misp-circl-feed/feeds/circl/misp/5c687e12-522c-41f4-a498-486d02de0b81.json

5995 lines
828 KiB
JSON
Raw Normal View History

2023-04-21 15:25:09 +02:00
{
2023-06-14 19:31:25 +02:00
"type": "bundle",
"id": "bundle--5c687e12-522c-41f4-a498-486d02de0b81",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"name": "CIRCL",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--5c687e12-522c-41f4-a498-486d02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"name": "VMRay Analyzer Report for Sample #252574 (related amf-fr.org)",
"published": "2019-02-16T21:26:49Z",
"object_refs": [
"x-misp-attribute--980017ac-8689-4856-8609-a7e93799f9a1",
"x-misp-attribute--7835ddd1-3eca-42d1-adbe-867661488e64",
"x-misp-attribute--e3a7649e-190f-4bfa-8b1a-b316f0b85a63",
"x-misp-attribute--5b3ba8d7-70c0-4252-823c-c67d07279b44",
"x-misp-attribute--15272f14-eff1-4d57-9bfe-eb50c88dddd3",
"x-misp-attribute--3c2bc824-66a1-47d9-a5da-cc6bf00f3487",
"x-misp-attribute--98278a38-fc12-4326-9dbf-cd4fefd3bab8",
"x-misp-attribute--fda97354-4f7b-4ee0-9231-35f0b1a95e45",
"x-misp-attribute--aa5c6047-8e3e-4b93-9030-50c3b0f76a89",
"x-misp-attribute--d5eb49cb-82cf-425a-aaa5-867e334de8bd",
"observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230",
"windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230",
"observed-data--2968c724-74e2-4077-ad10-ed897489aadf",
"windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf",
"observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b",
"windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b",
"observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"observed-data--795c1bae-831b-4b11-b279-32138c042af0",
"windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0",
"observed-data--42636628-4a98-4515-84c4-efb048624d16",
"windows-registry-key--42636628-4a98-4515-84c4-efb048624d16",
"observed-data--e325f097-a49e-4bd4-8362-4281735c0279",
"windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279",
"observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42",
"windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42",
"observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"file--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"observed-data--693e271b-3966-4fb8-9787-de555149c589",
"file--693e271b-3966-4fb8-9787-de555149c589",
"observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c",
"file--311d4452-d95d-4391-a29f-ebf1287efd4c",
"observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"file--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"observed-data--f33b60a8-86aa-4318-a304-95c782b1939c",
"windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c",
"observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017",
"windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017",
"observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041",
"windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041",
"observed-data--61af2af0-272f-413d-b70a-07611f8539c3",
"windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3",
"observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db",
"windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db",
"observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"observed-data--f32b6230-41b9-4926-8e41-f651f5611b32",
"windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32",
"observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983",
"network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"observed-data--259b1821-d418-4510-aa04-b59e92dd3820",
"windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820",
"observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab",
"windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab",
"observed-data--23e7606b-8811-45df-b726-dabedcfcdd32",
"windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32",
"observed-data--1f697f8c-84b1-4339-9906-1142cf955bef",
"windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef",
"observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"observed-data--97492285-8474-4867-ae94-ec61a5fee43d",
"windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d",
"observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa",
"windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa",
"observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"observed-data--03ef6074-aaea-4605-a47c-44402d680d6e",
"windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e",
"observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba",
"windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba",
"observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"process--c9b962ff-144f-4eff-8505-627768660ed0",
"process--f3c12178-5032-4529-b970-b8bd2290b550",
"observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"process--34614f0f-6f30-45fd-b710-ed9547534527",
"process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--088f1799-557c-46ea-b729-5b45dba25897",
"observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--63808d45-2ef1-4073-8c92-b64a72630901",
"observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--9a3db6fc-d402-411a-8c03-293adbf890db",
"observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--3dde9650-9c02-4776-b668-857f2e5f6994",
"observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--28220896-936f-4bf9-809f-9481312103af",
"observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--e52795d0-d993-4608-b353-bb8c5e013aef",
"observed-data--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--148177b0-6c6e-454b-bf64-719db4ef657e",
"observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--775972eb-d8fa-4cdd-8897-02cf028de937",
"observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--db9955be-40b0-47b0-9e49-6345daed7651",
"observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--c49ca006-65cd-4790-b102-f08ed67bb796",
"observed-data--248da2ce-03f8-47fb-b4a0-07321377590f",
"file--248da2ce-03f8-47fb-b4a0-07321377590f",
"directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"observed-data--a2907899-5858-4892-a2a3-3018be097ef4",
"windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4",
"observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe",
"file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194",
"windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194",
"observed-data--eb012044-6124-4b96-8c56-690824570580",
"network-traffic--eb012044-6124-4b96-8c56-690824570580",
"ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c",
"file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"directory--a547f901-da10-4320-95af-721573374741",
"observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"observed-data--b90ef13c-4165-4108-adc3-53234995361a",
"windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a",
"observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353",
"file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"observed-data--9521bc93-04e4-4844-9666-a0659854c7d7",
"file--9521bc93-04e4-4844-9666-a0659854c7d7",
"directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"observed-data--26856757-3649-4363-b5a9-68030b721470",
"file--26856757-3649-4363-b5a9-68030b721470",
"directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8",
"file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685",
"file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"directory--928c938a-131a-4010-9af1-5befa7621de1",
"observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025",
"windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025",
"observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a",
"file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"observed-data--8e656cc6-482e-4952-869a-6cba4d726f83",
"windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83",
"x-misp-object--6f35cd0b-d6ac-44f0-919b-80a383c946ef",
"x-misp-object--5c687e2a-e898-40f8-b69b-4bb402de0b81",
"x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee",
"relationship--fded805a-4e56-4982-ae96-3394b78501f6",
"relationship--0ce72b8a-1a31-4279-967c-8ddded94a474",
"relationship--2bd8d608-9f4a-4a99-9658-8a4afeec0688",
"relationship--05422814-1472-4617-b713-0d87211716d6",
"relationship--7f52f06d-a346-4060-b9b2-9bbe42d209ab",
"relationship--2bd3366e-19f6-41db-bf7b-d3eafa776d10",
"relationship--338c3abf-1b7b-4c10-b39c-779deccd6f5e",
"relationship--3a5c184a-43f2-43da-be9b-0931d5769bb2",
"relationship--c30eb200-44b3-4cca-9c04-4ff251667a80",
"relationship--9ff19b83-ff4f-41d0-b425-d2d31496b1c8",
"relationship--9f257b42-f389-492a-a4b5-df236fc40e9c",
"relationship--26ad04d1-46c4-460e-99ba-f557ef7ea2d9",
"relationship--ee036c24-c723-4f67-bbf4-1a05450660a0",
"relationship--2078850a-0396-4395-8092-2ff08a59f33c",
"relationship--a5116a05-7e8d-4362-8ecd-2628b464ac09",
"relationship--4cfeb21b-16fb-44ae-ac43-c0ab350a152c",
"relationship--84df4a85-a775-4f5e-921d-a7994ac11993",
"relationship--00fb8a0a-84ec-41d2-a4fb-98ada29d02f7",
"relationship--009b00bd-8dbc-40e8-9244-8ddfc80cc8a2",
"relationship--ab49adf3-764c-43f4-b88d-f64675b7702d",
"relationship--b2abde21-5e73-428f-873c-19fd74735079",
"relationship--7546b3dd-eb44-4c51-a258-ee2559182a10",
"relationship--64d85e8b-51c8-43fb-8058-ae0b6efdcacc",
"relationship--e621beb8-4880-4346-8906-ac845e5c3041",
"relationship--a57d3022-837c-439f-80c3-c9139fc34f77",
"relationship--941de75b-7aa4-443d-b6c3-d3fa976575f9",
"relationship--a63036bf-1194-45d0-b12a-284d9c142efe",
"relationship--1daa95b5-a80e-47bb-9d9e-1f8479cbc8c8",
"relationship--34352ba0-d840-4ddf-a3e6-8538603694c0",
"relationship--c46b062e-9ccc-4e31-9add-44c0b09a23c2",
"relationship--b6346b60-499e-4160-8ef2-8f1b5feee255",
"relationship--b5733a3b-2faa-4497-b705-5d8d48d78789",
"relationship--c6a2351e-7d11-46a4-883c-739a2a580330",
"relationship--c0cf4dcc-43a8-4d7f-a77a-86c60280dcec",
"relationship--3baf7edd-9313-4b85-ad23-f85e373caff3",
"relationship--31906b01-b199-45f0-b345-cedb88811cd8",
"relationship--b6f3527b-ee50-4917-8942-64734c7b53e5",
"relationship--bf103b21-07d0-412d-943b-0a66d126e4d4",
"relationship--9d685052-8270-478c-86f1-04e6fef7d691",
"relationship--9f6dd9ef-22e2-4cc3-a1c3-5e11c3125705",
"relationship--34e09740-abe1-45fc-a7bf-9fb659d2f1f7",
"relationship--06bd215f-f162-41ef-b644-27ed339a94c5",
"relationship--db70f7e9-75a6-44cd-9bd5-29ef2fd08266",
"relationship--564457c2-5fc6-4f96-9783-6c8e8ef6d2cc",
"relationship--3ce6ead5-6a9f-4eee-ada1-51acbe9a4862",
"relationship--d0eb2c12-61f9-48e3-b744-ad0bed9a38f9",
"relationship--e5c23db1-0314-4f4a-9a9a-eefe4e729947",
"relationship--fd9f0a7c-3efa-459f-bbf2-6bc31d90f109",
"relationship--5d9f6298-d7ba-4b2f-a6f0-a3bfcbbc8ce1",
"relationship--8c9e89b7-bae6-4b7d-bff3-21ed7f3e2879",
"relationship--42e9991f-7c59-41f2-96e1-057921012c19",
"relationship--484fbcff-c1f8-4f75-a25e-bd7a60526b37",
"relationship--b1592040-77fe-4050-aec8-cbf6f83c93cb",
"relationship--372d3749-6dd2-478d-bea8-67f7388f3a6d",
"relationship--b81d3c04-8a2c-4db7-93b1-841a15858ebe",
"relationship--3e339365-cb67-4e68-860f-0b25cb557e8f",
"relationship--53ff67d1-6476-4572-9454-c3e11d9db85b",
"relationship--08a20169-ad91-477b-9eb6-695bae610ee0",
"relationship--997d35da-94a7-4e10-ac08-2e3a52308a8d",
"relationship--fe2260d4-c7f8-4c88-9542-a57119fa1b09",
"relationship--b138abf6-2b8a-42b8-a294-cdbf9796a868",
"relationship--63a45717-0a40-447e-86d6-643846c96554",
"relationship--a3da35c0-f4ac-473c-bf9d-c9b5dc07182b",
"relationship--538be560-4a9e-4405-92a8-4c6c413a61b0",
"relationship--c8bc5239-9df3-46b7-a67f-acd953974183",
"relationship--f0c0fd06-b1cd-4aad-afd4-a2e0d7b1e5af",
"relationship--81e1c0d6-7aa2-4c7b-bb4c-ad21a8b25a05",
"relationship--45b6bd60-dc74-47a0-bb7a-96bc37909ca7",
"relationship--70d293dd-1d7d-4299-83e0-3710e4b943b8",
"relationship--1cd8c66d-7a70-48a8-8e9c-2b695cb35242",
"relationship--1ebd9072-9f18-4199-bc98-240f8583c9a2",
"relationship--12a63679-d667-423a-9c9c-115bb489f6f3",
"relationship--29bd6b7d-1033-4ce1-a5ca-c9b933013fd4",
"relationship--2a6fa9b0-7e3d-4408-9e94-62970c2ddb7a",
"relationship--02a62487-b36b-4547-a715-cd75c38e3ad7",
"relationship--f5392d38-a2ab-4ec3-ad9d-944224924eee",
"relationship--00bd6704-840b-441f-acfc-2da520ef5bfa",
"relationship--f8f86ef2-cd39-46fd-9922-d95ddb9b71c8",
"relationship--77fa888a-e70b-47c5-be89-0f2d82d71d46",
"relationship--669fec85-23a8-4913-8394-3dbce54b656e",
"relationship--9ef291f9-35f0-4838-8aba-e15e36c76359",
"relationship--3e51cd24-3622-42fd-bb7f-dfed4d81ffe3",
"relationship--ff6fbe26-c597-4e53-b427-8840c5d9d779",
"relationship--fc1d585e-7309-40ef-9e88-16b71bd77876",
"relationship--8f4c9880-8b3d-4e0a-a182-06fafb44f83f",
"relationship--0dfc2e06-a9c1-42e5-984f-f8d5d04456ba",
"relationship--66b43c59-8ee0-49e8-bfa6-28dbb3c7afc4",
"relationship--153a5fc4-da17-4dcd-bf82-92f5a6ce7f37",
"relationship--f8195b7b-0543-4d8c-8653-81e6bf74214d",
"relationship--987dbc60-7d73-46c9-925e-01e9f715a2ec",
"relationship--1aec5e72-4309-471a-955f-1dbb9af4c924",
"relationship--623755d3-0e29-473b-ba24-2a19d1e75b0f",
"relationship--453ba2fd-8e0a-42c8-bcf3-f7d767dca6f5",
"relationship--a9147a36-c33e-48ee-9969-d57a7db7f20a",
"relationship--557ea24b-2484-429f-a430-38f7ff4efffa",
"relationship--194b31a2-bc0f-4fc2-af13-f23d4713865f",
"relationship--2a185977-9203-443a-9bf8-49aaa61bdadf",
"relationship--e5f34878-6361-4db9-9897-fffcb2bc5873",
"relationship--482dfb29-1473-463c-a775-dd23c5b47aad",
"relationship--d8e219f4-1127-4263-babc-b2b6e20e963e",
"relationship--5d57708c-a8a6-4488-9397-1b63a321804d",
"relationship--10c1676d-b605-4f94-8ade-bf63e0700196",
"relationship--1b8a05e5-3fa6-4805-8d0f-7a7d7e87c67a",
"relationship--43372117-b6ee-422d-be42-55b2d491f06b",
"relationship--c679e21b-6a98-4b51-8fe6-51ae7f8565d5",
"relationship--f3940acb-1313-4722-986b-8359c69bdc98",
"relationship--7d61b856-9cbe-4958-be10-5f36632a145d",
"relationship--e9ace9e5-37ca-47e7-9002-7d1969f64ca5",
"relationship--0b9559c4-3331-4d5d-9cf1-b2ea821897a1",
"relationship--c9ccd10d-18ce-464d-a621-4f50ac981f77",
"relationship--9f6924a8-f873-4276-9494-67d3b4a05785",
"relationship--097aa1b5-44ed-4381-8d69-005185e345c2",
"relationship--35bdbe8e-bfba-47c8-bbbf-e1970483d47e",
"relationship--ed582784-aaa5-4e48-9fe4-e348ab479279",
"relationship--745758d7-149d-45e6-87eb-5e19636c8230",
"relationship--be785d31-1314-4806-8aea-5f85d35ad98c",
"relationship--ae1f495a-aee9-4929-8303-d14e2fb70433",
"relationship--1edf158e-fb0c-43e1-93ed-821c1c25a335",
"relationship--055ec827-8dee-49e7-b7ff-c331a1b5c9cf",
"relationship--223d877c-14be-4f7b-b6f0-99016a6f286b",
"relationship--c1b685c3-5eb9-4873-afe2-a271b5e02c67",
"relationship--0902b9e5-7385-4c4e-b6ec-358b1e3a939e",
"relationship--3b850c7e-74be-4053-ba9d-888190378c4a",
"relationship--1422cb3b-4958-4587-96b4-51cd37e1093e",
"relationship--804e5ed2-5d06-4b4c-b83f-2cee6a05d020",
"relationship--606da1c2-9425-425a-a1d1-e51490cef332",
"relationship--38f38ee6-5ecd-4add-bcc1-cbf9435d47b5",
"relationship--aa56aebb-e5f0-4b0c-873c-5ea53ea55ea6",
"relationship--94fe5e4a-8e4a-4e59-8364-b229818f1e93",
"relationship--e603d08b-af99-4ee1-b9bb-9ec3f24607c5",
"relationship--839a50b4-8cd2-4098-8a88-35ce78457feb",
"relationship--a0eec833-b28d-406f-9f4b-bc5871d33b1f",
"relationship--f3c4726a-985e-4fbd-a389-ab14117295e3",
"relationship--10bc5e97-4631-4669-90cc-eedc08d65171",
"relationship--184cc6da-bcf4-458c-bcca-3a9ca0b4e479",
"relationship--ba9b5bd0-2efd-4ec4-89af-8ee1c6c0e0cc",
"relationship--d9b2bc23-1840-45f1-97c5-8abeb7929c40",
"relationship--dee79b22-9172-453e-8cc4-d6cdccbbeb41",
"relationship--340e6694-ad1c-48e1-b527-9ece446ac313",
"relationship--169c71e6-bb81-4329-8082-fd5d57a57a0d",
"relationship--aedf32b7-a9d7-4686-a934-840fb29d2ef4",
"relationship--bc04435a-02ce-4d03-b5f2-bfc59866bbe2",
"relationship--6a0e6c24-a70c-4b16-a370-22ce3e68bd04",
"relationship--da43dadc-e10a-4058-995d-bd59cde47f30",
"relationship--634098d1-80b7-49a9-9a33-b3e32703d250",
"relationship--7092d346-f181-4e93-a579-6655cdaf86d5",
"relationship--da51c9fe-c929-4a11-804c-c5ef7758787c",
"relationship--1f440787-2216-43d5-aff3-eb1279bbb636",
"relationship--8f3291d1-1842-4722-9bd3-ef8eff269230",
"relationship--9400ae0b-016d-4f61-b2f2-e31b69386634",
"relationship--acbd2348-d43d-4699-b817-b1ff531a2334",
"relationship--e93905d3-d4bc-4033-8344-d91412a8203d",
"relationship--f89ae51b-069f-4bc6-909d-1e53d5be76e9",
"relationship--af5c24c1-e337-4757-8a38-efe4c546bccd",
"relationship--8822347d-a2c5-4b98-8888-4c9df6594e19",
"relationship--e770fb66-aca7-4756-895d-9c33b9b76011",
"relationship--58634e36-d7f0-4319-8f4a-72199342e29e",
"relationship--a5efbf29-dfc8-4a05-bfe6-9b81e7ebb5df",
"relationship--811c58f4-3874-471b-be3c-5cd62367e4ca",
"relationship--4b261ab8-53a5-4b46-b90a-6fe374fde81a",
"relationship--71c9f983-cb0a-49ec-8bcb-fff134407623",
"relationship--cd33f8ed-04d6-40d1-81ad-cd102f5cf0df",
"relationship--873875a7-42a3-4952-af99-c4c35cf5a0d4",
"relationship--6a964931-ff2b-43fa-863e-ba20e229ddae",
"relationship--89d9e9f2-b2e7-4238-8b1e-dbfaf28699c6",
"relationship--c6ca8548-47bf-4466-8315-a008ac227b91",
"relationship--e1a73567-aecf-4079-a689-48018afe846b",
"relationship--51ac79bf-29f4-40b3-8b7c-4414b558a91c",
"relationship--d85d1593-9ea8-44f5-80f1-51e12751fcbc",
"relationship--6a209a9f-26dd-45d3-a3f6-70162ff0380f",
"relationship--9cf95caf-c66d-459d-86eb-3c3738c723b8",
"relationship--e7122d69-2082-4262-89bc-97e35045c333",
"relationship--7cce87e9-b3d5-49b4-a755-4fd36c395eec",
"relationship--1a0ee6ba-19d2-4558-869c-3c8626bb0e26",
"relationship--47096477-1b02-4acd-854e-a42bac91783d",
"relationship--91d0a30a-f8f5-418b-86b8-ac36c8d48844",
"relationship--97c57647-4e8f-43ef-b72a-84db62e62339",
"relationship--43c76481-d706-4ca2-9cf9-054cfda0554c"
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\"",
"type:OSINT",
"osint:lifetime=\"perpetual\"",
"osint:certainty=\"50\""
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--980017ac-8689-4856-8609-a7e93799f9a1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Termination Reason",
"x_misp_type": "text",
"x_misp_value": "Timeout"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--7835ddd1-3eca-42d1-adbe-867661488e64",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM User Domain",
"x_misp_type": "text",
"x_misp_value": "YKYD69Q"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--e3a7649e-190f-4bfa-8b1a-b316f0b85a63",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Name",
"x_misp_type": "text",
"x_misp_value": "win7_64_sp1-mso2016"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--5b3ba8d7-70c0-4252-823c-c67d07279b44",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Cybox Truncated",
"x_misp_type": "text",
"x_misp_value": "False"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--15272f14-eff1-4d57-9bfe-eb50c88dddd3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Architecture",
"x_misp_type": "text",
"x_misp_value": "x86 64-bit"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--3c2bc824-66a1-47d9-a5da-cc6bf00f3487",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Execution Successful",
"x_misp_type": "text",
"x_misp_value": "True"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--98278a38-fc12-4326-9dbf-cd4fefd3bab8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM OS",
"x_misp_type": "text",
"x_misp_value": "Windows 7"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--fda97354-4f7b-4ee0-9231-35f0b1a95e45",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Kernel Version",
"x_misp_type": "text",
"x_misp_value": "6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--aa5c6047-8e3e-4b93-9030-50c3b0f76a89",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Analysis Duration Time",
"x_misp_type": "text",
"x_misp_value": "245.909"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--d5eb49cb-82cf-425a-aaa5-867e334de8bd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\"",
"misp:to_ids=\"True\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Username",
"x_misp_type": "text",
"x_misp_value": "aETAdzjz"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"key": "HKEY_CLASSES_ROOT\\Licenses"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230",
"key": "HKEY_CLASSES_ROOT\\TypeLib"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2968c724-74e2-4077-ad10-ed897489aadf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\409"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\9"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2\\9"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2\\9\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--795c1bae-831b-4b11-b279-32138c042af0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--42636628-4a98-4515-84c4-efb048624d16",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--42636628-4a98-4515-84c4-efb048624d16"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--42636628-4a98-4515-84c4-efb048624d16",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e325f097-a49e-4bd4-8362-4281735c0279",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"key": "HKEY_CLASSES_ROOT\\Licenses\\8804558B-B773-11d1-BC3E-0000F87552E7"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"name": "\\device\\null"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--ff164482-8a8c-4cc0-82a5-52aeb66539dc"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"name": "STD_OUTPUT_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--693e271b-3966-4fb8-9787-de555149c589",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--693e271b-3966-4fb8-9787-de555149c589"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--693e271b-3966-4fb8-9787-de555149c589",
"name": "STD_INPUT_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--311d4452-d95d-4391-a29f-ebf1287efd4c"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--311d4452-d95d-4391-a29f-ebf1287efd4c",
"name": "STD_ERROR_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"key": "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\System"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Command Processor"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Command Processor"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--e1adf2b0-0fe3-4d55-810d-d22a5856138e"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"name": "conout$"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4"
],
"labels": [
"misp:type=\"mutex\"",
"misp:category=\"Artifacts dropped\""
]
},
{
"type": "mutex",
"spec_version": "2.1",
"id": "mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"name": "Global\\.net clr networking"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f33b60a8-86aa-4318-a304-95c782b1939c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell\\1\\PowerShellEngine"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell\\1"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"key": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"key": "HKEY_CURRENT_USER\\Environment"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\EventLog"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--61af2af0-272f-413d-b70a-07611f8539c3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word\\Resiliency"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"key": "HKEY_CURRENT_USER\\Software"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\11.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\11.0\\Word"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f32b6230-41b9-4926-8e41-f651f5611b32",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word\\File MRU"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109"
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\""
]
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"value": "amf-fr.org"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983"
],
"labels": [
"misp:type=\"ip-dst|port\"",
"misp:category=\"Network activity\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"dst_ref": "ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"value": "51.38.150.171"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Notepad"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32",
"key": "HKEY_CLASSES_ROOT\\.dll"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef",
"key": "HKEY_CLASSES_ROOT\\dllfile"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"key": "HKEY_CLASSES_ROOT\\dllfile\\AutoRegister"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows Script\\Features"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--03ef6074-aaea-4605-a47c-44402d680d6e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a"
],
"labels": [
"misp:type=\"ip-dst|port\"",
"misp:category=\"Network activity\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"dst_ref": "ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"value": "185.10.68.189"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"pattern": "[file:hashes.MD5 = 'efbcffc10763a287bdedfb6e892ae20c' AND file:hashes.SHA1 = '0dfe75a01e525bc599dff0c17204129b7ac3a437' AND file:hashes.SHA256 = '728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b' AND file:name = '728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b.doc']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2019-02-16T21:21:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "file"
}
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"True\""
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--35ba0997-d509-4f32-9b8b-e26af9b9efbc"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--4713618f-9e55-4689-b548-3ee03de3f18e",
"pid": 2264,
"parent_ref": "process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"pid": 924
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--e5ca629c-eb2e-4666-ba6a-1d06d033f257"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a7157e4e-92f0-46f4-9527-0740de387c48",
"pid": 2496,
"parent_ref": "process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"pid": 2264
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--c9b962ff-144f-4eff-8505-627768660ed0",
"process--f3c12178-5032-4529-b970-b8bd2290b550"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c9b962ff-144f-4eff-8505-627768660ed0",
"pid": 2520,
"parent_ref": "process--f3c12178-5032-4529-b970-b8bd2290b550",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--f3c12178-5032-4529-b970-b8bd2290b550",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:13.000Z",
"modified": "2019-02-16T21:18:13.000Z",
"first_observed": "2019-02-16T21:18:13Z",
"last_observed": "2019-02-16T21:18:13Z",
"number_observed": 1,
"object_refs": [
"process--34614f0f-6f30-45fd-b710-ed9547534527",
"process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--34614f0f-6f30-45fd-b710-ed9547534527",
"pid": 2776,
"parent_ref": "process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"pid": 2520
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:13.000Z",
"modified": "2019-02-16T21:18:13.000Z",
"first_observed": "2019-02-16T21:18:13Z",
"last_observed": "2019-02-16T21:18:13Z",
"number_observed": 1,
"object_refs": [
"process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--bce67245-fb5d-49a8-9f94-d57a683b6523"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"pid": 2792,
"parent_ref": "process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--088f1799-557c-46ea-b729-5b45dba25897"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"pid": 2800,
"parent_ref": "process--088f1799-557c-46ea-b729-5b45dba25897",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--088f1799-557c-46ea-b729-5b45dba25897",
"pid": 2792
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--63808d45-2ef1-4073-8c92-b64a72630901"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"pid": 2808,
"parent_ref": "process--63808d45-2ef1-4073-8c92-b64a72630901",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--63808d45-2ef1-4073-8c92-b64a72630901",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--d6b05a77-7647-4707-ab8f-09595e5c01a8"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"pid": 2816,
"parent_ref": "process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"pid": 2920,
"parent_ref": "process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"pid": 2816
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--9a3db6fc-d402-411a-8c03-293adbf890db"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"pid": 2992,
"parent_ref": "process--9a3db6fc-d402-411a-8c03-293adbf890db",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9a3db6fc-d402-411a-8c03-293adbf890db",
"pid": 2776
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--3dde9650-9c02-4776-b668-857f2e5f6994"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"pid": 3048,
"parent_ref": "process--3dde9650-9c02-4776-b668-857f2e5f6994",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--3dde9650-9c02-4776-b668-857f2e5f6994",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"pid": 2064,
"parent_ref": "process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"pid": 3048
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--28220896-936f-4bf9-809f-9481312103af"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"pid": 1400,
"parent_ref": "process--28220896-936f-4bf9-809f-9481312103af",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--28220896-936f-4bf9-809f-9481312103af",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--e52795d0-d993-4608-b353-bb8c5e013aef"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"pid": 1652,
"parent_ref": "process--e52795d0-d993-4608-b353-bb8c5e013aef",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e52795d0-d993-4608-b353-bb8c5e013aef",
"pid": 1400
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7130a770-0975-49c8-86ff-a9a719a229cf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--690575e6-11f0-420b-b0dc-6338dcb12cc9"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--7130a770-0975-49c8-86ff-a9a719a229cf",
"pid": 872,
"parent_ref": "process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:15.000Z",
"modified": "2019-02-16T21:18:15.000Z",
"first_observed": "2019-02-16T21:18:15Z",
"last_observed": "2019-02-16T21:18:15Z",
"number_observed": 1,
"object_refs": [
"process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--148177b0-6c6e-454b-bf64-719db4ef657e"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"pid": 528,
"parent_ref": "process--148177b0-6c6e-454b-bf64-719db4ef657e",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--148177b0-6c6e-454b-bf64-719db4ef657e",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:15.000Z",
"modified": "2019-02-16T21:18:15.000Z",
"first_observed": "2019-02-16T21:18:15Z",
"last_observed": "2019-02-16T21:18:15Z",
"number_observed": 1,
"object_refs": [
"process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--71b7c29b-fd39-41ce-857c-eb07b612e0c6"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"pid": 1888,
"parent_ref": "process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"pid": 528
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--cf003b7c-2185-4d05-85d0-af3f1168ae0a"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"pid": 2336,
"parent_ref": "process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"pid": 2064
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--c1d0b21c-30b9-49f2-b772-b0c68df78108"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"pid": 2356,
"parent_ref": "process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--c8faa126-3558-4a2a-bf51-1d664fb2318f"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"pid": 2504,
"parent_ref": "process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"pid": 2356
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--775972eb-d8fa-4cdd-8897-02cf028de937"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"pid": 2724,
"parent_ref": "process--775972eb-d8fa-4cdd-8897-02cf028de937",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--775972eb-d8fa-4cdd-8897-02cf028de937",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--fe28b1c2-8207-4769-9afa-dca8428aaac1"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"pid": 2744,
"parent_ref": "process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"pid": 2724
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"pid": 3008,
"parent_ref": "process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--db9955be-40b0-47b0-9e49-6345daed7651"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"pid": 3040,
"parent_ref": "process--db9955be-40b0-47b0-9e49-6345daed7651",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--db9955be-40b0-47b0-9e49-6345daed7651",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--c49ca006-65cd-4790-b102-f08ed67bb796"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"pid": 1484,
"parent_ref": "process--c49ca006-65cd-4790-b102-f08ed67bb796",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c49ca006-65cd-4790-b102-f08ed67bb796",
"pid": 3040
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--248da2ce-03f8-47fb-b4a0-07321377590f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--248da2ce-03f8-47fb-b4a0-07321377590f",
"directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--248da2ce-03f8-47fb-b4a0-07321377590f",
"name": "Users\\aETAdzjz\\AppData\\Roaming\\N9OO5pxpBYkU.bat",
"parent_directory_ref": "directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"x_misp_fullpath": "%APPDATA%\\N9OO5pxpBYkU.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"path": "Users\\aETAdzjz\\AppData\\Roaming\\N9OO5pxpBYkU.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a2907899-5858-4892-a2a3-3018be097ef4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4",
"key": "HKCU\\Software\\Microsoft\\Notepad",
"values": [
{
"name": "aETAdzjz",
"data": "qE8zByJzpkyD",
"data_type": "REG_SZ"
}
],
"x_misp_hive": "INVALID"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"name": "users\\aetadzjz\\appdata\\roaming\\n9oo5pxpbyku.bat",
"parent_directory_ref": "directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"x_misp_fullpath": "%APPDATA%\\n9oo5pxpbyku.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"path": "users\\aetadzjz\\appdata\\roaming\\n9oo5pxpbyku.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"directory--aca6749e-5eb0-441e-9d54-9aca74306faf"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--eb012044-6124-4b96-8c56-690824570580",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"network-traffic--eb012044-6124-4b96-8c56-690824570580",
"ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184"
],
"labels": [
"misp:name=\"network-socket\"",
"misp:meta-category=\"network\"",
"misp:to_ids=\"False\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--eb012044-6124-4b96-8c56-690824570580",
"dst_ref": "ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"value": "51.38.150.171"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"directory--a547f901-da10-4320-95af-721573374741"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--a547f901-da10-4320-95af-721573374741",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--a547f901-da10-4320-95af-721573374741",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"directory--af05c737-cd65-4160-8063-2fc38fbceabf"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b90ef13c-4165-4108-adc3-53234995361a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191"
],
"labels": [
"misp:name=\"network-socket\"",
"misp:meta-category=\"network\"",
"misp:to_ids=\"False\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"dst_ref": "ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"value": "185.10.68.189"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"directory--b63e2178-6d20-4316-afdb-6a18c0bab7de"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"name": "users\\aetadzjz\\appdata\\roaming\\temp.txt",
"parent_directory_ref": "directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"x_misp_fullpath": "%APPDATA%\\temp.txt"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"path": "users\\aetadzjz\\appdata\\roaming\\temp.txt"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"directory--16bc776f-0c26-4112-a0e9-7492e9724007"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"name": "users\\aetadzjz\\appdata\\roaming\\7cixmlowr4y2f.bat",
"parent_directory_ref": "directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"x_misp_fullpath": "%APPDATA%\\7cixmlowr4y2f.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"path": "users\\aetadzjz\\appdata\\roaming\\7cixmlowr4y2f.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"directory--57f9a523-db11-4180-b26a-bd45307f0e97"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9521bc93-04e4-4844-9666-a0659854c7d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--9521bc93-04e4-4844-9666-a0659854c7d7",
"directory--92fffe01-16b0-45bf-969f-bb9169198d40"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9521bc93-04e4-4844-9666-a0659854c7d7",
"name": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc",
"parent_directory_ref": "directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"x_misp_fullpath": "%TEMP%\\d1.doc"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"path": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--26856757-3649-4363-b5a9-68030b721470",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--26856757-3649-4363-b5a9-68030b721470",
"directory--556e5880-58e5-40cf-95a3-04a38f6d7716"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--26856757-3649-4363-b5a9-68030b721470",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"directory--4dfd289f-edd3-448c-ba77-da4d5c93f028"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"directory--928c938a-131a-4010-9af1-5befa7621de1"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"name": "users\\aetadzjz\\appdata\\roaming\\temp.txt",
"parent_directory_ref": "directory--928c938a-131a-4010-9af1-5befa7621de1",
"x_misp_fullpath": "%APPDATA%\\temp.txt"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--928c938a-131a-4010-9af1-5befa7621de1",
"path": "users\\aetadzjz\\appdata\\roaming\\temp.txt"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"name": "users\\aetadzjz\\appdata\\roaming\\zxtlzequ7lyb.bat",
"parent_directory_ref": "directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"x_misp_fullpath": "%APPDATA%\\zxtlzequ7lyb.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"path": "users\\aetadzjz\\appdata\\roaming\\zxtlzequ7lyb.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"directory--760db7a8-5589-44f4-998a-ffe84ee18857"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"name": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc",
"parent_directory_ref": "directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"x_misp_fullpath": "%TEMP%\\d1.doc"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"path": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"directory--4faf9bac-d493-44e6-ab93-d8214b23f26f"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"directory--8587bf98-0811-4078-8e1d-1c633b088f05"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8e656cc6-482e-4952-869a-6cba4d726f83",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--6f35cd0b-d6ac-44f0-919b-80a383c946ef",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"labels": [
"misp:name=\"passive-dns\"",
"misp:meta-category=\"network\""
],
"x_misp_attributes": [
{
"type": "text",
"object_relation": "rrname",
"value": "amf-fr.org",
"category": "Other",
"uuid": "2d024c94-8f4a-47fe-94fb-fb4431bb1389"
},
{
"type": "text",
"object_relation": "rdata",
"value": "51.38.150.171",
"category": "Other",
"uuid": "3237e515-6140-472e-8a40-93f356d7b187"
},
{
"type": "text",
"object_relation": "rrtype",
"value": "A",
"category": "Other",
"uuid": "480b18ce-e416-4a1d-8af4-01acd3667f93"
}
],
"x_misp_meta_category": "network",
"x_misp_name": "passive-dns"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--5c687e2a-e898-40f8-b69b-4bb402de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"labels": [
"misp:name=\"original-imported-file\"",
"misp:meta-category=\"file\""
],
"x_misp_attributes": [
{
"type": "attachment",
"object_relation": "imported-sample",
"value": "stix-report.xml",
"category": "External analysis",
"uuid": "5c687e2a-45e8-4d61-9912-425602de0b81",
"data": "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
},
{
"type": "text",
"object_relation": "format",
"value": "STIX 1.1",
"category": "Other",
"uuid": "5c687e2a-1d24-4cb3-b539-4a1402de0b81"
}
],
"x_misp_meta_category": "file",
"x_misp_name": "original-imported-file"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"labels": [
"misp:name=\"virustotal-report\"",
"misp:meta-category=\"misc\""
],
"x_misp_attributes": [
{
"type": "datetime",
"object_relation": "last-submission",
"value": "2019-02-15T11:14:58",
"category": "Other",
"uuid": "eb90d5c1-8be2-4876-8aaf-d90365018ed2"
},
{
"type": "link",
"object_relation": "permalink",
"value": "https://www.virustotal.com/file/728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b/analysis/1550229298/",
"category": "External analysis",
"uuid": "900a1158-f094-4221-b1a3-b8b07240c9f6"
},
{
"type": "text",
"object_relation": "detection-ratio",
"value": "33/59",
"category": "Other",
"uuid": "965ad42b-6e53-44b7-82ed-b3642c077ea9"
}
],
"x_misp_meta_category": "misc",
"x_misp_name": "virustotal-report"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fded805a-4e56-4982-ae96-3394b78501f6",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "analysed-with",
2023-06-14 19:31:25 +02:00
"source_ref": "indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"target_ref": "x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0ce72b8a-1a31-4279-967c-8ddded94a474",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2bd8d608-9f4a-4a99-9658-8a4afeec0688",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--05422814-1472-4617-b713-0d87211716d6",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--248da2ce-03f8-47fb-b4a0-07321377590f"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7f52f06d-a346-4060-b9b2-9bbe42d209ab",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "modified-properties-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--a2907899-5858-4892-a2a3-3018be097ef4"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2bd3366e-19f6-41db-bf7b-d3eafa776d10",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--338c3abf-1b7b-4c10-b39c-779deccd6f5e",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3a5c184a-43f2-43da-be9b-0931d5769bb2",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--2968c724-74e2-4077-ad10-ed897489aadf"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c30eb200-44b3-4cca-9c04-4ff251667a80",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9ff19b83-ff4f-41d0-b425-d2d31496b1c8",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f257b42-f389-492a-a4b5-df236fc40e9c",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--26ad04d1-46c4-460e-99ba-f557ef7ea2d9",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ee036c24-c723-4f67-bbf4-1a05450660a0",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2078850a-0396-4395-8092-2ff08a59f33c",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a5116a05-7e8d-4362-8ecd-2628b464ac09",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4cfeb21b-16fb-44ae-ac43-c0ab350a152c",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--84df4a85-a775-4f5e-921d-a7994ac11993",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--00fb8a0a-84ec-41d2-a4fb-98ada29d02f7",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--009b00bd-8dbc-40e8-9244-8ddfc80cc8a2",
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--795c1bae-831b-4b11-b279-32138c042af0"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ab49adf3-764c-43f4-b88d-f64675b7702d",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--42636628-4a98-4515-84c4-efb048624d16"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b2abde21-5e73-428f-873c-19fd74735079",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--e325f097-a49e-4bd4-8362-4281735c0279"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7546b3dd-eb44-4c51-a258-ee2559182a10",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--64d85e8b-51c8-43fb-8058-ae0b6efdcacc",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e621beb8-4880-4346-8906-ac845e5c3041",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a57d3022-837c-439f-80c3-c9139fc34f77",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--941de75b-7aa4-443d-b6c3-d3fa976575f9",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a63036bf-1194-45d0-b12a-284d9c142efe",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1daa95b5-a80e-47bb-9d9e-1f8479cbc8c8",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--34352ba0-d840-4ddf-a3e6-8538603694c0",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c46b062e-9ccc-4e31-9add-44c0b09a23c2",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b6346b60-499e-4160-8ef2-8f1b5feee255",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b5733a3b-2faa-4497-b705-5d8d48d78789",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c6a2351e-7d11-46a4-883c-739a2a580330",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "deleted",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c0cf4dcc-43a8-4d7f-a77a-86c60280dcec",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3baf7edd-9313-4b85-ad23-f85e373caff3",
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--31906b01-b199-45f0-b345-cedb88811cd8",
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--693e271b-3966-4fb8-9787-de555149c589"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b6f3527b-ee50-4917-8942-64734c7b53e5",
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bf103b21-07d0-412d-943b-0a66d126e4d4",
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9d685052-8270-478c-86f1-04e6fef7d691",
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f6dd9ef-22e2-4cc3-a1c3-5e11c3125705",
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--34e09740-abe1-45fc-a7bf-9fb659d2f1f7",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--06bd215f-f162-41ef-b644-27ed339a94c5",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--db70f7e9-75a6-44cd-9bd5-29ef2fd08266",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--564457c2-5fc6-4f96-9783-6c8e8ef6d2cc",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3ce6ead5-6a9f-4eee-ada1-51acbe9a4862",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d0eb2c12-61f9-48e3-b744-ad0bed9a38f9",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e5c23db1-0314-4f4a-9a9a-eefe4e729947",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fd9f0a7c-3efa-459f-bbf2-6bc31d90f109",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5d9f6298-d7ba-4b2f-a6f0-a3bfcbbc8ce1",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8c9e89b7-bae6-4b7d-bff3-21ed7f3e2879",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--42e9991f-7c59-41f2-96e1-057921012c19",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--484fbcff-c1f8-4f75-a25e-bd7a60526b37",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f33b60a8-86aa-4318-a304-95c782b1939c"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b1592040-77fe-4050-aec8-cbf6f83c93cb",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--372d3749-6dd2-478d-bea8-67f7388f3a6d",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b81d3c04-8a2c-4db7-93b1-841a15858ebe",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--61af2af0-272f-413d-b70a-07611f8539c3"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3e339365-cb67-4e68-860f-0b25cb557e8f",
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--53ff67d1-6476-4572-9454-c3e11d9db85b",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--08a20169-ad91-477b-9eb6-695bae610ee0",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--997d35da-94a7-4e10-ac08-2e3a52308a8d",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fe2260d4-c7f8-4c88-9542-a57119fa1b09",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b138abf6-2b8a-42b8-a294-cdbf9796a868",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--63a45717-0a40-447e-86d6-643846c96554",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a3da35c0-f4ac-473c-bf9d-c9b5dc07182b",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--538be560-4a9e-4405-92a8-4c6c413a61b0",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c8bc5239-9df3-46b7-a67f-acd953974183",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f32b6230-41b9-4926-8e41-f651f5611b32"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f0c0fd06-b1cd-4aad-afd4-a2e0d7b1e5af",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--81e1c0d6-7aa2-4c7b-bb4c-ad21a8b25a05",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--45b6bd60-dc74-47a0-bb7a-96bc37909ca7",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "read-from",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--70d293dd-1d7d-4299-83e0-3710e4b943b8",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "connected-to",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--eb012044-6124-4b96-8c56-690824570580"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1cd8c66d-7a70-48a8-8e9c-2b695cb35242",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1ebd9072-9f18-4199-bc98-240f8583c9a2",
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--12a63679-d667-423a-9c9c-115bb489f6f3",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--29bd6b7d-1033-4ce1-a5ca-c9b933013fd4",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2a6fa9b0-7e3d-4408-9e94-62970c2ddb7a",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--02a62487-b36b-4547-a715-cd75c38e3ad7",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f5392d38-a2ab-4ec3-ad9d-944224924eee",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--00bd6704-840b-441f-acfc-2da520ef5bfa",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f8f86ef2-cd39-46fd-9922-d95ddb9b71c8",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--77fa888a-e70b-47c5-be89-0f2d82d71d46",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--669fec85-23a8-4913-8394-3dbce54b656e",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9ef291f9-35f0-4838-8aba-e15e36c76359",
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3e51cd24-3622-42fd-bb7f-dfed4d81ffe3",
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ff6fbe26-c597-4e53-b427-8840c5d9d779",
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fc1d585e-7309-40ef-9e88-16b71bd77876",
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8f4c9880-8b3d-4e0a-a182-06fafb44f83f",
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0dfc2e06-a9c1-42e5-984f-f8d5d04456ba",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--66b43c59-8ee0-49e8-bfa6-28dbb3c7afc4",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--153a5fc4-da17-4dcd-bf82-92f5a6ce7f37",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f8195b7b-0543-4d8c-8653-81e6bf74214d",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--987dbc60-7d73-46c9-925e-01e9f715a2ec",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1aec5e72-4309-471a-955f-1dbb9af4c924",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--623755d3-0e29-473b-ba24-2a19d1e75b0f",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--453ba2fd-8e0a-42c8-bcf3-f7d767dca6f5",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a9147a36-c33e-48ee-9969-d57a7db7f20a",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--03ef6074-aaea-4605-a47c-44402d680d6e"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--557ea24b-2484-429f-a430-38f7ff4efffa",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--194b31a2-bc0f-4fc2-af13-f23d4713865f",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--b90ef13c-4165-4108-adc3-53234995361a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2a185977-9203-443a-9bf8-49aaa61bdadf",
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "connected-to",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e5f34878-6361-4db9-9897-fffcb2bc5873",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--482dfb29-1473-463c-a775-dd23c5b47aad",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d8e219f4-1127-4263-babc-b2b6e20e963e",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--7130a770-0975-49c8-86ff-a9a719a229cf"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5d57708c-a8a6-4488-9397-1b63a321804d",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--10c1676d-b605-4f94-8ade-bf63e0700196",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1b8a05e5-3fa6-4805-8d0f-7a7d7e87c67a",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--43372117-b6ee-422d-be42-55b2d491f06b",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "deleted",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c679e21b-6a98-4b51-8fe6-51ae7f8565d5",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "deleted",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f3940acb-1313-4722-986b-8359c69bdc98",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7d61b856-9cbe-4958-be10-5f36632a145d",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e9ace9e5-37ca-47e7-9002-7d1969f64ca5",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0b9559c4-3331-4d5d-9cf1-b2ea821897a1",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c9ccd10d-18ce-464d-a621-4f50ac981f77",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f6924a8-f873-4276-9494-67d3b4a05785",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--097aa1b5-44ed-4381-8d69-005185e345c2",
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--9521bc93-04e4-4844-9666-a0659854c7d7"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--35bdbe8e-bfba-47c8-bbbf-e1970483d47e",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ed582784-aaa5-4e48-9fe4-e348ab479279",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--745758d7-149d-45e6-87eb-5e19636c8230",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--be785d31-1314-4806-8aea-5f85d35ad98c",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ae1f495a-aee9-4929-8303-d14e2fb70433",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1edf158e-fb0c-43e1-93ed-821c1c25a335",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--055ec827-8dee-49e7-b7ff-c331a1b5c9cf",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--223d877c-14be-4f7b-b6f0-99016a6f286b",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c1b685c3-5eb9-4873-afe2-a271b5e02c67",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0902b9e5-7385-4c4e-b6ec-358b1e3a939e",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3b850c7e-74be-4053-ba9d-888190378c4a",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1422cb3b-4958-4587-96b4-51cd37e1093e",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--804e5ed2-5d06-4b4c-b83f-2cee6a05d020",
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--606da1c2-9425-425a-a1d1-e51490cef332",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--38f38ee6-5ecd-4add-bcc1-cbf9435d47b5",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aa56aebb-e5f0-4b0c-873c-5ea53ea55ea6",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--94fe5e4a-8e4a-4e59-8364-b229818f1e93",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e603d08b-af99-4ee1-b9bb-9ec3f24607c5",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--839a50b4-8cd2-4098-8a88-35ce78457feb",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a0eec833-b28d-406f-9f4b-bc5871d33b1f",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--26856757-3649-4363-b5a9-68030b721470"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f3c4726a-985e-4fbd-a389-ab14117295e3",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--10bc5e97-4631-4669-90cc-eedc08d65171",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--184cc6da-bcf4-458c-bcca-3a9ca0b4e479",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ba9b5bd0-2efd-4ec4-89af-8ee1c6c0e0cc",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "connected-to",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d9b2bc23-1840-45f1-97c5-8abeb7929c40",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--dee79b22-9172-453e-8cc4-d6cdccbbeb41",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--340e6694-ad1c-48e1-b527-9ece446ac313",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--169c71e6-bb81-4329-8082-fd5d57a57a0d",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aedf32b7-a9d7-4686-a934-840fb29d2ef4",
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bc04435a-02ce-4d03-b5f2-bfc59866bbe2",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6a0e6c24-a70c-4b16-a370-22ce3e68bd04",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "deleted",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--da43dadc-e10a-4058-995d-bd59cde47f30",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "deleted",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--634098d1-80b7-49a9-9a33-b3e32703d250",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7092d346-f181-4e93-a579-6655cdaf86d5",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--da51c9fe-c929-4a11-804c-c5ef7758787c",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1f440787-2216-43d5-aff3-eb1279bbb636",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8f3291d1-1842-4722-9bd3-ef8eff269230",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9400ae0b-016d-4f61-b2f2-e31b69386634",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--acbd2348-d43d-4699-b817-b1ff531a2334",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e93905d3-d4bc-4033-8344-d91412a8203d",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f89ae51b-069f-4bc6-909d-1e53d5be76e9",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--af5c24c1-e337-4757-8a38-efe4c546bccd",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8822347d-a2c5-4b98-8888-4c9df6594e19",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e770fb66-aca7-4756-895d-9c33b9b76011",
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--58634e36-d7f0-4319-8f4a-72199342e29e",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a5efbf29-dfc8-4a05-bfe6-9b81e7ebb5df",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--811c58f4-3874-471b-be3c-5cd62367e4ca",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4b261ab8-53a5-4b46-b90a-6fe374fde81a",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--71c9f983-cb0a-49ec-8bcb-fff134407623",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cd33f8ed-04d6-40d1-81ad-cd102f5cf0df",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "child-of",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--873875a7-42a3-4952-af99-c4c35cf5a0d4",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6a964931-ff2b-43fa-863e-ba20e229ddae",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--89d9e9f2-b2e7-4238-8b1e-dbfaf28699c6",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c6ca8548-47bf-4466-8315-a008ac227b91",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e1a73567-aecf-4079-a689-48018afe846b",
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--51ac79bf-29f4-40b3-8b7c-4414b558a91c",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d85d1593-9ea8-44f5-80f1-51e12751fcbc",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "created",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6a209a9f-26dd-45d3-a3f6-70162ff0380f",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9cf95caf-c66d-459d-86eb-3c3738c723b8",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e7122d69-2082-4262-89bc-97e35045c333",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7cce87e9-b3d5-49b4-a755-4fd36c395eec",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1a0ee6ba-19d2-4558-869c-3c8626bb0e26",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--47096477-1b02-4acd-854e-a42bac91783d",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "opened",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--8e656cc6-482e-4952-869a-6cba4d726f83"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--91d0a30a-f8f5-418b-86b8-ac36c8d48844",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "connected-to",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--97c57647-4e8f-43ef-b72a-84db62e62339",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "contains",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--eb012044-6124-4b96-8c56-690824570580",
"target_ref": "observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983"
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--43c76481-d706-4ca2-9cf9-054cfda0554c",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
2023-04-21 15:25:09 +02:00
"relationship_type": "contains",
2023-06-14 19:31:25 +02:00
"source_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"target_ref": "observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a"
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
}
2023-04-21 15:25:09 +02:00
]
}