        "autosync",
        "dumpvideo",
        "loadidx",
        "rawvideo",
        "tsprog",
        "color",
        "tabtitle",
        "am cdt",
        "pm est",
        "dummy",
        "ms message",
        "kwl7",
        "common ms",
        "messages",
        "ms idl",
        "vadim zeitlin",
        "vadim",
        "msql",
        "env variables",
        "inlclude",
        "modsim iii",
        "philipp jocham",
        "march",
        "actid all",
        "and as",
        "murphi model",
        "diego ongaro",
        "integers",
        "nspemit",
        "switch",
        "mushcode syntax",
        "rick bird",
        "clock",
        "dbck",
        "dump",
        "hook",
        "motd",
        "notify",
        "nuke",
        "restart",
        "snoop",
        "stats",
        "teleport",
        "attributes",
        "prettyprint",
        "libpath",
        "promylibdir",
        "attributes syn",
        "mupad source",
        "dave silvia",
        "dsilvia",
        "ymwd",
        "cciskaf",
        "float",
        "mysql",
        "pronovici",
        "encrypt",
        "namednotnumber",
        "nick hibma",
        "location",
        "marcin",
        "chaos",
        "dmap",
        "modules",
        "control section",
        "nastran",
        "tom kowalski",
        "any integer",
        "n1ql",
        "eugene ciurana",
        "merge syn",
        "nest syn",
        "pr3d4t0r",
        "vim command",
        "natural",
        "nasm",
        "iend",
        "movs",
        "time",
        "interval",
        "size",
        "directory cache",
        "cache buffers",
        "minimum file",
        "count",
        "daylight",
        "miner",
        "keith smiley",
        "login",
        "netrwtreegroup",
        "diffchange hi",
        "netrw listing",
        "toplevel",
        "readtoken",
        "nixexpr",
        "daiderd jordan",
        "daiderd",
        "region match",
        "bufenter",
        "syntax event",
        "synset",
        "checked",
        "muttvars",
        "neomutt",
        "bounce",
        "nsisanyopt",
        "statements",
        "nsis",
        "music",
        "rcx2",
        "scout syn",
        "rcx2 syn",
        "nqcparengroup",
        "rcx syn",
        "nqccommentgroup",
        "modes",
        "scout",
        "stefan",
        "module",
        "nginx module",
        "nginx",
        "http",
        "gost",
        "comet",
        "speed",
        "sphinx",
        "curv",
        "mtllibs",
        "exmaintainer",
        "anthony hodsdon",
        "objc syntax",
        "odin",
        "ms44",
        "and or",
        "occamnumber",
        "group",
        "omnimark",
        "paul terray",
        "mailto",
        "activate again",
        "catch clear",
        "close copy",
        "ocamltypeexpr",
        "ocamlallerrs",
        "jon parise",
        "ondirshell",
        "operator let",
        "objc type",
        "smes12",
        "qualifiers",
        "smes7",
        "smes19",
        "preparation",
        "protected",
        "structure hi",
        "openscad",
        "niklas adam",
        "luis moreno",
        "abort all",
        "alter and",
        "any as",
        "asc at",
        "oplstatement",
        "oplnumber",
        "open psion",
        "epoc16epoc32",
        "af09",
        "openvpn",
        "openvpnnumber",
        "openvpnsignal",
        "hupinttermuser",
        "containstop",
        "keepend",
        "eval",
        "menumode",
        "endurance",
        "blade",
        "illusion",
        "sneak",
        "onload",
        "disablemouse",
        "getclass",
        "notes todo",
        "containsallbut",
        "spells",
        "ronan pigott",
        "ronan",
        "alpm",
        "tcpip",
        "gclckprocs syn",
        "oracle config",
        "sandor kopanyi",
        "oraall",
        "protocol syn",
        "bequeath syn",
        "latest change",
        "haochen tong",
        "withconceal",
        "inlinecode",
        "super",
        "pappperl",
        "papphtml",
        "cdata",
        "perlinterpdq",
        "marc lehmann",
        "perlexpr",
        "config file",
        "lennart schultz",
        "string keywords",
        "protobuf text",
        "lakshay garg",
        "crgut",
        "tim chase",
        "austin",
        "pcctsinrule",
        "cpptoplevel",
        "pccts",
        "nextstep syn",
        "openbsd packet",
        "lauri tirkkonen",
        "sloadsanchor",
        "phtml",
        "perlinterpsq",
        "perlinterpmatch",
        "perlinterpslash",
        "perldata",
        "portb syn",
        "intcon syn",
        "gie eeie",
        "t0ie inte",
        "rbie t0if",
        "intf rbif",
        "microchip",
        "pdfxml",
        "nrtbf",
        "font",
        "palm os",
        "schau",
        "font id",
        "beware",
        "data syn",
        "postfix",
        "kelemen peter",
        "peter",
        "kelemen",
        "anton shestakov",
        "pikestmt",
        "pikebadgroup",
        "pike",
        "pine",
        "thu feb",
        "macro let",
        "httpviewer",
        "infopath",
        "longmanuallinks",
        "filter0xb7",
        "plaintexmath",
        "glue",
        "acute",
        "cdhoopstuvijll",
        "rrowvert",
        "skewsqrt",
        "mega",
        "phpinnerhtmltop",
        "phpclfunction",
        "phpcltop",
        "refer",
        "cphil",
        "number support",
        "c language",
        "does",
        "address and",
        "dword",
        "juerd",
        "plpperl",
        "plpend syn",
        "counter syn",
        "pl1commentgroup",
        "pl1parengroup",
        "declare dcl",
        "procedure proc",
        "loops",
        "podformat",
        "ibsclfx",
        "perl pod",
        "poe item",
        "show hide",
        "minimal",
        "address",
        "obsolete",
        "openclose",
        "bjoern jacke",
        "bjacke",
        "povray",
        "syntax syn",
        "off true",
        "false yes",
        "ppwizard",
        "dennis bareis",
        "ppwizargval",
        "constants",
        "plsqlparengroup",
        "oracle",
        "plsql",
        "klaus muth",
        "klaus",
        "altf amcr",
        "arc asfn",
        "astk barc",
        "blk box",
        "call syn",
        "cass cir",
        "melchior franz",
        "mfranz",
        "sonia heimann",
        "todo tbd",
        "privoxy",
        "prolog",
        "promela",
        "mon oct",
        "thu aug",
        "promela types",
        "class linking",
        "ps ll3",
        "dsc comment",
        "device gstate",
        "ps level",
        "postscrstring",
        "escaped",
        "matrix",
        "courier",
        "buffers",
        "redistributions",
        "this software",
        "including",
        "but not",
        "limited to",
        "pbcommentgrp",
        "google",
        "az09az",
        "posix",
        "rex barzee",
        "rexbarzee",
        "aclqrv",
        "a af",
        "ag ax",
        "e ef",
        "eg ex",
        "certain",
        "ps1comment",
        "purify header",
        "informational",
        "warning",
        "corrupting",
        "fatal",
        "haakon riiser",
        "hakonrk",
        "c syn",
        "pypa",
        "commands syn",
        "globs",
        "line break",
        "pyrex",
        "marco barisione",
        "python syntax",
        "olor",
        "chars",
        "progress",
        "ation",
        "progressdebug",
        "progressnumber",
        "edure",
        "progresstodo",
        "eter",
        "daniel",
        "sage",
        "widget",
        "rage",
        "python library",
        "reference",
        "quarto",
        "aquino",
        "vim runtime",
        "quickfix",
        "directory hi",
        "hee1",
        "lookdown lookup",
        "quakeoctalerror",
        "quake12command",
        "noprefix",
        "console",
        "onoff",
        "qb64",
        "z2z1",
        "qmlexpr",
        "radiance scene",
        "georg mischler",
        "radiance",
        "greg ward",
        "surface",
        "raccruby",
        "rule",
        "racc input",
        "dobie",
        "xdobie",
        "handling",
        "vector",
        "types syntax",
        "raml",
        "restful api",
        "hopkins",
        "rofi advanced",
        "pierguill",
        "common rc",
        "resource",
        "heiko erhardt",
        "language syn",
        "bitmap icon",
        "cursor cursor",
        "cmash",
        "ratpoison",
        "magnus woldrich",
        "djkea2",
        "bulls eye",
        "force control",
        "number syn",
        "rapid",
        "azazxc0xff",
        "azazxc0xff09",
        "rakuinterpqq",
        "rakuregexen",
        "rakuregexp5",
        "rcs log",
        "joe karthauser",
        "rcs file",
        "revision",
        "yyyy",
        "rebol",
        "yer todo",
        "words syn",
        "view",
        "view tabs",
        "spaces",
        "vicharsearch",
        "viprevword",
        "viendword",
        "visearchagain",
        "vinextword",
        "registry key",
        "registry export",
        "ulitin",
        "head",
        "regedit4",
        "win9",
        "bytes",
        "paths",
        "xxx bug",
        "davide alberani",
        "remind",
        "ben orchard",
        "rem omit",
        "mit license",
        "raimon49",
        "permission",
        "software is",
        "resolvipcluster",
        "ipv6 support",
        "09azaz",
        "radu dineiu",
        "hidesymbol",
        "r help",
        "r code",
        "epsilon",
        "kappa",
        "slabelsk",
        "over",
        "relax ng",
        "containsrnctodo",
        "rnoweb",
        "highlighting",
        "rnowebr",
        "ranke",
        "ferraz pereira",
        "rosa",
        "extension",
        "bytestream",
        "andrew bromage",
        "frameend",
        "worldbegin",
        "worldend",
        "attributebegin",
        "attributeend",
        "todo improve",
        "handles",
        "todo are",
        "redif",
        "axel castellane",
        "templatetype",
        "and add",
        "alex zvoleff",
        "configuration",
        "r syntax",
        "syntaxrpcgen",
        "mikrotik",
        "cidr notation",
        "cycle",
        "exit",
        "catch",
        "rpl2",
        "rmdlatex",
        "yaml header",
        "highlight code",
        "rmdr",
        "text format",
        "rich text",
        "control words",
        "new control",
        "rstcruft",
        "salt state",
        "jinja runtime",
        "star",
        "disallow syn",
        "disallow",
        "samba",
        "new maintainer",
        "ntlmv2 syn",
        "synfold",
        "rubymodifier",
        "sasbasicsyntax",
        "add syntax",
        "sasgraph",
        "yrdif yyq",
        "template",
        "mixin",
        "extend",
        "return",
        "steven dobay",
        "stevendobay",
        "sather",
        "science",
        "institute",
        "dede",
        "scilab",
        "benoit hamelin",
        "containedgroup",
        "preproc syn",
        "aclchg",
        "acldel",
        "aclgrp",
        "aclumask",
        "lockscreen",
        "zombie",
        "scss",
        "puria nafisi",
        "azizi",
        "always",
        "ip adresses",
        "verify",
        "synopsys design",
        "constraints",
        "tcl vim",
        "thu mar",
        "tcl syntax",
        "tcl extension",
        "xor syn",
        "task else",
        "nextstate syn",
        "in out",
        "with from",
        "ebcdic",
        "closedelay",
        "txtrigger",
        "spdnormal",
        "portd",
        "comment hilink",
        "sexplib",
        "atoms syn",
        "lists",
        "clst",
        "sgml charset",
        "capacity scope",
        "features",
        "baseset descset",
        "simple",
        "shfoldheredoc",
        "shfoldifdofor",
        "shlooplist",
        "shfunctionlist",
        "shidlist",
        "shecholist",
        "shcaselist",
        "shdblquotelist",
        "provides",
        "sgml specific",
        "space crlf",
        "dquote syn",
        "percent",
        "mp luacall",
        "alephversion",
        "uchar",
        "udelimiterunder",
        "umathchardef",
        "umathruleheight",
        "umathstackvgap",
        "umathxscale",
        "uoverwithdelims",
        "hai tp",
        "bestanden",
        "hanya dalam",
        "fiierele",
        "tp tin",
        "aemacron amstex",
        "aacute",
        "abrevehook",
        "afterpar",
        "agrave ahook",
        "amstex amacron",
        "atilde",
        "beforepar beta",
        "bigm",
        "delta",
        "oldstable",
        "experimental",
        "bullseye",
        "trixie",
        "forky",
        "focal",
        "jammy",
        "devel",
        "buzz",
        "maverick",
        "keyword syntax",
        "typescriptvalue",
        "title syntax",
        "typescripttype",
        "blabla",
        "sicad",
        "zbranyiczky",
        "irpt",
        "irptl",
        "mes1",
        "swift project",
        "simula",
        "simula syn",
        "keyword end",
        "when",
        "nagle",
        "main url",
        "comparison",
        "load sinda",
        "on si",
        "off eng",
        "sieve",
        "skill",
        "nsqn",
        "dirfile",
        "pnamestring",
        "pathversion",
        "schemeskill",
        "afterbefore",
        "tolist",
        "renderman",
        "dan piponi",
        "specialkey hi",
        "headers",
        "nontext hi",
        "jan hlavacek",
        "xuserblock",
        "for loop",
        "userblock",
        "null syn",
        "tracedrop",
        "daheartbeat",
        "slpregcomment",
        "spi file",
        "private public",
        "slrn score",
        "preben peppe",
        "guldberg",
        "age bytes",
        "syntaxsm",
        "smarty",
        "mon nov",
        "constant",
        "slice",
        "zeroc",
        "morel bodin",
        "smcl",
        "stata markup",
        "jeff pitblado",
        "jpitblado",
        "statasmcl",
        "directive",
        "smith",
        "smil",
        "herve foucher",
        "smil boston",
        "animation syn",
        "smlallerrs",
        "smlaenoparen",
        "fabrizio zeno",
        "cornelli",
        "zeno",
        "snns network",
        "snns http",
        "lln lun",
        "toff soff",
        "ctype syn",
        "snns",
        "maximum",
        "maximum output",
        "stringcomment",
        "initvalvalstr",
        "mono",
        "snobol4",
        "rafal sulejman",
        "site",
        "csnobol",
        "parens",
        "cothi",
        "afpnumkg",
        "spice circuit",
        "noam halevy",
        "insensitive syn",
        "spice",
        "splintallstuff",
        "splintannotelem",
        "ralf wildenhues",
        "splint home",
        "c code",
        "purpose",
        "buildinstall",
        "linux rpm",
        "freund",
        "ormeir",
        "wed oct",
        "spyce",
        "rimon barr",
        "rimon",
        "spupordinary",
        "input output",
        "spuptextproc",
        "type stream",
        "bugs",
        "execution",
        "snns result",
        "fishburn",
        "thu sep",
        "sqloracle",
        "buffer",
        "sqlforms",
        "austin ziegler",
        "prev change",
        "todo find",
        "xpos",
        "java syntax",
        "sqlj",
        "sap hana",
        "upper case",
        "upper",
        "schema syn",
        "user syn",
        "memory database",
        "sql syn",
        "spl syn",
        "comment syntax",
        "query language",
        "adaptive server",
        "anywhere",
        "xpscanf syn",
        "methods syn",
        "starea syn",
        "stcentroid syn",
        "stperimeter syn",
        "paul moore",
        "oracle nquote",
        "diffadd hi",
        "diffchange let",
        "section",
        "query report",
        "writer",
        "nathan stratton",
        "treadway",
        "jeff lanzarotta",
        "squid",
        "thanksto",
        "ilya sher",
        "iso8601",
        "subrip",
        "range syn",
        "ddd skipwhite",
        "bold",
        "sections syn",
        "override",
        "smalltalk",
        "arndt hesse",
        "hesse",
        "openssh client",
        "jakub jelen",
        "jakuje",
        "dominik fischer",
        "openssh server",
        "conditional",
        "repeats",
        "types",
        "globals",
        "statafuncgroup",
        "statamacrogroup",
        "stataparengroup",
        "rmcoll syn",
        "invftail",
        "invibeta",
        "haseprop",
        "mata",
        "structurizr dsl",
        "venthur",
        "hsiaoming yang",
        "lepture",
        "marc harter",
        "sudoersuser",
        "lazy",
        "generic",
        "swig",
        "julien marrec",
        "apache license",
        "runtime library",
        "vim maintainer",
        "emir sari",
        "nowarn",
        "i3confignumvar",
        "endze",
        "josef litos",
        "james eapen",
        "nargs syncolor",
        "nargs synlink",
        "syncolor type",
        "syncolor ignore",
        "syncolor added",
        "preproc synlink",
        "type synlink",
        "special synlink",
        "budden",
        "ingo karkat",
        "myk taylor",
        "install syntax",
        "syntax au",
        "systemverilog",
        "verilog syntax",
        "tads",
        "amir karger",
        "karger",
        "history info",
        "syntaxtags",
        "tak2",
        "tak3",
        "tak2000",
        "tak compare",
        "tak output",
        "load tak",
        "tar listing",
        "type let",
        "john florian",
        "wed jul",
        "key names",
        "values",
        "characters",
        "uuids syn",
        "rufus cable",
        "verbose tap",
        "rufus",
        "tap output",
        "pass",
        "foolman",
        "cmovsetj",
        "borland",
        "united force",
        "vector graphics",
        "verbose",
        "known template",
        "xfire user",
        "tcshvarlist",
        "tcsh",
        "gautam iyer",
        "ttlconstant",
        "term language",
        "tera term",
        "kcpy kcrt",
        "eenlrtbfs",
        "xhp xhpa",
        "xt xenl",
        "msgr",
        "tclspecialc",
        "tcltk",
        "taylor venable",
        "taylor",
        "system",
        "geometry",
        "tss syn",
        "typescript",
        "kao weiko",
        "jose elera",
        "campana",
        "zhao yi",
        "scott shattuck",
        "irc channel",
        "freenode",
        "vim filetype",
        "andy lester",
        "tt2topcluster",
        "typescriptreact",
        "react",
        "strpart",
        "include perl",
        "rawperl",
        "moriki",
        "atsushi",
        "ucnumber",
        "unrealscript",
        "openwrt unified",
        "colin caine",
        "fancy",
        "normal let",
        "typstcode",
        "matchgroupnoise",
        "noise highlight",
        "hashtag",
        "typstmarkup",
        "noise",
        "motif uil",
        "user interface",
        "thomas koehler",
        "september",
        "import hi",
        "anton",
        "prunefs",
        "prunenames",
        "prunepaths",
        "prunebindmounts",
        "upstart",
        "upstart job",
        "michael biebl",
        "biebl",
        "james hunt",
        "archivebit syn",
        "datelimit syn",
        "daysold syn",
        "deleted syn",
        "destination syn",
        "dirsonly syn",
        "drivealias syn",
        "filedate syn",
        "filedelete syn",
        "files syn",
        "msid",
        "innovation data",
        "rob owens",
        "ull ulls",
        "msg types",
        "ip address",
        "agtpcsrv",
        "profile",
        "version date",
        "ms windows",
        "action devpath",
        "valgrind memory",
        "debugger output",
        "roger luethi",
        "program url",
        "christoph gysin",
        "valve data",
        "tag syn",
        "wend",
        "prather",
        "pratam",
        "minor",
        "iskeyword",
        "xnor xor",
        "veraparengroup",
        "veralabelgroup",
        "vhdl",
        "linting",
        "vhsic",
        "high speed",
        "new style",
        "verilog",
        "mun johl",
        "485763",
        "vos cm",
        "andrew mcgill",
        "az syn",
        "bwlfdgh",
        "fdgh",
        "bwlqofdgh",
        "psect",
        "virata aconfig",
        "virata",
        "viratahexnumber",
        "execoptions",
        "ewind",
        "uffer",
        "malt",
        "wind",
        "vrmlevents",
        "vrmlfields",
        "vrmlcomment",
        "vrmlprotos",
        "vrmlnodes start",
        "externproto",
        "proto",
        "vgrindefs",
        "vgrindefs file",
        "profilesetzss",
        "java source",
        "parmp",
        "novimmain",
        "extern",
        "mswin",
        "featguimswin",
        "vimdll",
        "editnone",
        "level",
        "heading level",
        "vimtestsetup",
        "noop",
        "java language",
        "nontext",
        "returns",
        "chapter",
        "annotations",
        "labels",
        "text text",
        "tag head",
        "void",
        "htmlsnippets",
        "object",
        "object apply",
        "object bb",
        "no operation",
        "u003b",
        "n value",
        "pair",
        "long",
        "generics",
        "predicate",
        "vimtestsetup hi",
        "error import",
        "nontext class",
        "see jls",
        "declaration",
        "taggable",
        "binaryoperator",
        "i1 x",
        "i1 y",
        "string str",
        "taggable i1",
        "letters",
        "letters alpha",
        "letters beta",
        "tag tail",
        "use identity",
        "supplier",
        "tests",
        "identity",
        "comparable",
        "intfunction",
        "a dummy",
        "tggabl",
        "string s",
        "string tostring",
        "do not",
        "this file",
        "indent4",
        "indent2",
        "indent8",
        "tggabls",
        "fields",
        "classlock",
        "defines demo",
        "testable",
        "serviceloader",
        "malformed",
        "woof",
        "string s1",
        "string s2",
        "browns",
        "jumpss",
        "string s4",
        "string s6",
        "string apply",
        "string bay",
        "as quick",
        "woofs",
        "beta",
        "yieldable",
        "t yield",
        "other",
        "colon",
        "arrow",
        "unfoldenable",
        "italic",
        "strikethrough",
        "bold italic",
        "foobar",
        "modula2 pim",
        "test file",
        "colouring",
        "is licensed",
        "under the",
        "from system",
        "modula2 iso",
        "retain",
        "to do",
        "modula2 r10",
        "unsafe",
        "cardinal",
        "var abc",
        "variableb",
        "variablec",
        "var3",
        "var4",
        "var5",
        "var6",
        "variablea",
        "variabled",
        "variablee",
        "variable3",
        "varb",
        "variable1",
        "variable2",
        "varc",
        "vard",
        "variable4",
        "function1",
        "function4",
        "function2",
        "function3",
        "eq ne",
        "gt ge",
        "le lt",
        "ne gt",
        "ge le",
        "variableathis",
        "valsubfunc",
        "below",
        "reply",
        "issue",
        "cfoo",
        "ifoo",
        "interrupt",
        "ctrlc",
        "e123 catch",
        "varvalue",
        "cdpath",
        "backuptype",
        "defaultdevice",
        "executefbackup",
        "shall",
        "please wait",
        "buffer foo",
        "nargs range",
        "completer1 foo",
        "completer2 foo",
        "foo2",
        "bang",
        "nargs foo",
        "foo delcommand",
        "multiline",
        "commenttitle",
        "end augroup",
        "autocmd",
        "fixme call",
        "matched",
        "start not",
        "end not",
        "end call",
        "xterm call",
        "givename",
        "vim9",
        "test const",
        "foo def",
        "ex command",
        "dict",
        "end endfunction",
        "end enddef",
        "answer",
        "warningmsg",
        "endwhile",
        "dotest3",
        "dotest4",
        "dotest5",
        "dotest6",
        "test1",
        "test2",
        "test3",
        "test4",
        "test5",
        "funa",
        "dofuna",
        "funb",
        "dofunb",
        "func",
        "dofunc",
        "fund",
        "dofund",
        "foo delfunction",
        "foo function",
        "foo comment",
        "foo none",
        "guifg",
        "comment none",
        "ctermfgcyan",
        "end end",
        "end let",
        "end line",
        "end line1",
        "a basic",
        "rhs map",
        "foo bar",
        "fubar",
        "needle",
        "foogroup foo",
        "foogroup",
        "homeinclude",
        "defabc",
        "snomagicfoobar",
        "smagicfoobar",
        "special",
        "line comment",
        "b special",
        "char0x0044",
        "testcluster",
        "cchar",
        "keywords list",
        "vim line",
        "element",
        "x1f xf",
        "31 3",
        "u02a4 u000002a4",
        "string escape",
        "hexadecimal",
        "0xff echo",
        "decimal",
        "octal echo",
        "0377 echo",
        "vim shebang",
        "instance",
        "pairclasstest",
        "vim keymap",
        "end const",
        "expr",
        "foo unlet",
        "vim comment",
        "vim9 ex",
        "end foo",
        "xterm foo",
        "eof foo",
        "vim9script",
        "s vim9script",
        "12345",
        "0b10101010",
        "192939",
        "0777",
        "0o777",
        "0xabcdef00",
        "0x12345678",
        "runtest",
        "rticle",
        "syntax test",
        "file 0",
        "dougkearns",
        "2024 jun",
        "13 0",
        "test failures",
        "when comparing",
        "italicized text",
        "eading level",
        "igure",
        "eader",
        "frame",
        "diomatic text",
        "nput",
        "utput",
        "icture",
        "rogres",
        "cript",
        "earch",
        "ection",
        "elect",
        "reformat",
        "failure 0",
        "egend",
        "oscript",
        "bject",
        "ptgroup",
        "ption",
        "trong",
        "tyle",
        "able",
        "emplate",
        "extarea",
        "itle",
        "ource",
        "olgroup",
        "atalist",
        "etails",
        "ialog",
        "ieldset",
        "igcaption",
        "eleted text",
        "mphasis",
        "mbed",
        "side",
        "udio",
        "lockquote",
        "anvas",
        "aption",
        "ring at",
        "ideo",
        "cronym",
        "rame",
        "rameset",
        "arque",
        "enuitem",
        "rack",
        "narticulated an",
        "oframes",
        "trike",
        "ortal",
        "aram",
        "trikethrough",
        "highlighted",
        "elements have",
        "never be",
        "mage",
        "interface 0",
        "efault 0",
        "mport 0",
        "redundant",
        "tail",
        "alue",
        "nterface 0",
        "primer",
        "label 0",
        "tatic 0",
        "oid 0",
        "edundant",
        "identity cast",
        "expres",
        "to nest",
        "typeuse an",
        "htmlcom",
        "here is",
        "snip",
        "tmlsnip",
        "egion 0",
        "literal",
        "html com",
        "no entry",
        "point method",
        "code main",
        "return 0",
        "code nul",
        "eturn 0",
        "noop1",
        "may be",
        "used after",
        "noop2",
        "literalu0",
        "is proces",
        "return 8",
        "noop5",
        "nbsp",
        "noop6",
        "noop7",
        "link j0",
        "javaignorej0",
        "vimtestsetup s0",
        "fen 0",
        "nt 0",
        "majorversion",
        "empty string",
        "rotected 0",
        "compares this",
        "instance with",
        "the pas",
        "code that",
        "no period",
        "for the",
        "above sum",
        "rivate 0",
        "htmlsnip",
        "return an",
        "link m0",
        "execute",
        "match visual",
        "fen c0",
        "ref0",
        "literals",
        "clas",
        "tostring",
        "start 0",
        "ostring 0",
        "replace 0",
        "ubstring 0",
        "noop8",
        "noop9",
        "markdowncom",
        "arkdownsnip",
        "markdown com",
        "code public",
        "the method",
        "must be",
        "declared",
        "code 0",
        "the major",
        "java version",
        "used with",
        "inal 0",
        "markdownsnip",
        "blanks and",
        "re 0",
        "static void",
        "param a0",
        "rgs 0",
        "optional c0",
        "arguments 0",
        "invoke",
        "nontext 0",
        "hrow 0",
        "ew 0",
        "object module",
        "object open",
        "exports opens",
        "requires",
        "bject 0",
        "eplacement 0",
        "ar 0",
        "opens",
        "object opens",
        "object provides",
        "object requires",
        "object to",
        "uses",
        "xtends 0",
        "mplements 0",
        "ealed 0",
        "ermits 0",
        "bstract 0",
        "c1 i0",
        "noop3",
        "noop4",
        "a sum",
        "foldingtests",
        "static",
        "object b",
        "escapestests",
        "static final",
        "string hel",
        "har 0",
        "0ffffff0",
        "1200",
        "1210",
        "1230",
        "1240",
        "1250",
        "1260",
        "1270",
        "1300",
        "1310",
        "2040",
        "3240",
        "0100",
        "0120",
        "0130",
        "0140",
        "0150",
        "0160",
        "0170",
        "0200",
        "0210",
        "0230",
        "biginteger",
        "t1 x",
        "uper 0",
        "e element",
        "radix",
        "ecord 0",
        "tatic",
        "t dum",
        "isempty",
        "ublic 0",
        "ase 0",
        "ong 0",
        "witch 0",
        "genericstests",
        "todo 0",
        "3400",
        "3410",
        "3420",
        "3430",
        "3450",
        "3460",
        "3470",
        "3500",
        "3510",
        "3520",
        "sempty",
        "opal",
        "opsome",
        "ushal",
        "ushsome",
        "adix",
        "romdecimal",
        "lambdaexpres",
        "leftconst07",
        "leftconst08",
        "leftconst09",
        "i1 0",
        "leftconst10",
        "leftconst1",
        "leftconst01",
        "leftconst02",
        "leftconst03",
        "leftconst04",
        "leftconst05",
        "leftconst06",
        "leftconst",
        "const1",
        "const2",
        "witch",
        "hen 0",
        "alpha w0",
        "beta w0",
        "equals",
        "leftconst12",
        "typearguments",
        "identifier 0",
        "nteger",
        "ashcode",
        "omparable",
        "ry 0",
        "atch 0",
        "unction",
        "tring",
        "length",
        "ntfunction",
        "intsup",
        "clone",
        "naryoperator",
        "alueof",
        "quals",
        "redicate",
        "equalist",
        "gymnastics for",
        "ipredicate",
        "superequalist",
        "ethodhandle",
        "invokepredicate",
        "methodhandle mh",
        "throwable th",
        "a dum",
        "b dum",
        "t extends",
        "stringer",
        "ostring",
        "ntvalue",
        "onsumer",
        "println",
        "uperequalist",
        "nvokepredicate",
        "ethodhandle mh",
        "remember",
        "num 0",
        "asci",
        "stylable",
        "t e0",
        "tringer",
        "ative 0",
        "ynchronized 0",
        "trictfp 0",
        "thread",
        "qualist",
        "ransient 0",
        "methodstests",
        "string t0",
        "la s",
        "string name",
        "equires 0",
        "odule 0",
        "this module",
        "to the",
        "sample project",
        "published at",
        "mport m0",
        "related sup",
        "ransitive 0",
        "xports 0",
        "pens 0",
        "jdk 23",
        "ses 0",
        "rovides 0",
        "ith 0",
        "doautocmd",
        "syntax 0",
        "0xp0",
        "ouble 0",
        "minusoned",
        "xap1",
        "doto",
        "numberstests",
        "ouble",
        "loat 0",
        "maxdecf",
        "maxhexf",
        "mindecf",
        "minhexfa",
        "minhexfb",
        "maxdecd",
        "maxhexd",
        "minhex",
        "minoct",
        "minbin",
        "minusonehex",
        "minusoneoct",
        "minusonebin",
        "maxhexl",
        "maxoctl",
        "minusonehexl",
        "minusoneoctl",
        "minusonebinl",
        "jdk 21",
        "object o",
        "rue 0",
        "alse 0",
        "stringtests",
        "a quick",
        "brown fox",
        "jumps over",
        "the lazy",
        "there are",
        "lf after",
        "jumps0",
        "ver the0",
        "a nested",
        "string ap",
        "brown",
        "jumps",
        "over the",
        "nested com",
        "switchtests",
        "ield",
        "a or",
        "ield 0",
        "yte 0",
        "1let",
        "hort",
        "hort 0",
        "nofoldenable 0",
        "0000 0",
        "unfoldingtests",
        "reak 0",
        "old italic",
        "s1024",
        "talic",
        "inheritdoc",
        "object ap",
        "hile 0",
        "for vim",
        "file is",
        "licensed under",
        "the vim",
        "license 0",
        "efinition 0",
        "rom 0",
        "predefined",
        "ype 0",
        "ointer 0",
        "il 0",
        "nter",
        "ninter",
        "octal",
        "pragmas",
        "with emphasis",
        "opyright 0",
        "uthor 0",
        "fred flintstone",
        "icense 0",
        "baz bam",
        "ispose 0",
        "oc 0",
        "ord 0",
        "dr 0",
        "ast 0",
        "size 0",
        "rocedure 0",
        "egin 0",
        "nd 0",
        "ixme 0",
        "eprecated 0",
        "procedures",
        "ewfo",
        "nteger 0",
        "disabled",
        "hile fo",
        "do 0",
        "while",
        "synonyms",
        "itset 0",
        "roc 0",
        "roces",
        "ewproces",
        "ransfer 0",
        "ystem 0",
        "ongcard 0",
        "bozo bim",
        "dada jingle",
        "etbar",
        "lias 0",
        "defined pragmas",
        "numeric",
        "xcafed0",
        "inline",
        "noinline",
        "implementation",
        "cho 0",
        "this for",
        "done",
        "is a",
        "very handy",
        "solution and",
        "no real",
        "replacement",
        "available",
        "unction1",
        "a text",
        "shel",
        "his is",
        "home 0",
        "ariable10",
        "this is",
        "with a",
        "nset 0",
        "962 0",
        "f true",
        "unab",
        "abclear 0",
        "bclear 0",
        "java module",
        "changefilename",
        "restorefilename",
        "todo highlight",
        "author",
        "antonio colombo",
        "delete",
        "processing",
        "hebrew",
        "complete",
        "separate",
        "usercomplete",
        "matchitem",
        "cargo",
        "utility call",
        "trim trailing",
        "nvim",
        "linenr",
        "newcolumn",
        "columnnr",
        "wordregex",
        "gnat",
        "atomic",
        "timeslice",
        "structmembers",
        "nextitem",
        "col2",
        "typename",
        "typeref",
        "mpkeywords",
        "ctxkeywords",
        "binarysearch",
        "contextcmd",
        "omnisyntaxlist",
        "vim completion",
        "alex vear",
        "sung pae",
        "clojure version",
        "emptynode",
        "unitname",
        "setsession",
        "dec ada",
        "switchsession",
        "zat line",
        "vim adadec",
        "synidattr",
        "strridx",
        "auto",
        "nfz62010",
        "mdn css",
        "mask",
        "mnem",
        "setprojectfile",
        "pretty",
        "project file",
        "bufreadpost",
        "vim autoload",
        "decho",
        "dret",
        "getonescript",
        "e486",
        "dredir",
        "buffer test",
        "beginning",
        "prevnonblank",
        "getline",
        "xhtml",
        "dot pl",
        "doctype",
        "completetags",
        "harepath",
        "finddir",
        "attempt",
        "hare module",
        "java",
        "strive to",
        "for at",
        "least vim",
        "e121",
        "dialect",
        "setdialect",
        "hide",
        "bruno sutic",
        "blur",
        "accesskey",
        "onblur",
        "onfocus",
        "select",
        "tosource",
        "anchor",
        "cookie",
        "iframe",
        "checkbox",
        "codebase",
        "infinity",
        "foreign",
        "dorec",
        "lexer",
        "panic",
        "netrw",
        "charles e",
        "win9x",
        "dfunc",
        "systemroot",
        "nfhhtml",
        "nfhhtm",
        "nfhjpg",
        "toolbar menu",
        "synstack",
        "indent",
        "quote handling",
        "extraoemake",
        "hostcc",
        "buildcc",
        "buildcflags",
        "buildldflags",
        "freebasic",
        "precedence",
        "searchbracket",
        "plnum",
        "shiftwidth",
        "extrafunc",
        "python task",
        "parlnum",
        "commenttodo",
        "omni completion",
        "xml directory",
        "scope",
        "abbr",
        "fixed",
        "findmatch",
        "matchmax",
        "findbracket",
        "lispword",
        "isforfold",
        "inherestring",
        "nulldict",
        "column",
        "rstfoldcache",
        "cacherstfold",
        "rstfold",
        "antony lee",
        "helper",
        "getcurpos",
        "endfunction",
        "getpos",
        "shelltokenize",
        "withpath",
        "fnamemodify",
        "jump",
        "warningmsg echo",
        "emit",
        "play",
        "defpython",
        "rustfmtcommand",
        "runrustfmt",
        "detectversion",
        "split",
        "getconfigvar",
        "stephen sugden",
        "stephen",
        "save rustfmt",
        "vrustfmt",
        "nread",
        "loadfile",
        "getdirchoices",
        "yesn",
        "winbufnr",
        "vimspell",
        "bufwinnr",
        "index",
        "sqlcwarningmsg",
        "sqlcgetcolumns",
        "sqlcerrormsg",
        "compltype",
        "omni",
        "allow user",
        "synlist",
        "problem",
        "snum",
        "lnum",
        "isinclassdef",
        "isposinclassdef",
        "getrubyvartype",
        "getoption",
        "tohtml",
        "diff2html",
        "jumptoline",
        "mime charset",
        "latin1",
        "typst",
        "echoerr",
        "echomsg",
        "typeset",
        "echowarn",
        "getrunningjobs",
        "tex root",
        "addjob",
        "removejob",
        "showmesg",
        "chgdir",
        "vimball",
        "decompress",
        "vimballhome",
        "mkvimball",
        "restoresettings",
        "mkdir",
        "item",
        "emptystackp",
        "getlastopentag",
        "vimxmlattrinfo",
        "vimxmltaginfo",
        "tagstack",
        "istag",
        "endtag",
        "decreaseindent",
        "textwidth",
        "emptytag",
        "starttag",
        "browse",
        "setsaneopts",
        "restoreopts",
        "extract",
        "adacore",
        "cmdpre",
        "makeprg",
        "cargo file",
        "cmdpost",
        "basefont",
        "samp",
        "cite",
        "applet",
        "input",
        "middle",
        "acronym",
        "button",
        "gamma",
        "theta",
        "omega",
        "apos",
        "cong",
        "legend",
        "annotation",
        "attributegroup",
        "choice",
        "selector",
        "field",
        "choose",
        "foreach",
        "sort",
        "param",
        "stripspace",
        "all rights",
        "apple system",
        "tmpdir",
        "containerdir",
        "supportawdd",
        "supportbtserver",
        "apple",
        "rights",
        "file system",
        "fontd",
        "bookmark",
        "securityscope",
        "directory",
        "utility",
        "regularfile",
        "packagekit",
        "darwincachedir",
        "store database",
        "allow",
        "security",
        "reboot",
        "os x",
        "homedir",
        "realhomedir",
        "usersbasedir",
        "usercachedir",
        "audio",
        "callkit",
        "datacloudkit",
        "workaround",
        "rdar",
        "ckassets",
        "mmcs",
        "anyuuid",
        "caches",
        "allow fsctl",
        "fontvalidator",
        "frameworks",
        "coreservices",
        "carbon",
        "lsarpc",
        "dssetup sandbox",
        "squash",
        "readonly",
        "deny write",
        "issue sandbox",
        "network stack",
        "services lookup",
        "readwrite file",
        "system keychain",
        "wkssvc sandbox",
        "brlm",
        "byte range",
        "lock manager",
        "allow smbd",
        "allow wsp",
        "allow launchd",
        "netfsserver",
        "allow file",
        "sandbox profile",
        "ipv4",
        "ipv6",
        "netcore",
        "afsystem",
        "sysprotocontrol",
        "edge cache",
        "video",
        "allow access",
        "sandbox",
        "pkrecipt",
        "cachedir",
        "cmds",
        "applesmcclient",
        "smt isolation",
        "verw",
        "tempdir",
        "byhost",
        "sigkill",
        "sysmacsyscall",
        "sysaccess",
        "sysclose",
        "syscsrctl",
        "sysfchmod",
        "sysfsetxattr",
        "sysfsgetpath",
        "sysfstat64",
        "sysfstatat64",
        "darwintempdir",
        "reserve",
        "parampath",
        "mailv2",
        "mail importer",
        "allow mail",
        "library",
        "appcontainer",
        "document being",
        "quick look",
        "manage",
        "carbon noise",
        "make sure",
        "opengl",
        "plugin",
        "movie",
        "safari",
        "unix domain",
        "uuid cache",
        "redistribution",
        "is provided",
        "direct",
        "cfnetwork",
        "satellite",
        "files access",
        "daemon",
        "webdav file",
        "sharing",
        "sysgethostuuid",
        "gr ucs",
        "freebsd",
        "netbsd",
        "ucs gb2312",
        "cp932vdc",
        "ucs cp932vdc",
        "gb2312",
        "gbk ucs",
        "gb18030 ucs",
        "gb18030",
        "cpucs",
        "grucs",
        "appleucs",
        "gr mapperzone",
        "iso8859ucs",
        "big5ucs",
        "jisucs",
        "cnsucs",
        "appleinternal",
        "applications",
        "volumes",
        "gregory mcgarry",
        "coff dsp21k",
        "risc os",
        "programmer",
        "appendix e",
        "packdir",
        "git pack",
        "acorn",
        "chunk file",
        "from risc",
        "os programmer",
        "corrupted",
        "infocom",
        "david griffith",
        "glulx",
        "text adventure",
        "game",
        "adventure game",
        "allen garvin",
        "dave chapeskie",
        "aes crypt",
        "encrypted data",
        "joerg jenderek",
        "createdby",
        "createdby b",
        "windows gui",
        "alliant",
        "alliant fx",
        "fx series",
        "allegro",
        "toby deshane",
        "algol",
        "4 string",
        "bmode",
        "proc",
        "defmens vendors",
        "procedure b",
        "bref",
        "bflex",
        "bsdos",
        "bsdi",
        "unix32v",
        "sunos",
        "again",
        "hive rc",
        "sequence",
        "avro",
        "parquet",
        "apache hadoop",
        "apache big",
        "obj apache",
        "orc apache",
        "par1 apache",
        "pitentry",
        "android vdex",
        "android backup",
        "0 dalvik",
        "android bootimg",
        "password salt",
        "hidden",
        "loki",
        "apl workspace",
        "module sound",
        "density",
        "amigaos",
        "postma",
        "soundmon module",
        "trid",
        "amiga disk",
        "dos disk",
        "application",
        "mpeg v4",
        "dmb maf",
        "ycbcr",
        "cmaf media",
        "monaural",
        "heif image",
        "apple quicktime",
        "mike",
        "codec",
        "live",
        "applixware",
        "peter soos",
        "words words",
        "raster bitmap",
        "macro macro",
        "builder builder",
        "mac os",
        "ii image",
        "disk image",
        "blocks",
        "apple dos",
        "appleworks word",
        "spreadsheet",
        "sweet",
        "bernie",
        "rescue",
        "corrupt",
        "bobo",
        "amanda",
        "tapestart date",
        "file dump",
        "arm coff",
        "aarch64",
        "arm thumb",
        "armv7 thumb",
        "apt cache",
        "second",
        "bits per",
        "image width",
        "per meter",
        "asfdataobject",
        "time offset",
        "data length",
        "colors",
        "040t",
        "asterx",
        "guy harris",
        "word words",
        "grap graphic",
        "macr macro",
        "asterx version",
        "words document",
        "graphic",
        "coff",
        "we32000 coff",
        "mau hardware",
        "sccs",
        "we32k",
        "bbxpro5files",
        "oliver dammer",
        "dammer",
        "beetle vm",
        "beetle",
        "cable",
        "box router",
        "fritz",
        "box fritz",
        "password b",
        "oem b",
        "language b",
        "thu jun",
        "x tap",
        "sender",
        "x5fx81x44",
        "batch",
        "notification",
        "georg sauthoff",
        "gsma",
        "gsm association",
        "cdrs",
        "bflt",
        "philippe de",
        "muyter",
        "blockhashloc",
        "marco pontello",
        "sam alignment",
        "bgzf",
        "samtools",
        "binary call",
        "binary sequence",
        "fasta",
        "iupac",
        "blocked gnu",
        "patchmaster",
        "binary format",
        "alois schloegl",
        "medica soft",
        "axgr biosigaxg",
        "biosigaxg",
        "ircam file",
        "adpcm",
        "david korth",
        "song",
        "atari st",
        "ache",
        "david",
        "bonk",
        "insane",
        "pokey",
        "otto",
        "zbot",
        "blcr",
        "uncomment",
        "vma06",
        "kernel",
        "berkeley lab",
        "c000r000 blcr",
        "sparc",
        "armeb",
        "sparc64",
        "blender",
        "native format",
        "glob chunk",
        "blender3d",
        "scripts",
        "bpy blender3d",
        "bpython script",
        "blackberry file",
        "blackberry rim",
        "etp file",
        "0x10",
        "greg roelofs",
        "gnu tar",
        "ascii null",
        "compress",
        "0x04",
        "openoffice",
        "freeze",
        "archiver",
        "designer",
        "spark",
        "hpack",
        "oblivion",
        "zpack",
        "blink",
        "npack",
        "xpack",
        "blit mpxmux",
        "blit",
        "vaxorder",
        "blit stuff",
        "ttcomp",
        "ttcomp archive",
        "need",
        "we32 dmd",
        "birtual machine",
        "oses",
        "sparc demand",
        "4096",
        "sparc pure",
        "chiasmus",
        "federal",
        "office",
        "bundesamt",
        "sicherheit",
        "xia1r chiasmus",
        "xis chiasmus",
        "btsnoop",
        "hci uart",
        "hci bcsp",
        "hci serial",
        "mikhail gusarov",
        "dottedmag",
        "nekovm",
        "neko nekovm",
        "resilient logic",
        "guile file",
        "goof",
        "le b",
        "be b",
        "cbor",
        "concise binary",
        "raw tape",
        "cbm basic",
        "dirk jagdmann",
        "d64 image",
        "d71 image",
        "d81 image",
        "c64 emultar",
        "cartridge image",
        "c source",
        "bcpl source",
        "bcpl",
        "libhdr",
        "java se",
        "java bytecode",
        "macho",
        "java class",
        "cpu type",
        "cafe babes",
        "java start",
        "x version",
        "tablature file",
        "chord music",
        "file format",
        "chord text",
        "powertab",
        "jelmer vernooij",
        "jelmer",
        "powertab v3",
        "runect citrus",
        "lcctype",
        "ctrsme citrus",
        "ctrsmo citrus",
        "lcmonetary",
        "ctrsnu citrus",
        "lcnumeric",
        "ctrsti citrus",
        "lctime",
        "cddb",
        "cd player",
        "developer",
        "julien blache",
        "database",
        "keyindex",
        "help",
        "systems",
        "microcode",
        "netbsdalpha",
        "ios microcode",
        "kompas",
        "vrml",
        "xml document",
        "reserved",
        "applicationtype",
        "autocad dwg",
        "schema",
        "scanline",
        "alliance",
        "claris",
        "claris clip",
        "377377377377001",
        "claris works",
        "c1 r1",
        "c2 r1",
        "c3 r1",
        "intergraph",
        "clipper coff",
        "fairchild",
        "clipper use",
        "hitachi sh",
        "common object",
        "coff intel",
        "intel",
        "files format",
        "djgpp",
        "clojure script",
        "clojure",
        "jason felice",
        "clojure module",
        "convex",
        "convex soff",
        "convex storage",
        "convexes",
        "added",
        "core file",
        "third",
        "idc file",
        "suiteid",
        "chart",
        "debacle",
        "ttcn",
        "tree",
        "notation",
        "suite ttcn",
        "abstract test",
        "suite",
        "boseos",
        "snmperrnoerror",
        "commitrow",
        "readcreate",
        "retlen",
        "writecreate",
        "mydata",
        "putindexdata",
        "snmpsetvarvalue",
        "checkfnslocal",
        "not be",
        "note note",
        "decides",
        "snmp error",
        "requestvb",
        "asnoctetstr",
        "asnobjectid",
        "logerr",
        "undoinfo",
        "rcsfile",
        "end code",
        "debugmsgtl",
        "initialize",
        "allowcreation",
        "adding",
        "oidlength",
        "handler",
        "snmperrgenerr",
        "colnum",
        "break",
        "current",
        "snmp",
        "dodescr",
        "nodeinfo",
        "calldefine",
        "doformatedtext",
        "startperl",
        "perleval",
        "mib type",
        "oids",
        "const",
        "register",
        "asn type",
        "rorw status",
        "generating code",
        "mib tree",
        "netsnmp style",
        "getnext",
        "mib table",
        "tabledata",
        "container",
        "mibs",
        "print",
        "please specify",
        "send",
        "memcpy",
        "rscreateandgo",
        "writemethod",
        "findvarmethod",
        "variablesoid",
        "substr",
        "varlen",
        "sprintmaxlen",
        "datacontext",
        "mode",
        "freeundoinfo",
        "reallyreally",
        "initializingn",
        "handlercanronly",
        "netsnmp",
        "emitindexvars",
        "enddefine",
        "emitgetargs",
        "emitloaddata",
        "emitindexinfo",
        "output skeleton",
        "loader",
        "Aishah Siti Lazim",
        "194 Green Street"
      ],
      "references": [
        "vimrc",
        "bugreport.vim",
        "evim.vim",
        "delmenu.vim",
        "defaults.vim",
        "ftplugof.vim",
        "ftoff.vim",
        "gvim.desktop",
        "ftplugin.vim",
        "gvimrc_example.vim",
        "indent.vim",
        "indoff.vim",
        "mswin.vim",
        "scripts.vim",
        "optwin.vim",
        "vim.desktop",
        "menu.vim",
        "vimrc_example.vim",
        "synmenu.vim",
        "filetype.vim",
        "Make_mvc.mak",
        "Make_all.mak",
        "README.ru.utf-8.txt",
        "README.txt",
        "tutor",
        "tutor.bar.utf-8",
        "tutor.ca.utf-8",
        "tutor.bg.utf-8",
        "tutor.cs.utf-8",
        "tutor.da.utf-8",
        "tutor.de.utf-8",
        "tutor.el.utf-8",
        "tutor.eo.utf-8",
        "tutor.es.utf-8",
        "tutor.fr.utf-8",
        "tutor.hr.utf-8",
        "tutor.ja.utf-8",
        "tutor.hu.utf-8",
        "tutor.it.utf-8",
        "tutor.ko",
        "tutor.ko.utf-8",
        "tutor.lt.utf-8",
        "tutor.lv.utf-8",
        "tutor.nb.utf-8",
        "tutor.nl.utf-8",
        "tutor.no.utf-8",
        "tutor.pt.utf-8",
        "tutor.pl.utf-8",
        "tutor.ru.utf-8",
        "tutor.tr.utf-8",
        "tutor.sr.utf-8",
        "tutor.sv.utf-8",
        "tutor.sk.utf-8",
        "tutor.vim",
        "tutor.zh_cn.utf-8",
        "tutor.utf-8",
        "tutor.vi.utf-8",
        "tutor.uk.utf-8",
        "tutor.zh_tw.utf-8",
        "tutor.zh.utf-8",
        "vimspell.txt",
        "xcmdsrv_client.c",
        "ref",
        "vim132",
        "vimm",
        "vim_vs_net.cmd",
        "shtags.1",
        "unicode.vim",
        "shtags.pl",
        "ccfilter_README.txt",
        "blink.c",
        "efm_filter.txt",
        "demoserver.py",
        "ccfilter.c",
        "efm_filter.pl",
        "ccfilter.1",
        "efm_perl.pl",
        "pltags.pl",
        "mve.txt",
        "emoji_list.vim",
        "mve.awk",
        "a65.vim",
        "aap.vim",
        "abap.vim",
        "abc.vim",
        "abel.vim",
        "abaqus.vim",
        "acedb.vim",
        "a2ps.vim",
        "ada.vim",
        "ahdl.vim",
        "8th.vim",
        "aflex.vim",
        "aidl.vim",
        "2html.vim",
        "alsaconf.vim",
        "amiga.vim",
        "ampl.vim",
        "antlr4.vim",
        "apachestyle.vim",
        "apache.vim",
        "antlr.vim",
        "ant.vim",
        "aml.vim",
        "arch.vim",
        "aptconf.vim",
        "arduino.vim",
        "art.vim",
        "asm.vim",
        "asciidoc.vim",
        "asn.vim",
        "aspperl.vim",
        "asm68k.vim",
        "aspvbs.vim",
        "asteriskvm.vim",
        "atlas.vim",
        "asy.vim",
        "autodoc.vim",
        "autohotkey.vim",
        "autoit.vim",
        "automake.vim",
        "ave.vim",
        "asmh8300.vim",
        "avra.vim",
        "awk.vim",
        "astro.vim",
        "ayacc.vim",
        "asterisk.vim",
        "bash.vim",
        "b.vim",
        "bdf.vim",
        "bib.vim",
        "basic.vim",
        "bindzone.vim",
        "bc.vim",
        "blank.vim",
        "bitbake.vim",
        "bsdl.vim",
        "bst.vim",
        "bzl.vim",
        "btm.vim",
        "bzr.vim",
        "baan.vim",
        "cabal.vim",
        "cabalconfig.vim",
        "cabalproject.vim",
        "c.vim",
        "catalog.vim",
        "cdl.vim",
        "cdrdaoconf.vim",
        "cfg.vim",
        "cgdbrc.vim",
        "cf.vim",
        "cdrtoc.vim",
        "ch.vim",
        "chaiscript.vim",
        "change.vim",
        "chaskell.vim",
        "changelog.vim",
        "chatito.vim",
        "cheetah.vim",
        "chicken.vim",
        "chordpro.vim",
        "chill.vim",
        "calendar.vim",
        "chuck.vim",
        "clean.vim",
        "clipper.vim",
        "cmakecache.vim",
        "cl.vim",
        "cmod.vim",
        "cmusrc.vim",
        "coco.vim",
        "colortest.vim",
        "clojure.vim",
        "conf.vim",
        "config.vim",
        "confini.vim",
        "conaryrecipe.vim",
        "crm.vim",
        "cmake.vim",
        "crontab.vim",
        "cpp.vim",
        "context.vim",
        "csc.vim",
        "csh.vim",
        "cs.vim",
        "csp.vim",
        "csv.vim",
        "cterm.vim",
        "csdl.vim",
        "cobol.vim",
        "ctrlh.vim",
        "css.vim",
        "cuda.vim",
        "cuplsim.vim",
        "cvs.vim",
        "cweb.vim",
        "cvsrc.vim",
        "cucumber.vim",
        "cupl.vim",
        "cynpp.vim",
        "cynlib.vim",
        "deb822sources.vim",
        "dcd.vim",
        "d.vim",
        "dcl.vim",
        "dart.vim",
        "debchangelog.vim",
        "debcontrol.vim",
        "datascript.vim",
        "debcopyright.vim",
        "def.vim",
        "dep3patch.vim",
        "denyhosts.vim",
        "debsources.vim",
        "desc.vim",
        "dictconf.vim",
        "dictdconf.vim",
        "diff.vim",
        "dircolors.vim",
        "dirpager.vim",
        "diva.vim",
        "desktop.vim",
        "django.vim",
        "dns.vim",
        "docbksgml.vim",
        "docbkxml.vim",
        "docbk.vim",
        "dockerfile.vim",
        "dosbatch.vim",
        "dosini.vim",
        "dot.vim",
        "dracula.vim",
        "dsl.vim",
        "dtml.vim",
        "doxygen.vim",
        "dts.vim",
        "dtrace.vim",
        "dtd.vim",
        "dune.vim",
        "dylanintr.vim",
        "dylanlid.vim",
        "dylan.vim",
        "dnsmasq.vim",
        "editorconfig.vim",
        "edif.vim",
        "ecd.vim",
        "elmfilt.vim",
        "elf.vim",
        "elinks.vim",
        "eiffel.vim",
        "elm.vim",
        "erlang.vim",
        "esmtprc.vim",
        "esqlc.vim",
        "esterel.vim",
        "euphoria3.vim",
        "eterm.vim",
        "eruby.vim",
        "euphoria4.vim",
        "exim.vim",
        "expect.vim",
        "exports.vim",
        "eviews.vim",
        "fasm.vim",
        "fdcc.vim",
        "falcon.vim",
        "fan.vim",
        "fetchmail.vim",
        "fgl.vim",
        "fish.vim",
        "flexwiki.vim",
        "focexec.vim",
        "fpcmake.vim",
        "forth.vim",
        "form.vim",
        "framescript.vim",
        "foxpro.vim",
        "fortran.vim",
        "freebasic.vim",
        "fvwm2m4.vim",
        "fstab.vim",
        "fvwm.vim",
        "gdmo.vim",
        "gdresource.vim",
        "gdb.vim",
        "gemtext.vim",
        "gdshader.vim",
        "git.vim",
        "gift.vim",
        "gedcom.vim",
        "gdscript.vim",
        "gitattributes.vim",
        "gitcommit.vim",
        "gitconfig.vim",
        "gitignore.vim",
        "gitolite.vim",
        "gitrebase.vim",
        "gitsendemail.vim",
        "gkrellmrc.vim",
        "goaccess.vim",
        "glsl.vim",
        "godoc.vim",
        "go.vim",
        "gnuplot.vim",
        "gp.vim",
        "gpg.vim",
        "gprof.vim",
        "gretl.vim",
        "grads.vim",
        "gnash.vim",
        "groff.vim",
        "grub.vim",
        "groovy.vim",
        "gtkrc.vim",
        "group.vim",
        "gyp.vim",
        "gsp.vim",
        "gvpr.vim",
        "update_date.vim",
        "README.md",
        "gen_syntax_vim.vim",
        "vim.vim.base",
        "haml.vim",
        "hamster.vim",
        "hare.vim",
        "haredoc.vim",
        "haste.vim",
        "haskell.vim",
        "hastepreproc.vim",
        "hb.vim",
        "hcl.vim",
        "help_ru.vim",
        "hex.vim",
        "help.vim",
        "hercules.vim",
        "hgcommit.vim",
        "hitest.vim",
        "hlsplaylist.vim",
        "hog.vim",
        "hostsaccess.vim",
        "hostconf.vim",
        "htmlcheetah.vim",
        "htmlangular.vim",
        "html.vim",
        "htmlm4.vim",
        "htmlos.vim",
        "htmldjango.vim",
        "i3config.vim",
        "ia64.vim",
        "ibasic.vim",
        "icemenu.vim",
        "idlang.vim",
        "idl.vim",
        "icon.vim",
        "initex.vim",
        "initng.vim",
        "ipfilter.vim",
        "inittab.vim",
        "inform.vim",
        "j.vim",
        "iss.vim",
        "ishd.vim",
        "jal.vim",
        "ist.vim",
        "jam.vim",
        "jargon.vim",
        "javascript.vim",
        "javascriptreact.vim",
        "java.vim",
        "jinja.vim",
        "jess.vim",
        "jgraph.vim",
        "javacc.vim",
        "jq.vim",
        "jsp.vim",
        "json.vim",
        "jsonc.vim",
        "json5.vim",
        "kconfig.vim",
        "julia.vim",
        "kdl.vim",
        "kotlin.vim",
        "kix.vim",
        "kwt.vim",
        "krl.vim",
        "kscript.vim",
        "kivy.vim",
        "lace.vim",
        "latte.vim",
        "lc.vim",
        "ld.vim",
        "ldapconf.vim",
        "iso.vim",
        "pim.vim",
        "r10.vim",
        "ldif.vim",
        "less.vim",
        "lftp.vim",
        "lhaskell.vim",
        "libao.vim",
        "lex.vim",
        "lifelines.vim",
        "liquid.vim",
        "limits.vim",
        "lilo.vim",
        "lite.vim",
        "livebook.vim",
        "lisp.vim",
        "litestep.vim",
        "lotos.vim",
        "loginaccess.vim",
        "logtalk.vim",
        "logindefs.vim",
        "lout.vim",
        "lprolog.vim",
        "lpc.vim",
        "lsl.vim",
        "lscript.vim",
        "lss.vim",
        "luau.vim",
        "lua.vim",
        "lynx.vim",
        "lyrics.vim",
        "m3quake.vim",
        "m3build.vim",
        "m4.vim",
        "mailaliases.vim",
        "mail.vim",
        "mailcap.vim",
        "mallard.vim",
        "make.vim",
        "manual.vim",
        "manconf.vim",
        "mason.vim",
        "masm.vim",
        "maple.vim",
        "master.vim",
        "matlab.vim",
        "maxima.vim",
        "mermaid.vim",
        "meson.vim",
        "mediawiki.vim",
        "messages.vim",
        "mel.vim",
        "man.vim",
        "markdown.vim",
        "mf.vim",
        "mgp.vim",
        "mgl.vim",
        "mib.vim",
        "mix.vim",
        "mmix.vim",
        "mmp.vim",
        "modconf.vim",
        "model.vim",
        "mma.vim",
        "modula2.vim",
        "modula3.vim",
        "moo.vim",
        "mojo.vim",
        "monk.vim",
        "mp.vim",
        "mplayerconf.vim",
        "mrxvtrc.vim",
        "msmessages.vim",
        "msidl.vim",
        "msql.vim",
        "modsim3.vim",
        "murphi.vim",
        "mush.vim",
        "mupad.vim",
        "muttrc.vim",
        "mysql.vim",
        "named.vim",
        "nanorc.vim",
        "nastran.vim",
        "n1ql.vim",
        "natural.vim",
        "nasm.vim",
        "ncf.vim",
        "netrc.vim",
        "netrw.vim",
        "ninja.vim",
        "nix.vim",
        "nosyntax.vim",
        "nroff.vim",
        "neomuttrc.vim",
        "nsis.vim",
        "nqc.vim",
        "nginx.vim",
        "obj.vim",
        "objcpp.vim",
        "odin.vim",
        "occam.vim",
        "omnimark.vim",
        "ocaml.vim",
        "ondir.vim",
        "objc.vim",
        "openscad.vim",
        "openroad.vim",
        "opl.vim",
        "openvpn.vim",
        "obse.vim",
        "opam.vim",
        "pamenv.vim",
        "pacmanlog.vim",
        "ora.vim",
        "pamconf.vim",
        "pandoc.vim",
        "papp.vim",
        "pcap.vim",
        "pbtxt.vim",
        "pascal.vim",
        "passwd.vim",
        "pccts.vim",
        "pf.vim",
        "phtml.vim",
        "perl.vim",
        "pic.vim",
        "pdf.vim",
        "pilrc.vim",
        "pfmain.vim",
        "pike.vim",
        "pine.vim",
        "pinfo.vim",
        "plaintex.vim",
        "php.vim",
        "plm.vim",
        "plp.vim",
        "pli.vim",
        "pod.vim",
        "poefilter.vim",
        "po.vim",
        "ppd.vim",
        "pov.vim",
        "povini.vim",
        "ppwiz.vim",
        "plsql.vim",
        "prescribe.vim",
        "procmail.vim",
        "privoxy.vim",
        "prolog.vim",
        "promela.vim",
        "postscr.vim",
        "protocols.vim",
        "proto.vim",
        "psf.vim",
        "psl.vim",
        "ps1.vim",
        "purifylog.vim",
        "ptcap.vim",
        "pymanifest.vim",
        "pyrex.vim",
        "progress.vim",
        "python.vim",
        "python2.vim",
        "quarto.vim",
        "qf.vim",
        "quake.vim",
        "qb64.vim",
        "r.vim",
        "qml.vim",
        "radiance.vim",
        "racc.vim",
        "racket.vim",
        "raml.vim",
        "rasi.vim",
        "rc.vim",
        "ratpoison.vim",
        "rapid.vim",
        "raku.vim",
        "rcslog.vim",
        "rcs.vim",
        "rebol.vim",
        "readline.vim",
        "registry.vim",
        "rego.vim",
        "remind.vim",
        "requirements.vim",
        "reva.vim",
        "resolv.vim",
        "rhelp.vim",
        "rexx.vim",
        "rnc.vim",
        "rng.vim",
        "rnoweb.vim",
        "rib.vim",
        "redif.vim",
        "rrst.vim",
        "rpcgen.vim",
        "routeros.vim",
        "rpl.vim",
        "rmd.vim",
        "rtf.vim",
        "rst.vim",
        "salt.vim",
        "robots.vim",
        "samba.vim",
        "ruby.vim",
        "sas.vim",
        "sass.vim",
        "rust.vim",
        "sbt.vim",
        "scdoc.vim",
        "sather.vim",
        "scilab.vim",
        "scala.vim",
        "scheme.vim",
        "screen.vim",
        "scss.vim",
        "sd.vim",
        "sdc.vim",
        "sdl.vim",
        "sensors.vim",
        "sed.vim",
        "services.vim",
        "sendpr.vim",
        "setserial.vim",
        "sexplib.vim",
        "sgmldecl.vim",
        "sgmllnx.vim",
        "sh.vim",
        "sgml.vim",
        "context-data-metafun.vim",
        "context-data-tex.vim",
        "hgcommitDiff.vim",
        "context-data-context.vim",
        "context-data-interfaces.vim",
        "debversions.vim",
        "typescriptcommon.vim",
        "sicad.vim",
        "sil.vim",
        "simula.vim",
        "sinda.vim",
        "sindacmp.vim",
        "sindaout.vim",
        "sieve.vim",
        "skill.vim",
        "sl.vim",
        "sisu.vim",
        "slang.vim",
        "slpconf.vim",
        "slpreg.vim",
        "slpspi.vim",
        "slrnsc.vim",
        "sm.vim",
        "smarty.vim",
        "slice.vim",
        "smcl.vim",
        "smith.vim",
        "smil.vim",
        "sml.vim",
        "snnsnet.vim",
        "snnspat.vim",
        "slrnrc.vim",
        "snobol4.vim",
        "solidity.vim",
        "spice.vim",
        "splint.vim",
        "spec.vim",
        "specman.vim",
        "spyce.vim",
        "spup.vim",
        "snnsres.vim",
        "sql.vim",
        "sqlforms.vim",
        "sqlj.vim",
        "sqlhana.vim",
        "sqlinformix.vim",
        "sqlanywhere.vim",
        "sqloracle.vim",
        "srec.vim",
        "sqr.vim",
        "squirrel.vim",
        "squid.vim",
        "srt.vim",
        "ssa.vim",
        "st.vim",
        "sshconfig.vim",
        "sshdconfig.vim",
        "stp.vim",
        "stata.vim",
        "strace.vim",
        "structurizr.vim",
        "stylus.vim",
        "sudoers.vim",
        "swift.vim",
        "swig.vim",
        "swiftgyb.vim",
        "swayconfig.vim",
        "syncolor.vim",
        "svn.vim",
        "synload.vim",
        "sysctl.vim",
        "systemverilog.vim",
        "tads.vim",
        "tags.vim",
        "tak.vim",
        "takcmp.vim",
        "takout.vim",
        "tar.vim",
        "taskdata.vim",
        "taskedit.vim",
        "tap.vim",
        "tasm.vim",
        "svg.vim",
        "syntax.vim",
        "template.vim",
        "tcsh.vim",
        "teraterm.vim",
        "terminfo.vim",
        "terraform.vim",
        "systemd.vim",
        "tcl.vim",
        "tssgm.vim",
        "typescript.vim",
        "tsv.vim",
        "tt2js.vim",
        "tssop.vim",
        "typescriptreact.vim",
        "tt2.vim",
        "tt2html.vim",
        "uc.vim",
        "uci.vim",
        "typst.vim",
        "udevconf.vim",
        "udevperm.vim",
        "uil.vim",
        "unison.vim",
        "updatedb.vim",
        "upstart.vim",
        "upstreamdat.vim",
        "upstreaminstalllog.vim",
        "upstreamlog.vim",
        "upstreamrpt.vim",
        "usw2kagtlog.vim",
        "urlshortcut.vim",
        "udevrules.vim",
        "valgrind.vim",
        "vdf.vim",
        "vb.vim",
        "verilogams.vim",
        "vera.vim",
        "vhdl.vim",
        "viminfo.vim",
        "verilog.vim",
        "voscm.vim",
        "vmasm.vim",
        "virata.vim",
        "vim.vim",
        "vrml.vim",
        "vgrindefs.vim",
        "usserverlog.vim",
        "c.c",
        "html.html",
        "java_comments_markdown.java",
        "java_annotations_signature.java",
        "java_comments.java",
        "java_enfoldment.java",
        "java_escapes.java",
        "java_generics_signature.java",
        "java_generics.java",
        "java_contextual_keywords.java",
        "java_lambda_expressions_signature.java",
        "java_annotations.java",
        "java_lambda_expressions.java",
        "java_method_references_signature.java",
        "java_methods_indent4.java",
        "java_methods_indent2.java",
        "java_methods_indent4_signature.java",
        "java_methods_indent2_signature.java",
        "java_methods_indent8_signature.java",
        "java_methods_style.java",
        "java_module_info.java",
        "java_methods_style_signature.java",
        "java_numbers.java",
        "java_previews_430.java",
        "java_string.java",
        "java_previews_455.java",
        "java_switch.java",
        "java_methods_indent8.java",
        "java_unfoldment.java",
        "markdown_conceal.markdown",
        "modula2_pim.def",
        "modula2_iso.def",
        "modula2_r10.def",
        "progress_comments.p",
        "sh_02.sh",
        "sh_01.sh",
        "sh_04.sh",
        "sh_03.sh",
        "sh_05.sh",
        "sh_07.sh",
        "sh_09.sh",
        "sh_08.sh",
        "sh_10.sh",
        "sh_11.sh",
        "vim_ex_abbreviate.vim",
        "vim_ex_behave.vim",
        "vim_ex_call.vim",
        "vim_ex_catch.vim",
        "sh_06.sh",
        "vim_ex_command.vim",
        "vim_ex_comment_strings.vim",
        "vim_ex_comment-vim9.vim",
        "vim_ex_comment.vim",
        "vim_ex_augroup.vim",
        "vim_ex_commands.vim",
        "vim_ex_def_nested.vim",
        "vim_ex_def_nested_fold.vim",
        "vim_ex_def_fold.vim",
        "vim_ex_def.vim",
        "vim_ex_echo.vim",
        "vim_ex_execute.vim",
        "vim_ex_function_def_tail_comment_errors.vim",
        "vim_ex_function_def_tail_comments.vim",
        "vim_ex_function_nested_fold.vim",
        "vim_ex_function_nested.vim",
        "vim_ex_function_fold.vim",
        "vim_ex_highlight.vim",
        "vim_ex_let_heredoc.vim",
        "vim_ex_loadkeymap_after_bar.vim",
        "vim_ex_loadkeymap_after_colon.vim",
        "vim_ex_map.vim",
        "vim_ex_function.vim",
        "vim_ex_menu.vim",
        "vim_ex_menutranslate.vim",
        "vim_ex_no_comment_strings.vim",
        "vim_ex_match.vim",
        "vim_ex_range.vim",
        "vim_ex_set.vim",
        "vim_ex_sleep.vim",
        "vim_ex_substitute.vim",
        "vim_ex_throw.vim",
        "vim_keymap.vim",
        "vim_ex_syntax.vim",
        "vim_key_notation.vim",
        "vim_line_continuation.vim",
        "vim_expr.vim",
        "vim_new.vim",
        "vim_shebang.vim",
        "vim_object_methods.vim",
        "vim_variables.vim",
        "vim9_ex_comment_strings.vim",
        "vim9_ex_commands.vim",
        "vim9_ex_no_comment_strings.vim",
        "vim9_ex_function_def_tail_comments.vim",
        "vim9_expr.vim",
        "vim9_keymap.vim",
        "vim9_ex_function_def_tail_comment_errors.vim",
        "vim9_legacy_header_fold.vim",
        "vim9_legacy_header.vim",
        "vim9_shebang.vim",
        "yaml.yaml",
        "dots_03",
        "dots_05",
        "dots_02",
        "dots_04",
        "dots_01",
        "dots_06",
        "dots_08",
        "dots_09",
        "dots_10",
        "dots_07",
        "dots_11",
        "dots_12",
        "dots_14",
        "dots_13",
        "dots_15",
        "dots_16",
        "dots_17",
        "dots_18",
        "dots_19",
        "dots_20",
        "html_00.dump",
        "html_03.dump",
        "html_05.dump",
        "html_04.dump",
        "html_06.dump",
        "html_02.dump",
        "html_01.dump",
        "html_07.dump",
        "html_08.dump",
        "java_annotations_01.dump",
        "java_annotations_00.dump",
        "java_annotations_02.dump",
        "java_annotations_03.dump",
        "java_annotations_04.dump",
        "java_annotations_signature_00.dump",
        "java_annotations_signature_02.dump",
        "java_annotations_signature_01.dump",
        "java_annotations_signature_03.dump",
        "java_annotations_signature_04.dump",
        "java_comments_html_01.dump",
        "java_comments_html_02.dump",
        "java_comments_html_03.dump",
        "java_comments_html_00.dump",
        "java_comments_html_04.dump",
        "java_comments_html_05.dump",
        "java_comments_markdown_00.dump",
        "java_comments_html_07.dump",
        "java_comments_markdown_03.dump",
        "java_comments_markdown_01.dump",
        "java_comments_html_06.dump",
        "java_comments_markdown_04.dump",
        "java_comments_markdown_02.dump",
        "java_comments_markdown_05.dump",
        "java_comments_markdown_06.dump",
        "java_comments_markdown_07.dump",
        "java_contextual_keywords_00.dump",
        "java_comments_markdown_08.dump",
        "java_contextual_keywords_01.dump",
        "java_contextual_keywords_02.dump",
        "java_enfoldment_01.dump",
        "java_contextual_keywords_03.dump",
        "java_enfoldment_00.dump",
        "java_enfoldment_02.dump",
        "java_escapes_00.dump",
        "java_escapes_01.dump",
        "java_escapes_03.dump",
        "java_escapes_05.dump",
        "java_escapes_07.dump",
        "java_escapes_02.dump",
        "java_escapes_06.dump",
        "java_generics_01.dump",
        "java_generics_03.dump",
        "java_generics_02.dump",
        "java_generics_04.dump",
        "java_generics_05.dump",
        "java_generics_07.dump",
        "java_generics_00.dump",
        "java_generics_06.dump",
        "java_escapes_04.dump",
        "java_generics_signature_00.dump",
        "java_generics_signature_01.dump",
        "java_generics_signature_02.dump",
        "java_generics_signature_03.dump",
        "java_generics_signature_04.dump",
        "java_generics_signature_05.dump",
        "java_generics_signature_07.dump",
        "java_generics_signature_06.dump",
        "java_lambda_expressions_00.dump",
        "java_lambda_expressions_01.dump",
        "java_lambda_expressions_03.dump",
        "java_lambda_expressions_02.dump",
        "java_lambda_expressions_04.dump",
        "java_lambda_expressions_05.dump",
        "java_lambda_expressions_06.dump",
        "java_lambda_expressions_07.dump",
        "java_lambda_expressions_08.dump",
        "java_lambda_expressions_signature_00.dump",
        "java_lambda_expressions_signature_01.dump",
        "java_lambda_expressions_signature_02.dump",
        "java_lambda_expressions_signature_03.dump",
        "java_lambda_expressions_signature_04.dump",
        "java_lambda_expressions_signature_05.dump",
        "java_lambda_expressions_signature_06.dump",
        "java_lambda_expressions_signature_07.dump",
        "java_lambda_expressions_signature_08.dump",
        "java_method_references_00.dump",
        "java_method_references_01.dump",
        "java_method_references_03.dump",
        "java_method_references_04.dump",
        "java_method_references_06.dump",
        "java_method_references_05.dump",
        "java_method_references_07.dump",
        "java_method_references_08.dump",
        "java_method_references_09.dump",
        "java_method_references_10.dump",
        "java_method_references_signature_00.dump",
        "java_method_references_signature_01.dump",
        "java_method_references_02.dump",
        "java_method_references_signature_02.dump",
        "java_method_references_signature_03.dump",
        "java_method_references_signature_04.dump",
        "java_method_references_signature_05.dump",
        "java_method_references_signature_07.dump",
        "java_method_references_signature_08.dump",
        "java_method_references_signature_09.dump",
        "java_methods_indent2_00.dump",
        "java_methods_indent2_00.vim",
        "java_methods_indent2_01.dump",
        "java_methods_indent2_01.vim",
        "java_methods_indent2_02.dump",
        "java_methods_indent2_02.vim",
        "java_method_references_signature_10.dump",
        "java_methods_indent2_03.vim",
        "java_methods_indent2_03.dump",
        "java_methods_indent2_04.dump",
        "java_methods_indent2_04.vim",
        "java_methods_indent2_05.dump",
        "java_methods_indent2_05.vim",
        "java_method_references_signature_06.dump",
        "java_methods_indent2_signature_00.vim",
        "java_methods_indent2_signature_01.dump",
        "java_methods_indent2_signature_01.vim",
        "java_methods_indent2_signature_02.dump",
        "java_methods_indent2_signature_02.vim",
        "java_methods_indent2_signature_03.dump",
        "java_methods_indent2_signature_03.vim",
        "java_methods_indent2_signature_04.dump",
        "java_methods_indent2_signature_04.vim",
        "java_methods_indent2_signature_05.dump",
        "java_methods_indent2_signature_05.vim",
        "java_methods_indent4_00.vim",
        "java_methods_indent4_01.vim",
        "java_methods_indent4_01.dump",
        "java_methods_indent4_02.dump",
        "java_methods_indent2_signature_00.dump",
        "java_methods_indent4_02.vim",
        "java_methods_indent4_03.vim",
        "java_methods_indent4_03.dump",
        "java_methods_indent4_04.dump",
        "java_methods_indent4_04.vim",
        "java_methods_indent4_05.dump",
        "java_methods_indent4_06.dump",
        "java_methods_indent4_05.vim",
        "java_methods_indent4_signature_00.dump",
        "java_methods_indent4_signature_01.dump",
        "java_methods_indent4_signature_01.vim",
        "java_methods_indent4_signature_02.dump",
        "java_methods_indent4_signature_02.vim",
        "java_methods_indent4_signature_03.dump",
        "java_methods_indent4_signature_03.vim",
        "java_methods_indent4_signature_04.dump",
        "java_methods_indent4_signature_04.vim",
        "java_methods_indent4_signature_05.dump",
        "java_methods_indent4_signature_05.vim",
        "java_methods_indent8_00.dump",
        "java_methods_indent4_signature_06.dump",
        "java_methods_indent8_00.vim",
        "java_methods_indent8_01.dump",
        "java_methods_indent8_01.vim",
        "java_methods_indent4_signature_00.vim",
        "java_methods_indent8_02.dump",
        "java_methods_indent8_02.vim",
        "java_methods_indent8_03.dump",
        "java_methods_indent8_03.vim",
        "java_methods_indent8_04.dump",
        "java_methods_indent8_05.dump",
        "java_methods_indent8_06.dump",
        "java_methods_indent8_05.vim",
        "java_methods_indent8_signature_00.dump",
        "java_methods_indent8_signature_01.dump",
        "java_methods_indent8_signature_01.vim",
        "java_methods_indent8_signature_02.dump",
        "java_methods_indent8_signature_02.vim",
        "java_methods_indent8_signature_00.vim",
        "java_methods_indent8_signature_03.dump",
        "java_methods_indent8_signature_03.vim",
        "java_methods_indent8_signature_04.dump",
        "java_methods_indent8_signature_04.vim",
        "java_methods_indent8_signature_05.vim",
        "java_methods_indent8_signature_05.dump",
        "java_methods_indent8_signature_06.dump",
        "java_methods_indent8_signature_06.vim",
        "java_methods_style_00.dump",
        "java_methods_style_00.vim",
        "java_methods_style_01.vim",
        "java_methods_style_02.vim",
        "java_methods_indent8_04.vim",
        "java_methods_style_03.dump",
        "java_methods_style_04.dump",
        "java_methods_style_02.dump",
        "java_methods_style_signature_00.dump",
        "java_methods_style_signature_00.vim",
        "java_methods_style_signature_01.vim",
        "java_methods_style_03.vim",
        "java_methods_style_signature_02.vim",
        "java_methods_style_01.dump",
        "java_methods_style_signature_03.dump",
        "java_methods_style_signature_03.vim",
        "java_methods_style_signature_04.dump",
        "java_methods_style_signature_01.dump",
        "java_module_info_00.dump",
        "java_methods_style_04.vim",
        "java_module_info_01.dump",
        "java_module_info_02.dump",
        "java_numbers_01.dump",
        "java_numbers_02.dump",
        "java_methods_style_signature_04.vim",
        "java_numbers_00.dump",
        "java_numbers_03.dump",
        "java_numbers_04.dump",
        "java_numbers_05.dump",
        "java_previews_430_00.dump",
        "java_previews_455_00.dump",
        "java_previews_455_01.dump",
        "java_previews_455_02.dump",
        "java_previews_455_03.dump",
        "java_methods_style_signature_02.dump",
        "java_methods_indent4_00.dump",
        "java_string_00.dump",
        "java_string_01.dump",
        "java_string_02.dump",
        "java_string_04.dump",
        "java_string_03.dump",
        "java_string_05.dump",
        "java_switch_00.dump",
        "java_switch_02.dump",
        "java_switch_01.dump",
        "java_switch_04.dump",
        "java_switch_03.dump",
        "java_switch_05.dump",
        "java_switch_07.dump",
        "java_unfoldment_00.dump",
        "java_switch_06.dump",
        "java_unfoldment_01.dump",
        "java_unfoldment_05.dump",
        "java_unfoldment_02.dump",
        "markdown_conceal_00.dump",
        "java_unfoldment_03.dump",
        "modula2_iso_00.dump",
        "modula2_iso_01.dump",
        "modula2_iso_03.dump",
        "modula2_iso_02.dump",
        "modula2_iso_04.dump",
        "modula2_iso_05.dump",
        "modula2_pim_00.dump",
        "modula2_iso_06.dump",
        "modula2_pim_01.dump",
        "modula2_pim_02.dump",
        "modula2_pim_03.dump",
        "modula2_pim_04.dump",
        "modula2_pim_06.dump",
        "modula2_pim_05.dump",
        "modula2_r10_00.dump",
        "modula2_r10_03.dump",
        "sh_07_01.dump",
        "sh_08_02.dump",
        "sh_11_00.dump",
        "vim_ex_abbreviate_01.dump",
        "vim_ex_command_00.dump",
        "java_module_info.vim",
        "markdown_conceal.vim",
        "cleanadd.vim",
        "yi.vim",
        "he.vim",
        "adacomplete.vim",
        "cargo.vim",
        "ccomplete.vim",
        "clojurecomplete.vim",
        "decada.vim",
        "contextcomplete.vim",
        "csscomplete.vim",
        "gnat.vim",
        "gzip.vim",
        "getscript.vim",
        "htmlcomplete.vim",
        "javaformat.vim",
        "netrw_gitignore.vim",
        "javascriptcomplete.vim",
        "haskellcomplete.vim",
        "netrwSettings.vim",
        "netrwFileHandlers.vim",
        "paste.vim",
        "pythoncomplete.vim",
        "RstFold.vim",
        "python3complete.vim",
        "rustfmt.vim",
        "spellfile.vim",
        "sqlcomplete.vim",
        "syntaxcomplete.vim",
        "rubycomplete.vim",
        "tohtml.vim",
        "typeset.vim",
        "vimball.vim",
        "xmlcomplete.vim",
        "xmlformat.vim",
        "zip.vim",
        "quickfix.vim",
        "html32.vim",
        "html40f.vim",
        "html40s.vim",
        "html40t.vim",
        "html401f.vim",
        "html401t.vim",
        "xhtml10f.vim",
        "xhtml10s.vim",
        "xsd.vim",
        "xhtml10t.vim",
        "html401s.vim",
        "xhtml11.vim",
        "xsl.vim",
        "airportd.sb",
        "awdd.sb",
        "bluetoothd.sb",
        "com.apple.atsd.internal.sb",
        "BTLEServer.sb",
        "com.apple.atsd.support.sb",
        "com.apple.bootinstalld.sb",
        "com.apple.ckdiscretionaryd.sb",
        "com.apple.CommCenter.sb",
        "com.apple.cloudd.sb",
        "com.apple.fontd.internal.sb",
        "com.apple.corespotlightservice.sb",
        "com.apple.FontValidator.sb",
        "com.apple.fontd.support.sb",
        "com.apple.genatsdb.internal.sb",
        "com.apple.managedcorespotlightd.sb",
        "com.apple.msrpc.lsarpc.sb",
        "com.apple.msrpc.mdssvc.sb",
        "com.apple.mobileassetd.sb",
        "com.apple.msrpc.netlogon.sb",
        "com.apple.msrpc.srvsvc.sb",
        "com.apple.msrpc.wkssvc.sb",
        "com.apple.smbd.sb",
        "com.apple.netbiosd.sb",
        "com.apple.softwareupdate_firstrun_tasks.sb",
        "com.apple.taskgated-helper.sb",
        "com.apple.spotlightknowledged.importer.sb",
        "com.apple.USBAgent.sb",
        "com.apple.softwareupdated.sb",
        "com.apple.xscertd-helper.sb",
        "com.apple.usbd.sb",
        "com.apple.xscertd.sb",
        "cvmsCompAgent.sb",
        "cvmsServer.sb",
        "fontmover.sb",
        "fontmoverinternal.sb",
        "fontworkerinternal.sb",
        "gss-acceptor.sb",
        "gss-initiator.sb",
        "kadmind.sb",
        "kcm.sb",
        "mdflagwriter.sb",
        "kdc.sb",
        "ftp-proxy.sb",
        "mds.sb",
        "mdworker-bundle.sb",
        "mds_stores.sb",
        "mdworker-mail.sb",
        "mdworker-sizing.sb",
        "mdworker-scan.sb",
        "mdworker.sb",
        "natpmpd.sb",
        "qlmanage.sb",
        "pfd.sb",
        "quicklook-satellite-general.sb",
        "mDNSResponder.sb",
        "quicklook-satellite.sb",
        "quicklook-satellite-personal.sb",
        "quicklookd-job-creation.sb",
        "webdav_agent.sb",
        "quicklookd.sb",
        "watool.sb",
        "wfs.sb",
        "wifivelocityd.sb",
        "Mac-CAD6701F7CEA0921.plist",
        "Mac-FFE5EF870D7BA81A.plist",
        "Mac-7DF21CB3ED6977E5.plist",
        "Mac-35C5E08120C7EEAF.plist",
        "Mac-2BD1B31983FE1663.plist",
        "Mac-42FD25EABCABB274.plist",
        "Mac-35C1E88140C3E6CF.plist",
        "Mac-27ADBB7B4CEE8E61.plist",
        "Mac-66E35819EE2D0D05.plist",
        "Mac-473D31EABEB93F9B.plist",
        "Mac-06F11FD93F0323C5.plist",
        "Mac-4B682C642B45593E.plist",
        "Mac-031B6874CF7F642A.plist",
        "Mac-551B86E5744E2388.plist",
        "Mac-A369DDC4E67F1C45.plist",
        "Mac-BE0E8AC46FE800CC.plist",
        "Mac-E43C1C25D4880AD6.plist",
        "default.plist",
        "Mac-BE088AF8C5EB4FA2.plist",
        "Mac-EE2EBD4B90B839A8.plist",
        "Mac-3CBD00234E554E41.plist",
        "Mac-77EB7D7DAF985301.plist",
        "Mac-189A3D4F975D5FFC.plist",
        "Mac-B809C3757DA9BB8D.plist",
        "Mac-DB15BD556843C820.plist",
        "Mac-06F11F11946D27C5.plist",
        "Mac-9F18E312C5C2BF0B.plist",
        "Mac-9AE82516C7C6B903.plist",
        "Mac-B4831CEBD52A0C4C.plist",
        "Mac-FA842E06C61E91C5.plist",
        "charset.pivot",
        "mapper.dir",
        "firmlinks",
        "Stopwords.plist",
        "adi",
        "acorn",
        "adventure",
        "aes",
        "alliant",
        "allegro",
        "algol68",
        "aout",
        "apache",
        "android",
        "apl",
        "amigaos",
        "application",
        "animation",
        "applix",
        "apple",
        "amanda",
        "arm",
        "apt",
        "asf",
        "assembler",
        "asterix",
        "att3b",
        "basis",
        "beetle",
        "avm",
        "ber",
        "bflt",
        "bhl",
        "bioinformatics",
        "biosig",
        "audio",
        "blcr",
        "blender",
        "blackberry",
        "archive",
        "blit",
        "bm",
        "bout",
        "bsdi",
        "bsi",
        "btsnoop",
        "bytecode",
        "cbor",
        "c64",
        "c-lang",
        "cafebabe",
        "chord",
        "citrus",
        "cddb",
        "clarion",
        "cisco",
        "cad",
        "claris",
        "clipper",
        "coff",
        "clojure",
        "convex",
        "communications",
        "dicrc",
        "mib2c.access_functions.conf",
        "mib2c.check_values.conf",
        "mib2c.check_values_local.conf",
        "mib2c.column_defines.conf",
        "mib2c.array-user.conf",
        "mib2c.column_enums.conf",
        "mib2c.column_storage.conf",
        "mib2c.create-dataset.conf",
        "mib2c.container.conf",
        "mib2c.genhtml.conf",
        "mib2c.int_watch.conf",
        "mib2c.conf",
        "mib2c.mfd.conf",
        "mib2c.notify.conf",
        "mib2c.iterate.conf",
        "mib2c.old-api.conf",
        "mib2c.iterate_access.conf",
        "mib2c.scalar.conf",
        "mib2c.perl.conf"
      ],
      "public": 1,
      "adversary": "DragonForce Malaysia",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [
        {
          "id": "Esc",
          "display_name": "Esc",
          "target": null
        },
        {
          "id": "SelectAll",
          "display_name": "SelectAll",
          "target": null
        },
        {
          "id": "Vim Tutor",
          "display_name": "Vim Tutor",
          "target": null
        },
        {
          "id": "Todo",
          "display_name": "Todo",
          "target": null
        },
        {
          "id": "AdaCore",
          "display_name": "AdaCore",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        },
        {
          "id": "T1070",
          "name": "Indicator Removal on Host",
          "display_name": "T1070 - Indicator Removal on Host"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1134",
          "name": "Access Token Manipulation",
          "display_name": "T1134 - Access Token Manipulation"
        },
        {
          "id": "T1106",
          "name": "Native API",
          "display_name": "T1106 - Native API"
        },
        {
          "id": "T1036",
          "name": "Masquerading",
          "display_name": "T1036 - Masquerading"
        },
        {
          "id": "T1176",
          "name": "Browser Extensions",
          "display_name": "T1176 - Browser Extensions"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1119",
          "name": "Automated Collection",
          "display_name": "T1119 - Automated Collection"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1030",
          "name": "Data Transfer Size Limits",
          "display_name": "T1030 - Data Transfer Size Limits"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 109,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "ilyailya",
        "id": "298851",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CVE": 2,
        "email": 635,
        "hostname": 840,
        "URL": 2021,
        "FileHash-SHA1": 6,
        "domain": 378,
        "FileHash-SHA256": 548
      },
      "indicator_count": 4430,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 36,
      "modified_text": "446 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "677df11e9c5a567ccf700842",
      "name": "jaws (\u015blady z\u0142o\u015bliwego aktu)440338da3b5857e1ff499843f74e4bb8598e7014b5b7dc291106329e28b4638b",
      "description": "",
      "modified": "2025-02-07T03:04:58.652000",
      "created": "2025-01-08T03:29:34.744000",
      "tags": [
        "danie",
        "okrndata",
        "centos",
        "gmtrnetag",
        "cieka",
        "sport",
        "dostawa witaj",
        "wiecie http",
        "dostawa",
        "binchmod",
        "awinwkqonp",
        "usrbincurl o",
        "mips",
        "mipsi wersja",
        "sysv",
        "typzdarzenia",
        "ciekapliku",
        "resolverror",
        "znacznik",
        "xfcvxe3xb6",
        "zapisuje",
        "stdout",
        "znaki",
        "txfcvxe3xb6",
        "rxfcvxe3xb6",
        "elf binary",
        "upx compression",
        "roth",
        "nextron",
        "info"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 15,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 206,
        "FileHash-SHA1": 204,
        "FileHash-SHA256": 730,
        "domain": 37,
        "URL": 138,
        "hostname": 80,
        "CVE": 1,
        "YARA": 1
      },
      "indicator_count": 1397,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "478 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "674229b10c2364e895e83fb1",
      "name": "Skrypt pow\u0142oki  331883651   hiroz3x.sh",
      "description": "1. Downloads the file using both `wget` and `curl`.\n2. Concatenates the downloaded content to a file named `hiroz3x`.\n3. Makes `hiroz3x` executable.\n4. Executes `hiroz3x` with the argument `hiro.payload`.\nThe script attempts to change the working directory to `/tmp`, `/var/run`, `/mnt`, `/root`, or `/` before each download attempt\nhttp://45.13.227.151/h0r0zx00xh0r0zx00xdefault/\n6188f876ce4244dd2f4bacaa3e3ab7fa2462f39848b83ec705eb8c749e8ac09b",
      "modified": "2024-12-27T00:01:27.205000",
      "created": "2024-11-23T19:14:57.957000",
      "tags": [
        "elf sha256",
        "matches rule",
        "threats open",
        "o http",
        "request",
        "get http",
        "snort",
        "misc attack",
        "potentially bad",
        "traffic matches",
        "shell",
        "trojan",
        "body",
        "sandbox",
        "speed",
        "web request",
        "commands",
        "cmdlets",
        "commandline",
        "james pemberton",
        "endgame",
        "jhasenbusch",
        "austin songer",
        "austinsonger",
        "getcommand",
        "homenet",
        "externalnet",
        "perimeter",
        "tgi hunt",
        "httpports",
        "major",
        "checks-hostname",
        "detect-debug-environment",
        "self-delete",
        "sets-process-name",
        "telnet-communication"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "downloader.medusa/shell",
          "display_name": "downloader.medusa/shell",
          "target": null
        },
        {
          "id": "medusa shell bash",
          "display_name": "medusa shell bash",
          "target": null
        },
        {
          "id": "downloader trojan",
          "display_name": "downloader trojan",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1064",
          "name": "Scripting",
          "display_name": "T1064 - Scripting"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1070.004",
          "name": "File Deletion",
          "display_name": "T1070.004 - File Deletion"
        },
        {
          "id": "T1222",
          "name": "File and Directory Permissions Modification",
          "display_name": "T1222 - File and Directory Permissions Modification"
        },
        {
          "id": "T1564",
          "name": "Hide Artifacts",
          "display_name": "T1564 - Hide Artifacts"
        },
        {
          "id": "T1564.001",
          "name": "Hidden Files and Directories",
          "display_name": "T1564.001 - Hidden Files and Directories"
        },
        {
          "id": "T1003",
          "name": "OS Credential Dumping",
          "display_name": "T1003 - OS Credential Dumping"
        },
        {
          "id": "T1082",
          "name": "System Information Discovery",
          "display_name": "T1082 - System Information Discovery"
        },
        {
          "id": "T1518",
          "name": "Software Discovery",
          "display_name": "T1518 - Software Discovery"
        },
        {
          "id": "T1518.001",
          "name": "Security Software Discovery",
          "display_name": "T1518.001 - Security Software Discovery"
        },
        {
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "display_name": "T1048 - Exfiltration Over Alternative Protocol"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1095",
          "name": "Non-Application Layer Protocol",
          "display_name": "T1095 - Non-Application Layer Protocol"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1571",
          "name": "Non-Standard Port",
          "display_name": "T1571 - Non-Standard Port"
        },
        {
          "id": "T1489",
          "name": "Service Stop",
          "display_name": "T1489 - Service Stop"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 11,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 405,
        "FileHash-SHA1": 407,
        "FileHash-SHA256": 2369,
        "IPv4": 366,
        "URL": 685,
        "domain": 80,
        "hostname": 130,
        "YARA": 5
      },
      "indicator_count": 4447,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "520 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "671fd3b07ffb71116f2db7fa",
      "name": "dragonforce.io",
      "description": "Throw your MacBook in the trash, where the hackers belong.",
      "modified": "2024-11-27T17:01:13.516000",
      "created": "2024-10-28T18:10:56.355000",
      "tags": [
        "copyright",
        "apple computer",
        "tcpip",
        "supported",
        "quantum",
        "postfix",
        "mail",
        "aliases",
        "postfix version",
        "restrict",
        "wietse venema",
        "sample",
        "note",
        "person",
        "basic system",
        "general",
        "column",
        "tiff",
        "linus walleij",
        "triad",
        "greg roelofs",
        "html",
        "daniel quinlan",
        "aiff",
        "music",
        "wave",
        "formats",
        "magic",
        "form",
        "crunch",
        "freeze",
        "maker",
        "format",
        "postscript",
        "this",
        "ifmodule",
        "include",
        "virtualhost",
        "directory",
        "require",
        "serverroot",
        "listen",
        "ifdefine",
        "loadmodule",
        "errordocument",
        "apache",
        "win32",
        "example",
        "main",
        "webdav",
        "internet",
        "mime type",
        "xlm xla",
        "xlc xlt",
        "xlam",
        "xlsb",
        "xlsm",
        "xltm",
        "z7 z8",
        "xhtml xht",
        "addiconbytype",
        "adddescription",
        "fancyindexed",
        "gzip",
        "indexignore",
        "indexes",
        "versionsort",
        "fancyindexing",
        "alias icons",
        "full",
        "minrate500",
        "keepalive",
        "prod",
        "email",
        "apache http",
        "server",
        "timeout",
        "number",
        "minimal",
        "major",
        "addlanguage",
        "addcharset",
        "defaultlanguage",
        "fallback",
        "polish",
        "addlanguage pl",
        "catalan",
        "english",
        "greekmodern",
        "korean",
        "turkish",
        "browsermatch",
        "davlockdb",
        "requireany",
        "usergroup",
        "alias",
        "authtype digest",
        "davupload admin",
        "authuserfile",
        "errorhttp",
        "http",
        "yourincludepath",
        "apache version",
        "serversignature",
        "alias error",
        "addhandler",
        "threadsperchild",
        "startservers",
        "minsparethreads",
        "maxsparethreads",
        "maximum number",
        "pidfile",
        "mpms",
        "threadstacksize",
        "extendedstatus",
        "change",
        "sethandler",
        "require host",
        "get information",
        "allow server",
        "allow",
        "userdir sites",
        "control access",
        "userdir",
        "sslsessioncache",
        "configure",
        "ocsp stapling",
        "ssl engine",
        "sslrequire",
        "ssltls standard",
        "prng",
        "sslrandomseed",
        "openssl",
        "high",
        "first",
        "refer",
        "servername",
        "virtualhost 80",
        "serveradmin",
        "documentroot",
        "errorlog",
        "customlog",
        "hosts",
        "please",
        "almost",
        "loadfile c",
        "proxyhtmllinks",
        "ascii",
        "unicode",
        "windows",
        "must",
        "location",
        "w3c html",
        "directoryindex",
        "allowoverride",
        "manual",
        "provide access",
        "options indexes",
        "files",
        "removetype tr",
        "traditionally",
        "addlanguage da",
        "addtype",
        "a facility",
        "claim",
        "file",
        "level error",
        "sender",
        "store",
        "level",
        "facility",
        "category",
        "time",
        "host",
        "threadid",
        "function",
        "line",
        "message",
        "guest",
        "access",
        "kernel",
        "usereventagent",
        "springboard",
        "message sep",
        "message mc",
        "message secure",
        "ca message",
        "multitouchhid",
        "use directory",
        "home autohome",
        "automounter map",
        "get home",
        "ps1h",
        "make bash",
        "s checkwinsize",
        "etcbashrc",
        "termprogram",
        "level info",
        "broadcast",
        "ignore",
        "rules",
        "true",
        "t option",
        "mount",
        "force",
        "environment",
        "automountdenv",
        "promptcommand",
        "shellsessiondir",
        "histfile",
        "histfilesize",
        "terminal",
        "myvar",
        "histtimeformat",
        "arrange",
        "bashrematch",
        "tell",
        "limit",
        "order deny",
        "authtype",
        "default require",
        "require user",
        "owner",
        "authkey",
        "lpadmin",
        "order",
        "system",
        "local",
        "cups scheduler",
        "list",
        "synconclose no",
        "default user",
        "user lp",
        "group lp",
        "group value",
        "restrict access",
        "cups",
        "inpck",
        "nnnbaud",
        "berkeley",
        "parity",
        "pc entry",
        "pass8",
        "parenb istrip",
        "fixed speed",
        "entry",
        "clocal mode",
        "host database",
        "maxhistsize",
        "promptmode",
        "verbose end",
        "etcirbrcloaded",
        "default",
        "setup",
        "history file",
        "readline",
        "error",
        "searchpaths",
        "freebsd",
        "tmpdir",
        "fcodes",
        "prunepaths",
        "vartmp",
        "prunedirs",
        "filesystems",
        "status mailfrom",
        "returnpath via",
        "open directory",
        "jabber",
        "group database",
        "cyrus",
        "calendar",
        "dovecot",
        "postfix scsd",
        "networkd",
        "nroff",
        "manpath",
        "uncomment",
        "manpager",
        "whatispager",
        "manlocale",
        "every",
        "manpath optman",
        "maybe",
        "troff",
        "flags",
        "bcgjnuwz",
        "d0 j",
        "ldap defaults",
        "base dcexample",
        "uri ldap",
        "sizelimit",
        "timelimit",
        "deref",
        "syntax",
        "kerberos",
        "name",
        "corba object",
        "desc",
        "schema",
        "openldap",
        "redistribution",
        "public license",
        "license",
        "collective",
        "shall not",
        "ldap",
        "co llective",
        "equality",
        "sup name",
        "structural must",
        "singlevalue",
        "auxiliary must",
        "auxiliary may",
        "guid",
        "desc account",
        "desc mount",
        "desc password",
        "service",
        "info",
        "tiger",
        "multi",
        "d esc",
        "rfc1274",
        "structural may",
        "quality",
        "substr caseigno",
        "corba",
        "ldap directory",
        "reserved",
        "ldap server",
        "dynamic group",
        "netscape",
        "not recommended",
        "for production",
        "attribute",
        "name managedby",
        "name leaf",
        "duas",
        "internetdrafts",
        "coast",
        "project",
        "java object",
        "java class",
        "de sc",
        "pkcs",
        "inetorgperson",
        "rfc2798",
        "signeddata",
        "smime",
        "openldap note",
        "hold",
        "code",
        "java",
        "jndi reference",
        "jndi",
        "with syntax",
        "definitions",
        "kerberos v",
        "kdc schema",
        "oid base",
        "size",
        "subclass of",
        "may contain",
        "objectclass",
        "must contain",
        "matches for",
        "obsolete",
        "des c",
        "abstract must",
        "sup person",
        "microsoft",
        "advanced server",
        "schema mapping",
        "netinfo",
        "config",
        "groups",
        "netinfo preset",
        "crypt",
        "netinfo rpcs",
        "rpcs number",
        "oncrpcnumber",
        "ipnetmasknumber",
        "assistant",
        "may description",
        "rfc2307",
        "rfc2252",
        "match syntax",
        "openldaproot",
        "openldaporg",
        "openldapou",
        "equal ity",
        "kind",
        "rule",
        "attcertpath",
        "rolesyntax",
        "ldif",
        "blank",
        "ldap entry",
        "spaces",
        "cosine pilot",
        "directory forum",
        "password policy",
        "false",
        "april",
        "auxiliary",
        "passwd",
        "account",
        "desc pool",
        "unix",
        "structural",
        "sup rpcentry",
        "sup container",
        "abstract may",
        "sup ipsecbase",
        "Chelsea Manning Help Me",
        "Aishah Siti Lazim",
        "Aishah Lazim",
        "194 Green Street",
        "Human Subjects",
        "cybernetic",
        "RNA molecule",
        "matches",
        "postfix smtp",
        "domain",
        "ipv6 host",
        "reject",
        "reply",
        "prior",
        "bugs",
        "reject empty",
        "canonical",
        "tables",
        "post",
        "replace user",
        "address",
        "generic",
        "smtp",
        "isp mail",
        "mail delivery",
        "charset",
        "report",
        "postfix dsn",
        "mail returned",
        "only",
        "mime",
        "headerchecks",
        "readme files",
        "filters while",
        "posix",
        "empty",
        "body",
        "pass",
        "write",
        "date",
        "program",
        "agreement",
        "contributor",
        "recipient",
        "contribution",
        "the program",
        "corporation",
        "contributors",
        "product x",
        "as expressly",
        "arch",
        "arch x8664",
        "pipe wall",
        "wimplicit",
        "ranlib",
        "warn",
        "switch",
        "start",
        "systype",
        "smtp server",
        "specify",
        "mx host",
        "unix password",
        "user unknown",
        "pathbin",
        "postfix queue",
        "path",
        "beware",
        "class",
        "uucp",
        "shell",
        "outlook",
        "postfix master",
        "begin",
        "server admin",
        "mail backend",
        "modern smtp",
        "iana",
        "many",
        "postfix pipe",
        "recent cyrus",
        "amos gouaux",
        "old example",
        "update",
        "usrsbin",
        "file format",
        "no group",
        "daemondirectory",
        "relocated",
        "matches user",
        "synopsis",
        "or even",
        "lutz jaenicke",
        "technology",
        "cottbus",
        "germany",
        "openssl package",
        "openssl project",
        "europe",
        "remember that",
        "use of",
        "virtual",
        "virtual alias",
        "redirect mail",
        "deliver mail",
        "transport",
        "description",
        "result format",
        "bashno",
        "r etcbashrc",
        "protocol",
        "ipv6",
        "icmp",
        "cisco",
        "monitoring",
        "argus",
        "chaos",
        "rsvp",
        "encapsulation",
        "aris",
        "isis",
        "kame",
        "id key",
        "specification",
        "auto exit",
        "vpn socket",
        "networkup",
        "term",
        "devnull",
        "common setup",
        "set command",
        "sunnet manager",
        "rpcsrc",
        "netlicense",
        "apple",
        "netbootmount",
        "netbootshadow",
        "computername",
        "localonly",
        "localnetbootdir",
        "netboot",
        "define",
        "purpose",
        "networkonly",
        "waiting",
        "auditing",
        "solaris",
        "openbsm",
        "secsrvr",
        "allocation",
        "bsm event",
        "solaris kernel",
        "openbsm kernel",
        "solaris auemac",
        "solaris umount",
        "integer",
        "array",
        "data",
        "state",
        "opendirectoryd",
        "ipv4",
        "plist",
        "dict",
        "session",
        "commcenter",
        "airport",
        "cfbasichash",
        "thread",
        "cfrunloop",
        "cfrunloopmode",
        "usrbinsudo",
        "usrsbinnetbiosd",
        "removed"
      ],
      "references": [
        "afpovertcp.cfg",
        "aliases",
        "magic",
        "httpd.conf",
        "mime.types",
        "httpd-autoindex.conf",
        "httpd-default.conf",
        "httpd-languages.conf",
        "httpd-dav.conf",
        "httpd-multilang-errordoc.conf",
        "httpd-mpm.conf",
        "httpd-info.conf",
        "httpd-userdir.conf",
        "httpd-ssl.conf",
        "httpd-vhosts.conf",
        "proxy-html.conf",
        "httpd-manual.conf",
        "php7.conf",
        "mpm.conf",
        "com.apple.eventmonitor",
        "com.apple.authd",
        "com.apple.cdscheduler",
        "com.apple.contacts.ContactsAutocomplete",
        "com.apple.install",
        "com.apple.coreduetd",
        "com.apple.login.guest",
        "com.apple.mkb",
        "com.apple.mail",
        "com.apple.MessageTracer",
        "com.apple.mkb.internal",
        "com.apple.iokit.power",
        "com.apple.performance",
        "com.apple.networking.boringssl",
        "auto_master",
        "auto_home",
        "bashrc",
        "asl.conf",
        "autofs.conf",
        "bashrc_Apple_Terminal",
        "csh.cshrc",
        "csh.logout",
        "com.apple.screensharing.agent.launchd",
        "csh.login",
        "cupsd.conf",
        "cups-files.conf.default",
        "cupsd.conf.O",
        "cupsd.conf.default",
        "cups-files.conf",
        "snmp.conf",
        "snmp.conf.default",
        "dragonforce.io",
        "find.codes",
        "ftpusers",
        "hosts.equiv",
        "gettytab",
        "hosts",
        "kern_loader.conf",
        "irbrc",
        "locate.rc",
        "mail.rc",
        "group",
        "man.conf",
        "networks",
        "manpaths",
        "newsyslog.conf",
        "com.apple.slapconfig.conf",
        "files.conf",
        "com.apple.xscertd.conf",
        "wifi.conf",
        "com.apple.slapd.conf",
        "nfs.conf",
        "ntp.conf",
        "notify.conf",
        "ntp_opendirectory.conf",
        "AppleOpenLDAP.plist",
        "ldap.conf",
        "ldap.conf.default",
        "apple_auxillary.schema",
        "corba.ldif",
        "collective.schema",
        "collective.ldif",
        "core.ldif",
        "apple.schema",
        "cosine.ldif",
        "core.schema",
        "corba.schema",
        "duaconf.ldif",
        "dyngroup.ldif",
        "fmserver.schema",
        "duaconf.schema",
        "java.ldif",
        "inetorgperson.schema",
        "inetorgperson.ldif",
        "java.schema",
        "krb5-kdc.schema",
        "cosine.schema",
        "misc.ldif",
        "microsoft.std.schema",
        "misc.schema",
        "netinfo.schema",
        "nis.schema",
        "nis.ldif",
        "openldap.schema",
        "dyngroup.schema",
        "pmi.ldif",
        "ppolicy.ldif",
        "pmi.schema",
        "openldap.ldif",
        "README",
        "ppolicy.schema",
        "samba.schema",
        "microsoft.schema",
        "access",
        "custom_header_checks",
        "canonical",
        "generic",
        "bounce.cf.default",
        "header_checks",
        "LICENSE",
        "makedefs.out",
        "main.cf",
        "master.cf.default",
        "master.cf",
        "main.cf.proto",
        "master.cf.proto",
        "postfix-files",
        "relocated",
        "TLS_LICENSE",
        "virtual",
        "main.cf.default",
        "transport",
        "profile",
        "protocols",
        "racoon.conf",
        "rmtab",
        "rc.common",
        "rpc",
        "rtadvd.conf",
        "rc.netboot",
        "audit_class",
        "audit_warn",
        "audit_event",
        "audit_control"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America",
        "Bahrain",
        "Israel",
        "India"
      ],
      "malware_families": [
        {
          "id": "DirectoryIndex",
          "display_name": "DirectoryIndex",
          "target": null
        },
        {
          "id": "AllowOverride",
          "display_name": "AllowOverride",
          "target": null
        },
        {
          "id": "Malaysia, Truly Asia",
          "display_name": "Malaysia, Truly Asia",
          "target": null
        },
        {
          "id": "9002 RAT",
          "display_name": "9002 RAT",
          "target": null
        },
        {
          "id": "Virus:DOS/PSMPC_386",
          "display_name": "Virus:DOS/PSMPC_386",
          "target": "/malware/Virus:DOS/PSMPC_386"
        },
        {
          "id": "TEL:TrojanSpy:Win32/KediRat",
          "display_name": "TEL:TrojanSpy:Win32/KediRat",
          "target": null
        },
        {
          "id": "TrojanSpy:iOS/XcodeGhost",
          "display_name": "TrojanSpy:iOS/XcodeGhost",
          "target": "/malware/TrojanSpy:iOS/XcodeGhost"
        },
        {
          "id": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
          "display_name": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
          "target": null
        },
        {
          "id": "Ultra VNC",
          "display_name": "Ultra VNC",
          "target": null
        },
        {
          "id": "TrojanDownloader:Win32/Bridge",
          "display_name": "TrojanDownloader:Win32/Bridge",
          "target": "/malware/TrojanDownloader:Win32/Bridge"
        },
        {
          "id": "Virus:DOS/Cyberwar_5300",
          "display_name": "Virus:DOS/Cyberwar_5300",
          "target": "/malware/Virus:DOS/Cyberwar_5300"
        },
        {
          "id": "Backdoor:Win32/Espion",
          "display_name": "Backdoor:Win32/Espion",
          "target": "/malware/Backdoor:Win32/Espion"
        },
        {
          "id": "Pegasus for iOS - S0289",
          "display_name": "Pegasus for iOS - S0289",
          "target": null
        },
        {
          "id": "Pegasus - MOB-S0005",
          "display_name": "Pegasus - MOB-S0005",
          "target": null
        },
        {
          "id": "Pegasus for Android - S0316",
          "display_name": "Pegasus for Android - S0316",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
          "display_name": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:BackdoorLinux/Mirai",
          "display_name": "ALF:HeraklezEval:BackdoorLinux/Mirai",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
          "display_name": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1560",
          "name": "Archive Collected Data",
          "display_name": "T1560 - Archive Collected Data"
        },
        {
          "id": "T1564",
          "name": "Hide Artifacts",
          "display_name": "T1564 - Hide Artifacts"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1562",
          "name": "Impair Defenses",
          "display_name": "T1562 - Impair Defenses"
        },
        {
          "id": "T1543",
          "name": "Create or Modify System Process",
          "display_name": "T1543 - Create or Modify System Process"
        },
        {
          "id": "T1003",
          "name": "OS Credential Dumping",
          "display_name": "T1003 - OS Credential Dumping"
        },
        {
          "id": "T1070",
          "name": "Indicator Removal on Host",
          "display_name": "T1070 - Indicator Removal on Host"
        },
        {
          "id": "T1404",
          "name": "Exploit OS Vulnerability",
          "display_name": "T1404 - Exploit OS Vulnerability"
        },
        {
          "id": "T1445",
          "name": "Abuse of iOS Enterprise App Signing Key",
          "display_name": "T1445 - Abuse of iOS Enterprise App Signing Key"
        },
        {
          "id": "T1001.002",
          "name": "Steganography",
          "display_name": "T1001.002 - Steganography"
        },
        {
          "id": "T1003.004",
          "name": "LSA Secrets",
          "display_name": "T1003.004 - LSA Secrets"
        },
        {
          "id": "T1001.001",
          "name": "Junk Data",
          "display_name": "T1001.001 - Junk Data"
        },
        {
          "id": "T1003.001",
          "name": "LSASS Memory",
          "display_name": "T1003.001 - LSASS Memory"
        },
        {
          "id": "T1003.005",
          "name": "Cached Domain Credentials",
          "display_name": "T1003.005 - Cached Domain Credentials"
        },
        {
          "id": "T1001.003",
          "name": "Protocol Impersonation",
          "display_name": "T1001.003 - Protocol Impersonation"
        },
        {
          "id": "T1026",
          "name": "Multiband Communication",
          "display_name": "T1026 - Multiband Communication"
        },
        {
          "id": "T1562.004",
          "name": "Disable or Modify System Firewall",
          "display_name": "T1562.004 - Disable or Modify System Firewall"
        },
        {
          "id": "T1025",
          "name": "Data from Removable Media",
          "display_name": "T1025 - Data from Removable Media"
        },
        {
          "id": "T1055.002",
          "name": "Portable Executable Injection",
          "display_name": "T1055.002 - Portable Executable Injection"
        },
        {
          "id": "T1018",
          "name": "Remote System Discovery",
          "display_name": "T1018 - Remote System Discovery"
        },
        {
          "id": "T1021.006",
          "name": "Windows Remote Management",
          "display_name": "T1021.006 - Windows Remote Management"
        },
        {
          "id": "T1021",
          "name": "Remote Services",
          "display_name": "T1021 - Remote Services"
        }
      ],
      "industries": [
        "Media",
        "LGBTQ+ Activists",
        "Technology",
        "Telecommunications",
        "Hospitality",
        "Energy",
        "NGO",
        "Semiconductor",
        "Human Subjects"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 35,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "ravescoutllc.",
        "id": "288912",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 669,
        "URL": 1976,
        "email": 21,
        "hostname": 1198,
        "FileHash-SHA256": 277,
        "CVE": 2,
        "CIDR": 3
      },
      "indicator_count": 4146,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 35,
      "modified_text": "549 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "671fd3afa974b93284d6bac1",
      "name": "dragonforce.io",
      "description": "Throw your MacBook in the trash, where the hackers belong.",
      "modified": "2024-11-27T17:01:13.516000",
      "created": "2024-10-28T18:10:55.712000",
      "tags": [
        "copyright",
        "apple computer",
        "tcpip",
        "supported",
        "quantum",
        "postfix",
        "mail",
        "aliases",
        "postfix version",
        "restrict",
        "wietse venema",
        "sample",
        "note",
        "person",
        "basic system",
        "general",
        "column",
        "tiff",
        "linus walleij",
        "triad",
        "greg roelofs",
        "html",
        "daniel quinlan",
        "aiff",
        "music",
        "wave",
        "formats",
        "magic",
        "form",
        "crunch",
        "freeze",
        "maker",
        "format",
        "postscript",
        "this",
        "ifmodule",
        "include",
        "virtualhost",
        "directory",
        "require",
        "serverroot",
        "listen",
        "ifdefine",
        "loadmodule",
        "errordocument",
        "apache",
        "win32",
        "example",
        "main",
        "webdav",
        "internet",
        "mime type",
        "xlm xla",
        "xlc xlt",
        "xlam",
        "xlsb",
        "xlsm",
        "xltm",
        "z7 z8",
        "xhtml xht",
        "addiconbytype",
        "adddescription",
        "fancyindexed",
        "gzip",
        "indexignore",
        "indexes",
        "versionsort",
        "fancyindexing",
        "alias icons",
        "full",
        "minrate500",
        "keepalive",
        "prod",
        "email",
        "apache http",
        "server",
        "timeout",
        "number",
        "minimal",
        "major",
        "addlanguage",
        "addcharset",
        "defaultlanguage",
        "fallback",
        "polish",
        "addlanguage pl",
        "catalan",
        "english",
        "greekmodern",
        "korean",
        "turkish",
        "browsermatch",
        "davlockdb",
        "requireany",
        "usergroup",
        "alias",
        "authtype digest",
        "davupload admin",
        "authuserfile",
        "errorhttp",
        "http",
        "yourincludepath",
        "apache version",
        "serversignature",
        "alias error",
        "addhandler",
        "threadsperchild",
        "startservers",
        "minsparethreads",
        "maxsparethreads",
        "maximum number",
        "pidfile",
        "mpms",
        "threadstacksize",
        "extendedstatus",
        "change",
        "sethandler",
        "require host",
        "get information",
        "allow server",
        "allow",
        "userdir sites",
        "control access",
        "userdir",
        "sslsessioncache",
        "configure",
        "ocsp stapling",
        "ssl engine",
        "sslrequire",
        "ssltls standard",
        "prng",
        "sslrandomseed",
        "openssl",
        "high",
        "first",
        "refer",
        "servername",
        "virtualhost 80",
        "serveradmin",
        "documentroot",
        "errorlog",
        "customlog",
        "hosts",
        "please",
        "almost",
        "loadfile c",
        "proxyhtmllinks",
        "ascii",
        "unicode",
        "windows",
        "must",
        "location",
        "w3c html",
        "directoryindex",
        "allowoverride",
        "manual",
        "provide access",
        "options indexes",
        "files",
        "removetype tr",
        "traditionally",
        "addlanguage da",
        "addtype",
        "a facility",
        "claim",
        "file",
        "level error",
        "sender",
        "store",
        "level",
        "facility",
        "category",
        "time",
        "host",
        "threadid",
        "function",
        "line",
        "message",
        "guest",
        "access",
        "kernel",
        "usereventagent",
        "springboard",
        "message sep",
        "message mc",
        "message secure",
        "ca message",
        "multitouchhid",
        "use directory",
        "home autohome",
        "automounter map",
        "get home",
        "ps1h",
        "make bash",
        "s checkwinsize",
        "etcbashrc",
        "termprogram",
        "level info",
        "broadcast",
        "ignore",
        "rules",
        "true",
        "t option",
        "mount",
        "force",
        "environment",
        "automountdenv",
        "promptcommand",
        "shellsessiondir",
        "histfile",
        "histfilesize",
        "terminal",
        "myvar",
        "histtimeformat",
        "arrange",
        "bashrematch",
        "tell",
        "limit",
        "order deny",
        "authtype",
        "default require",
        "require user",
        "owner",
        "authkey",
        "lpadmin",
        "order",
        "system",
        "local",
        "cups scheduler",
        "list",
        "synconclose no",
        "default user",
        "user lp",
        "group lp",
        "group value",
        "restrict access",
        "cups",
        "inpck",
        "nnnbaud",
        "berkeley",
        "parity",
        "pc entry",
        "pass8",
        "parenb istrip",
        "fixed speed",
        "entry",
        "clocal mode",
        "host database",
        "maxhistsize",
        "promptmode",
        "verbose end",
        "etcirbrcloaded",
        "default",
        "setup",
        "history file",
        "readline",
        "error",
        "searchpaths",
        "freebsd",
        "tmpdir",
        "fcodes",
        "prunepaths",
        "vartmp",
        "prunedirs",
        "filesystems",
        "status mailfrom",
        "returnpath via",
        "open directory",
        "jabber",
        "group database",
        "cyrus",
        "calendar",
        "dovecot",
        "postfix scsd",
        "networkd",
        "nroff",
        "manpath",
        "uncomment",
        "manpager",
        "whatispager",
        "manlocale",
        "every",
        "manpath optman",
        "maybe",
        "troff",
        "flags",
        "bcgjnuwz",
        "d0 j",
        "ldap defaults",
        "base dcexample",
        "uri ldap",
        "sizelimit",
        "timelimit",
        "deref",
        "syntax",
        "kerberos",
        "name",
        "corba object",
        "desc",
        "schema",
        "openldap",
        "redistribution",
        "public license",
        "license",
        "collective",
        "shall not",
        "ldap",
        "co llective",
        "equality",
        "sup name",
        "structural must",
        "singlevalue",
        "auxiliary must",
        "auxiliary may",
        "guid",
        "desc account",
        "desc mount",
        "desc password",
        "service",
        "info",
        "tiger",
        "multi",
        "d esc",
        "rfc1274",
        "structural may",
        "quality",
        "substr caseigno",
        "corba",
        "ldap directory",
        "reserved",
        "ldap server",
        "dynamic group",
        "netscape",
        "not recommended",
        "for production",
        "attribute",
        "name managedby",
        "name leaf",
        "duas",
        "internetdrafts",
        "coast",
        "project",
        "java object",
        "java class",
        "de sc",
        "pkcs",
        "inetorgperson",
        "rfc2798",
        "signeddata",
        "smime",
        "openldap note",
        "hold",
        "code",
        "java",
        "jndi reference",
        "jndi",
        "with syntax",
        "definitions",
        "kerberos v",
        "kdc schema",
        "oid base",
        "size",
        "subclass of",
        "may contain",
        "objectclass",
        "must contain",
        "matches for",
        "obsolete",
        "des c",
        "abstract must",
        "sup person",
        "microsoft",
        "advanced server",
        "schema mapping",
        "netinfo",
        "config",
        "groups",
        "netinfo preset",
        "crypt",
        "netinfo rpcs",
        "rpcs number",
        "oncrpcnumber",
        "ipnetmasknumber",
        "assistant",
        "may description",
        "rfc2307",
        "rfc2252",
        "match syntax",
        "openldaproot",
        "openldaporg",
        "openldapou",
        "equal ity",
        "kind",
        "rule",
        "attcertpath",
        "rolesyntax",
        "ldif",
        "blank",
        "ldap entry",
        "spaces",
        "cosine pilot",
        "directory forum",
        "password policy",
        "false",
        "april",
        "auxiliary",
        "passwd",
        "account",
        "desc pool",
        "unix",
        "structural",
        "sup rpcentry",
        "sup container",
        "abstract may",
        "sup ipsecbase",
        "Chelsea Manning Help Me",
        "Aishah Siti Lazim",
        "Aishah Lazim",
        "194 Green Street",
        "Human Subjects",
        "cybernetic",
        "RNA molecule",
        "matches",
        "postfix smtp",
        "domain",
        "ipv6 host",
        "reject",
        "reply",
        "prior",
        "bugs",
        "reject empty",
        "canonical",
        "tables",
        "post",
        "replace user",
        "address",
        "generic",
        "smtp",
        "isp mail",
        "mail delivery",
        "charset",
        "report",
        "postfix dsn",
        "mail returned",
        "only",
        "mime",
        "headerchecks",
        "readme files",
        "filters while",
        "posix",
        "empty",
        "body",
        "pass",
        "write",
        "date",
        "program",
        "agreement",
        "contributor",
        "recipient",
        "contribution",
        "the program",
        "corporation",
        "contributors",
        "product x",
        "as expressly",
        "arch",
        "arch x8664",
        "pipe wall",
        "wimplicit",
        "ranlib",
        "warn",
        "switch",
        "start",
        "systype",
        "smtp server",
        "specify",
        "mx host",
        "unix password",
        "user unknown",
        "pathbin",
        "postfix queue",
        "path",
        "beware",
        "class",
        "uucp",
        "shell",
        "outlook",
        "postfix master",
        "begin",
        "server admin",
        "mail backend",
        "modern smtp",
        "iana",
        "many",
        "postfix pipe",
        "recent cyrus",
        "amos gouaux",
        "old example",
        "update",
        "usrsbin",
        "file format",
        "no group",
        "daemondirectory",
        "relocated",
        "matches user",
        "synopsis",
        "or even",
        "lutz jaenicke",
        "technology",
        "cottbus",
        "germany",
        "openssl package",
        "openssl project",
        "europe",
        "remember that",
        "use of",
        "virtual",
        "virtual alias",
        "redirect mail",
        "deliver mail",
        "transport",
        "description",
        "result format",
        "bashno",
        "r etcbashrc",
        "protocol",
        "ipv6",
        "icmp",
        "cisco",
        "monitoring",
        "argus",
        "chaos",
        "rsvp",
        "encapsulation",
        "aris",
        "isis",
        "kame",
        "id key",
        "specification",
        "auto exit",
        "vpn socket",
        "networkup",
        "term",
        "devnull",
        "common setup",
        "set command",
        "sunnet manager",
        "rpcsrc",
        "netlicense",
        "apple",
        "netbootmount",
        "netbootshadow",
        "computername",
        "localonly",
        "localnetbootdir",
        "netboot",
        "define",
        "purpose",
        "networkonly",
        "waiting",
        "auditing",
        "solaris",
        "openbsm",
        "secsrvr",
        "allocation",
        "bsm event",
        "solaris kernel",
        "openbsm kernel",
        "solaris auemac",
        "solaris umount",
        "integer",
        "array",
        "data",
        "state",
        "opendirectoryd",
        "ipv4",
        "plist",
        "dict",
        "session",
        "commcenter",
        "airport",
        "cfbasichash",
        "thread",
        "cfrunloop",
        "cfrunloopmode",
        "usrbinsudo",
        "usrsbinnetbiosd",
        "removed"
      ],
      "references": [
        "afpovertcp.cfg",
        "aliases",
        "magic",
        "httpd.conf",
        "mime.types",
        "httpd-autoindex.conf",
        "httpd-default.conf",
        "httpd-languages.conf",
        "httpd-dav.conf",
        "httpd-multilang-errordoc.conf",
        "httpd-mpm.conf",
        "httpd-info.conf",
        "httpd-userdir.conf",
        "httpd-ssl.conf",
        "httpd-vhosts.conf",
        "proxy-html.conf",
        "httpd-manual.conf",
        "php7.conf",
        "mpm.conf",
        "com.apple.eventmonitor",
        "com.apple.authd",
        "com.apple.cdscheduler",
        "com.apple.contacts.ContactsAutocomplete",
        "com.apple.install",
        "com.apple.coreduetd",
        "com.apple.login.guest",
        "com.apple.mkb",
        "com.apple.mail",
        "com.apple.MessageTracer",
        "com.apple.mkb.internal",
        "com.apple.iokit.power",
        "com.apple.performance",
        "com.apple.networking.boringssl",
        "auto_master",
        "auto_home",
        "bashrc",
        "asl.conf",
        "autofs.conf",
        "bashrc_Apple_Terminal",
        "csh.cshrc",
        "csh.logout",
        "com.apple.screensharing.agent.launchd",
        "csh.login",
        "cupsd.conf",
        "cups-files.conf.default",
        "cupsd.conf.O",
        "cupsd.conf.default",
        "cups-files.conf",
        "snmp.conf",
        "snmp.conf.default",
        "dragonforce.io",
        "find.codes",
        "ftpusers",
        "hosts.equiv",
        "gettytab",
        "hosts",
        "kern_loader.conf",
        "irbrc",
        "locate.rc",
        "mail.rc",
        "group",
        "man.conf",
        "networks",
        "manpaths",
        "newsyslog.conf",
        "com.apple.slapconfig.conf",
        "files.conf",
        "com.apple.xscertd.conf",
        "wifi.conf",
        "com.apple.slapd.conf",
        "nfs.conf",
        "ntp.conf",
        "notify.conf",
        "ntp_opendirectory.conf",
        "AppleOpenLDAP.plist",
        "ldap.conf",
        "ldap.conf.default",
        "apple_auxillary.schema",
        "corba.ldif",
        "collective.schema",
        "collective.ldif",
        "core.ldif",
        "apple.schema",
        "cosine.ldif",
        "core.schema",
        "corba.schema",
        "duaconf.ldif",
        "dyngroup.ldif",
        "fmserver.schema",
        "duaconf.schema",
        "java.ldif",
        "inetorgperson.schema",
        "inetorgperson.ldif",
        "java.schema",
        "krb5-kdc.schema",
        "cosine.schema",
        "misc.ldif",
        "microsoft.std.schema",
        "misc.schema",
        "netinfo.schema",
        "nis.schema",
        "nis.ldif",
        "openldap.schema",
        "dyngroup.schema",
        "pmi.ldif",
        "ppolicy.ldif",
        "pmi.schema",
        "openldap.ldif",
        "README",
        "ppolicy.schema",
        "samba.schema",
        "microsoft.schema",
        "access",
        "custom_header_checks",
        "canonical",
        "generic",
        "bounce.cf.default",
        "header_checks",
        "LICENSE",
        "makedefs.out",
        "main.cf",
        "master.cf.default",
        "master.cf",
        "main.cf.proto",
        "master.cf.proto",
        "postfix-files",
        "relocated",
        "TLS_LICENSE",
        "virtual",
        "main.cf.default",
        "transport",
        "profile",
        "protocols",
        "racoon.conf",
        "rmtab",
        "rc.common",
        "rpc",
        "rtadvd.conf",
        "rc.netboot",
        "audit_class",
        "audit_warn",
        "audit_event",
        "audit_control"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America",
        "Bahrain",
        "Israel",
        "India"
      ],
      "malware_families": [
        {
          "id": "DirectoryIndex",
          "display_name": "DirectoryIndex",
          "target": null
        },
        {
          "id": "AllowOverride",
          "display_name": "AllowOverride",
          "target": null
        },
        {
          "id": "Malaysia, Truly Asia",
          "display_name": "Malaysia, Truly Asia",
          "target": null
        },
        {
          "id": "9002 RAT",
          "display_name": "9002 RAT",
          "target": null
        },
        {
          "id": "Virus:DOS/PSMPC_386",
          "display_name": "Virus:DOS/PSMPC_386",
          "target": "/malware/Virus:DOS/PSMPC_386"
        },
        {
          "id": "TEL:TrojanSpy:Win32/KediRat",
          "display_name": "TEL:TrojanSpy:Win32/KediRat",
          "target": null
        },
        {
          "id": "TrojanSpy:iOS/XcodeGhost",
          "display_name": "TrojanSpy:iOS/XcodeGhost",
          "target": "/malware/TrojanSpy:iOS/XcodeGhost"
        },
        {
          "id": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
          "display_name": "ALF:HSTR:TrojanSpy:MSIL/KeyLogger",
          "target": null
        },
        {
          "id": "Ultra VNC",
          "display_name": "Ultra VNC",
          "target": null
        },
        {
          "id": "TrojanDownloader:Win32/Bridge",
          "display_name": "TrojanDownloader:Win32/Bridge",
          "target": "/malware/TrojanDownloader:Win32/Bridge"
        },
        {
          "id": "Virus:DOS/Cyberwar_5300",
          "display_name": "Virus:DOS/Cyberwar_5300",
          "target": "/malware/Virus:DOS/Cyberwar_5300"
        },
        {
          "id": "Backdoor:Win32/Espion",
          "display_name": "Backdoor:Win32/Espion",
          "target": "/malware/Backdoor:Win32/Espion"
        },
        {
          "id": "Pegasus for iOS - S0289",
          "display_name": "Pegasus for iOS - S0289",
          "target": null
        },
        {
          "id": "Pegasus - MOB-S0005",
          "display_name": "Pegasus - MOB-S0005",
          "target": null
        },
        {
          "id": "Pegasus for Android - S0316",
          "display_name": "Pegasus for Android - S0316",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
          "display_name": "ALF:HeraklezEval:Backdoor:Linux/Mirai",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:BackdoorLinux/Mirai",
          "display_name": "ALF:HeraklezEval:BackdoorLinux/Mirai",
          "target": null
        },
        {
          "id": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
          "display_name": "ALF:HeraklezEval:Backdoor:Linux/Tsunami",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1560",
          "name": "Archive Collected Data",
          "display_name": "T1560 - Archive Collected Data"
        },
        {
          "id": "T1564",
          "name": "Hide Artifacts",
          "display_name": "T1564 - Hide Artifacts"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1562",
          "name": "Impair Defenses",
          "display_name": "T1562 - Impair Defenses"
        },
        {
          "id": "T1543",
          "name": "Create or Modify System Process",
          "display_name": "T1543 - Create or Modify System Process"
        },
        {
          "id": "T1003",
          "name": "OS Credential Dumping",
          "display_name": "T1003 - OS Credential Dumping"
        },
        {
          "id": "T1070",
          "name": "Indicator Removal on Host",
          "display_name": "T1070 - Indicator Removal on Host"
        },
        {
          "id": "T1404",
          "name": "Exploit OS Vulnerability",
          "display_name": "T1404 - Exploit OS Vulnerability"
        },
        {
          "id": "T1445",
          "name": "Abuse of iOS Enterprise App Signing Key",
          "display_name": "T1445 - Abuse of iOS Enterprise App Signing Key"
        },
        {
          "id": "T1001.002",
          "name": "Steganography",
          "display_name": "T1001.002 - Steganography"
        },
        {
          "id": "T1003.004",
          "name": "LSA Secrets",
          "display_name": "T1003.004 - LSA Secrets"
        },
        {
          "id": "T1001.001",
          "name": "Junk Data",
          "display_name": "T1001.001 - Junk Data"
        },
        {
          "id": "T1003.001",
          "name": "LSASS Memory",
          "display_name": "T1003.001 - LSASS Memory"
        },
        {
          "id": "T1003.005",
          "name": "Cached Domain Credentials",
          "display_name": "T1003.005 - Cached Domain Credentials"
        },
        {
          "id": "T1001.003",
          "name": "Protocol Impersonation",
          "display_name": "T1001.003 - Protocol Impersonation"
        },
        {
          "id": "T1026",
          "name": "Multiband Communication",
          "display_name": "T1026 - Multiband Communication"
        },
        {
          "id": "T1562.004",
          "name": "Disable or Modify System Firewall",
          "display_name": "T1562.004 - Disable or Modify System Firewall"
        },
        {
          "id": "T1025",
          "name": "Data from Removable Media",
          "display_name": "T1025 - Data from Removable Media"
        },
        {
          "id": "T1055.002",
          "name": "Portable Executable Injection",
          "display_name": "T1055.002 - Portable Executable Injection"
        },
        {
          "id": "T1018",
          "name": "Remote System Discovery",
          "display_name": "T1018 - Remote System Discovery"
        },
        {
          "id": "T1021.006",
          "name": "Windows Remote Management",
          "display_name": "T1021.006 - Windows Remote Management"
        },
        {
          "id": "T1021",
          "name": "Remote Services",
          "display_name": "T1021 - Remote Services"
        }
      ],
      "industries": [
        "Media",
        "LGBTQ+ Activists",
        "Technology",
        "Telecommunications",
        "Hospitality",
        "Energy",
        "NGO",
        "Semiconductor",
        "Human Subjects"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 34,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "ravescoutllc.",
        "id": "288912",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 669,
        "URL": 1976,
        "email": 21,
        "hostname": 1198,
        "FileHash-SHA256": 277,
        "CVE": 2,
        "CIDR": 3
      },
      "indicator_count": 4146,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 33,
      "modified_text": "549 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "mapdatamsnsdn.info",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "mapdatamsnsdn.info",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780215643.1844296
}