[ADSstreamsthrow]

It's used widely by popular applications (Adobe / Microsoft software products).

[mst]

Which are, in my experience, more ransomware than malware.