misp-circl-feed/feeds/circl/stix-2.1/5c687e12-522c-41f4-a498-486d02de0b81.json

5995 lines
828 KiB
JSON
Raw Normal View History

2023-04-21 14:44:17 +00:00
{
"type": "bundle",
"id": "bundle--5c687e12-522c-41f4-a498-486d02de0b81",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"name": "CIRCL",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--5c687e12-522c-41f4-a498-486d02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"name": "VMRay Analyzer Report for Sample #252574 (related amf-fr.org)",
"published": "2019-02-16T21:26:49Z",
"object_refs": [
"x-misp-attribute--980017ac-8689-4856-8609-a7e93799f9a1",
"x-misp-attribute--7835ddd1-3eca-42d1-adbe-867661488e64",
"x-misp-attribute--e3a7649e-190f-4bfa-8b1a-b316f0b85a63",
"x-misp-attribute--5b3ba8d7-70c0-4252-823c-c67d07279b44",
"x-misp-attribute--15272f14-eff1-4d57-9bfe-eb50c88dddd3",
"x-misp-attribute--3c2bc824-66a1-47d9-a5da-cc6bf00f3487",
"x-misp-attribute--98278a38-fc12-4326-9dbf-cd4fefd3bab8",
"x-misp-attribute--fda97354-4f7b-4ee0-9231-35f0b1a95e45",
"x-misp-attribute--aa5c6047-8e3e-4b93-9030-50c3b0f76a89",
"x-misp-attribute--d5eb49cb-82cf-425a-aaa5-867e334de8bd",
"observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230",
"windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230",
"observed-data--2968c724-74e2-4077-ad10-ed897489aadf",
"windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf",
"observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b",
"windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b",
"observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"observed-data--795c1bae-831b-4b11-b279-32138c042af0",
"windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0",
"observed-data--42636628-4a98-4515-84c4-efb048624d16",
"windows-registry-key--42636628-4a98-4515-84c4-efb048624d16",
"observed-data--e325f097-a49e-4bd4-8362-4281735c0279",
"windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279",
"observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42",
"windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42",
"observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"file--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"observed-data--693e271b-3966-4fb8-9787-de555149c589",
"file--693e271b-3966-4fb8-9787-de555149c589",
"observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c",
"file--311d4452-d95d-4391-a29f-ebf1287efd4c",
"observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"file--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"observed-data--f33b60a8-86aa-4318-a304-95c782b1939c",
"windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c",
"observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017",
"windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017",
"observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041",
"windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041",
"observed-data--61af2af0-272f-413d-b70a-07611f8539c3",
"windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3",
"observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db",
"windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db",
"observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"observed-data--f32b6230-41b9-4926-8e41-f651f5611b32",
"windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32",
"observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983",
"network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"observed-data--259b1821-d418-4510-aa04-b59e92dd3820",
"windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820",
"observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab",
"windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab",
"observed-data--23e7606b-8811-45df-b726-dabedcfcdd32",
"windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32",
"observed-data--1f697f8c-84b1-4339-9906-1142cf955bef",
"windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef",
"observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"observed-data--97492285-8474-4867-ae94-ec61a5fee43d",
"windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d",
"observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa",
"windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa",
"observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"observed-data--03ef6074-aaea-4605-a47c-44402d680d6e",
"windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e",
"observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba",
"windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba",
"observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"process--c9b962ff-144f-4eff-8505-627768660ed0",
"process--f3c12178-5032-4529-b970-b8bd2290b550",
"observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"process--34614f0f-6f30-45fd-b710-ed9547534527",
"process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--088f1799-557c-46ea-b729-5b45dba25897",
"observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--63808d45-2ef1-4073-8c92-b64a72630901",
"observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--9a3db6fc-d402-411a-8c03-293adbf890db",
"observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--3dde9650-9c02-4776-b668-857f2e5f6994",
"observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--28220896-936f-4bf9-809f-9481312103af",
"observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--e52795d0-d993-4608-b353-bb8c5e013aef",
"observed-data--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--148177b0-6c6e-454b-bf64-719db4ef657e",
"observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--775972eb-d8fa-4cdd-8897-02cf028de937",
"observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--db9955be-40b0-47b0-9e49-6345daed7651",
"observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--c49ca006-65cd-4790-b102-f08ed67bb796",
"observed-data--248da2ce-03f8-47fb-b4a0-07321377590f",
"file--248da2ce-03f8-47fb-b4a0-07321377590f",
"directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"observed-data--a2907899-5858-4892-a2a3-3018be097ef4",
"windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4",
"observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe",
"file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194",
"windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194",
"observed-data--eb012044-6124-4b96-8c56-690824570580",
"network-traffic--eb012044-6124-4b96-8c56-690824570580",
"ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c",
"file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"directory--a547f901-da10-4320-95af-721573374741",
"observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"observed-data--b90ef13c-4165-4108-adc3-53234995361a",
"windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a",
"observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353",
"file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"observed-data--9521bc93-04e4-4844-9666-a0659854c7d7",
"file--9521bc93-04e4-4844-9666-a0659854c7d7",
"directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"observed-data--26856757-3649-4363-b5a9-68030b721470",
"file--26856757-3649-4363-b5a9-68030b721470",
"directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8",
"file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685",
"file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"directory--928c938a-131a-4010-9af1-5befa7621de1",
"observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025",
"windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025",
"observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a",
"file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"observed-data--8e656cc6-482e-4952-869a-6cba4d726f83",
"windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83",
"x-misp-object--6f35cd0b-d6ac-44f0-919b-80a383c946ef",
"x-misp-object--5c687e2a-e898-40f8-b69b-4bb402de0b81",
"x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee",
2023-05-19 09:05:37 +00:00
"relationship--1c72cd7b-5dc3-40b1-ad20-b5e2973171e4",
"relationship--80fc4d73-d442-4c84-8b76-58a9f4a7bfe1",
"relationship--56a0fd8c-bf55-451d-85b6-5f27c970a9d2",
"relationship--2764d832-fa70-4507-b1ee-15e42ba447db",
"relationship--ea17ebe0-5263-474d-91e6-16f57e76cfde",
"relationship--eaee4297-3405-44c5-802d-ef79d880f416",
"relationship--0b2d8b86-9a3f-48f9-86a6-7e9e18113b35",
"relationship--524f4b17-538e-4222-ba30-8e710bdeca35",
"relationship--4b8face5-dc54-47ac-b473-071525f7254b",
"relationship--4d13e6ac-b9c2-4a64-971b-634b4bdd86ee",
"relationship--bc5b0d67-04d6-4748-bcda-b5a2f8f000c0",
"relationship--25fd2014-3dfa-44b2-a2db-274a10e133ad",
"relationship--559e2952-8fc1-419d-aeac-5c3adba125a3",
"relationship--ab8cb617-5238-4206-8d6b-1327bd90d05d",
"relationship--93c89368-7207-425a-a859-6ee7a4185dfe",
"relationship--4fd2ea6b-9dad-4b1c-a3ff-a8b08ac16273",
"relationship--04467f9d-e78f-45e5-bd50-9b26702acd7e",
"relationship--89801e71-d9d2-4e40-861b-c6fe918d727e",
"relationship--5fd9e0bf-bda6-4104-90d4-60d30d660fda",
"relationship--89a621f1-9b46-49df-b9a6-8eab0d87263c",
"relationship--a4920310-06fa-44fe-836c-114c519fd2e8",
"relationship--1bd3f4cc-0875-47cd-9962-a37ec74ea381",
"relationship--c1577d9d-c8df-487d-bdfc-adfc26a9d3ce",
"relationship--8926413e-a019-4ccf-8251-1cb5fcd68a12",
"relationship--8f958072-6e0b-4bb7-9cdf-a7c9e042ae81",
"relationship--ff919c74-1e88-4194-b02d-0d760795e433",
"relationship--3a369a60-2727-4ef6-bca3-592cf9b87aa2",
"relationship--4a7271a4-324d-48eb-8566-6d2a88323179",
"relationship--48934860-e16d-4297-8461-8d41f0615504",
"relationship--6b18afd3-a3f6-4d49-873c-0c90220cdd19",
"relationship--8deb2f27-8557-4886-b90f-85f702dec4bd",
"relationship--e2bf978e-aa4c-47bc-a1ec-f881f962d49c",
"relationship--7fabc709-43dc-43f5-a13c-9d9c8a85e3bc",
"relationship--a7c4ccdd-693f-4fce-9fec-f3a4ccdc8869",
"relationship--4f691eb2-f432-411e-b7c3-483d642e0667",
"relationship--4ffce48d-2de1-4ee2-ae39-80a58831e9e2",
"relationship--0c5acd4b-cc49-4cb6-aa45-0fcfadee3ce7",
"relationship--e0856c1d-c7be-4634-8b73-9ff9a7357ec5",
"relationship--5cfc6426-ba25-4b02-9704-1135e347eadb",
"relationship--9e02cc21-7f52-494a-a46d-8bf8ae36779c",
"relationship--57bef18c-ebd6-480e-85b6-487494b978ed",
"relationship--4d606dc9-8937-41b0-b2cb-f9db94d5012e",
"relationship--832c42e7-946f-4a7a-b35e-b367b5e16964",
"relationship--ea2b3220-f53c-45d0-9e6d-45c362e08a8b",
"relationship--4cd358b6-215a-4921-9b86-307e8095980f",
"relationship--6ec149f8-4dc1-4239-8793-a113c614baf6",
"relationship--035cba55-9e29-481d-9ebc-0ddb0f9ea0b4",
"relationship--58467b49-f55c-403d-89ec-d22f17a4d057",
"relationship--f236a7bb-b45e-4a96-8081-798d310ff62c",
"relationship--59f2c1ca-f639-4080-90f2-07d4c8770dc0",
"relationship--8e875829-a573-4383-8952-a40fada0f16d",
"relationship--1533cc31-2fee-4fc5-89a4-5624b8ae503f",
"relationship--033df35d-36b1-4baa-966a-67bc67af3db5",
"relationship--d52b9739-8329-4d62-8a35-5d4b632f8b0e",
"relationship--184e1077-0b43-4881-9948-5d92bad4706b",
"relationship--052b3302-9774-4bdc-8bbc-7b74eefc5322",
"relationship--d025ca9d-7a4e-470f-8f5b-8fa1d7c84d4e",
"relationship--5bc3ee64-23a5-4776-abb6-fa19be20005e",
"relationship--00e28c49-d146-4e51-a2fe-51ab403d0888",
"relationship--1c1f5422-4c58-4b3b-901e-f3471af6a5b2",
"relationship--ec124a63-d439-47c2-adce-e8b119e39c83",
"relationship--194c1564-6033-4898-9ac4-9a4228e9123f",
"relationship--19958a77-588b-4446-b205-03171dc04ea1",
"relationship--a4cdb28e-3a48-4e47-ba5e-b772d560ef70",
"relationship--aefccf5f-5807-439d-910a-815f726ed5a8",
"relationship--4137b23c-27b1-4eb2-9175-9711d46ab356",
"relationship--e0378ddb-5dd2-45d4-8471-66cff9f1d090",
"relationship--10833007-1636-4af4-8ed4-8d97e4766d56",
"relationship--4c95e1f4-6644-427b-bda3-3fc075e7104c",
"relationship--f07a9052-f391-4d8f-ad3f-6173733974d8",
"relationship--40b2e90d-72ed-404f-9dae-2fd757325778",
"relationship--bb23c303-0dfd-4899-b57b-c37099c990fd",
"relationship--a139c919-709e-45cb-a6e2-3b13cffc360a",
"relationship--9d215dfd-a73c-4a5f-9d0b-ee135e916d07",
"relationship--0cbba7b5-c3d1-4176-9c1d-354dc022906c",
"relationship--c5dae647-fd5d-47ce-abc3-1d820ba9ff59",
"relationship--6dbc68e2-74ab-4df9-8826-31aeb41463c7",
"relationship--6a8adc19-cd70-467f-8d08-1d5b1dbb1a6a",
"relationship--d80c6148-c85c-4219-b2f5-c5a9a1250f51",
"relationship--51744641-da70-4ef0-8bcc-0c412d8169ed",
"relationship--f5e897a0-6c2e-40c7-87c3-3182f0acf1d0",
"relationship--0402635d-d396-4081-b61e-ac0c06d998b3",
"relationship--5f493b93-1b30-41a9-98e6-11cb42bb1224",
"relationship--99ba3f7e-2ce0-4705-9595-bf2ab226912d",
"relationship--2190361e-f7d3-4a39-b9c0-ed563943e15b",
"relationship--0b0e1872-5508-419b-b8d9-afe6128ac476",
"relationship--50d55677-c4db-475a-a041-07e607b12f13",
"relationship--8d17c7b0-b43f-49c6-8fdf-63bd5f4183f8",
"relationship--dadd7583-d90a-4ced-bfc7-b5affd599d0a",
"relationship--a8883f7e-028f-4e1f-85f7-6ceb596856fa",
"relationship--77c02d1f-ab1e-4f57-b9c4-0cb907cdb556",
"relationship--8186e7bf-65b1-407a-90a7-1c24e30fad81",
"relationship--61dedadc-aa6a-4849-9bb7-6f6257500b63",
"relationship--4c35210c-dfa6-498d-ad1e-b1071b5cb84b",
"relationship--5b5a274b-61ef-4ef1-9aaa-609ef22cc452",
"relationship--9322f578-930b-4803-b078-d2e98fb54481",
"relationship--a321e920-3922-4b48-bd64-bf23f555d3da",
"relationship--0d139c0b-6330-4c56-8878-8e390f3ab4b4",
"relationship--a4003a83-e8e4-4d0a-81bf-52e427c090b5",
"relationship--c4257b6e-cf5d-4bdc-8e2a-ca6d7cf9b369",
"relationship--188edb29-c161-44c5-8d41-a9c4693feefb",
"relationship--1d6e357e-a2e9-4fba-ad90-6046151b9c04",
"relationship--5827bfe5-0603-4d78-8ea5-b55bd894ac04",
"relationship--b9ba07e6-8aca-4e3a-875c-20598e958a73",
"relationship--a613e1f5-095f-40d3-ad83-48fb43273841",
"relationship--c173318d-c9a0-4418-9c0d-9b1cbeb004fc",
"relationship--bb198831-f653-48b0-bfb9-9b917c5b9135",
"relationship--7f5412a7-e9ee-408b-93ca-dc9488b96628",
"relationship--31352d86-d49f-4beb-bd45-a16d5caab639",
"relationship--7838d681-d59c-4bb2-aefe-74551946637e",
"relationship--82e3c9e8-db1d-44d0-927d-e95814b5b651",
"relationship--915f7e22-aa44-482f-b1f1-41839e91af6c",
"relationship--8c8df19b-f05b-4acb-ae19-1dac4453de5e",
"relationship--f10ae287-613d-40f6-9f59-b07ec2b4873f",
"relationship--bbfea89d-badc-4b46-b1fc-8f3fc0b51908",
"relationship--4c6daca0-d0c9-4b80-889a-12ed33ab7a18",
"relationship--4b706802-7db4-47f4-b9c3-8e938808e972",
"relationship--ce7187d7-648e-4eff-ac16-2645fce4c6ac",
"relationship--7fa48978-3d44-4458-81aa-085de79ce626",
"relationship--381fe606-f938-47eb-b61e-37d35c070e3e",
"relationship--d8b1a4ab-be25-473d-9c6b-20653b626da3",
"relationship--b9a71e6a-8fb5-4186-bc1a-ae1964611b60",
"relationship--5b15722c-5068-4c49-9b7b-bf97822c51bc",
"relationship--fcfc2579-f9b0-4eaa-a618-cb36a56a64e4",
"relationship--a7a9c101-5545-47d8-999d-3356088c5665",
"relationship--71c04b78-c3b0-4265-a3a4-6a7dd45cbcd6",
"relationship--adf01585-4789-43c5-a6d9-422a9f9b3087",
"relationship--bbb50636-b877-4aeb-ab0b-7ea76ecb6cb6",
"relationship--240d729d-901f-462c-8f28-9622fcc496bd",
"relationship--9a74dee1-83a1-4629-89d6-f8ed4680e700",
"relationship--afe090cc-57b5-4966-a78c-703b1c472234",
"relationship--afe7b23f-03bf-463a-b779-8e1de57f3892",
"relationship--312e25ca-075b-46fd-8237-176ead105816",
"relationship--4995b5e5-dc0a-4575-b9ee-4f7bac7fac50",
"relationship--3be6d2b0-0477-4132-a938-b5c360d92dd9",
"relationship--209d50b9-e8e4-4770-bbc4-73d63ed8ce92",
"relationship--9d705ff8-0ebb-402a-be39-0563fe4e84a4",
"relationship--b96da836-2c60-4a9a-b5b2-1b798257cce0",
"relationship--1b9ce63b-f858-4698-a651-cfa87a26e7ff",
"relationship--33821b72-d2ac-4bf3-b7fb-77284c331653",
"relationship--7fd96bd0-0130-4693-8397-b42d6be63050",
"relationship--d959617a-b5bf-44c7-a536-540609e4bae2",
"relationship--27a7e00c-6998-4f94-9ab6-197c56c3a2ea",
"relationship--e6222d44-81c1-4d0e-8f34-77e3c05fffd1",
"relationship--f2b2fe70-57f1-4f1f-94df-562c09555364",
"relationship--35f42271-ae1d-450b-8348-732f2eacc1f0",
"relationship--c92b3cd4-cba2-4ab6-a631-2d7773a127c9",
"relationship--64fc46b9-1922-40c0-adc6-44d58ec1bb56",
"relationship--c480f56a-3774-4dcf-b7b4-36f1f9acc338",
"relationship--a7d42f89-771b-48ae-a1df-9918adc06ddc",
"relationship--f0c5de96-e123-49c7-879d-5d141643b67c",
"relationship--bdff80fa-78a7-4c09-a2d2-69ee92b1a2f1",
"relationship--82d51f5b-7d64-49d8-92b3-dd69a5cdf3fd",
"relationship--1c4ebe9c-549a-4ad3-9373-527b93435e2f",
"relationship--af2f3d5e-5761-4757-9859-52309d7d86e0",
"relationship--cdf5e591-9b20-447f-be3a-23a2c32fc050",
"relationship--a5802251-e1fd-49fc-97e5-5b5ce3547b3a",
"relationship--80a56d40-7bf9-4a6f-ab6d-b5623198b003",
"relationship--b1000b7b-5c8f-49c2-a787-0dda3147d839",
"relationship--1c4da237-790b-41f3-8cbd-3c42a42c8a08",
"relationship--cb6df3b1-bc7e-4a2c-8268-f28e079054fc",
"relationship--1e1e642d-0c70-4a27-9537-d21350947c95",
"relationship--0616f17a-26e4-480f-8e01-963c5d68016a",
"relationship--0a87459b-eb50-49e5-b0e6-ac07e882e2a3",
"relationship--e61ba405-6fe9-497c-be90-98408e464315",
"relationship--4cbaea40-9fde-47bd-baa8-72be71895114",
"relationship--b4d26a37-10e0-411f-9c8a-19dd116b5d5e",
"relationship--2ad196ad-0902-4ddc-a463-731dc5076aee",
"relationship--4269b633-c9f7-4c3d-b414-0428759cde8a",
"relationship--90ecb5b9-e92e-4096-92f7-bfff98fe4fe6",
"relationship--93361a2a-f90a-4607-9af2-0b94165e0c5a",
"relationship--6354a926-4af1-4ceb-a671-cffdde8137d1",
"relationship--94572867-17c9-48b6-8a55-4762f1d5c4e9",
"relationship--297fc239-d4ff-4efb-a20a-530689eb677f",
"relationship--ffa22c26-c91e-46ea-8798-532e0c9b1eb4",
"relationship--091323f4-f5b0-463b-b9a4-f1b31064fdd5",
"relationship--0b71b5aa-790e-4ccd-87a0-a770c4011350",
"relationship--23567fe3-4d51-435b-b609-daf778c28176"
2023-04-21 14:44:17 +00:00
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\"",
"type:OSINT",
"osint:lifetime=\"perpetual\"",
"osint:certainty=\"50\""
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--980017ac-8689-4856-8609-a7e93799f9a1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Termination Reason",
"x_misp_type": "text",
"x_misp_value": "Timeout"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--7835ddd1-3eca-42d1-adbe-867661488e64",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM User Domain",
"x_misp_type": "text",
"x_misp_value": "YKYD69Q"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--e3a7649e-190f-4bfa-8b1a-b316f0b85a63",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Name",
"x_misp_type": "text",
"x_misp_value": "win7_64_sp1-mso2016"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--5b3ba8d7-70c0-4252-823c-c67d07279b44",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Cybox Truncated",
"x_misp_type": "text",
"x_misp_value": "False"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--15272f14-eff1-4d57-9bfe-eb50c88dddd3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Architecture",
"x_misp_type": "text",
"x_misp_value": "x86 64-bit"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--3c2bc824-66a1-47d9-a5da-cc6bf00f3487",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "Execution Successful",
"x_misp_type": "text",
"x_misp_value": "True"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--98278a38-fc12-4326-9dbf-cd4fefd3bab8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM OS",
"x_misp_type": "text",
"x_misp_value": "Windows 7"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--fda97354-4f7b-4ee0-9231-35f0b1a95e45",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Kernel Version",
"x_misp_type": "text",
"x_misp_value": "6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--aa5c6047-8e3e-4b93-9030-50c3b0f76a89",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Analysis Duration Time",
"x_misp_type": "text",
"x_misp_value": "245.909"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--d5eb49cb-82cf-425a-aaa5-867e334de8bd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"Other\"",
"misp:to_ids=\"True\""
],
"x_misp_category": "Other",
"x_misp_comment": "VM Username",
"x_misp_type": "text",
"x_misp_value": "aETAdzjz"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--c9a7758d-0ac7-42cc-a6c2-40791fe6899d",
"key": "HKEY_CLASSES_ROOT\\Licenses"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--fb07c709-9a1f-4e37-b483-75407bbb9230",
"key": "HKEY_CLASSES_ROOT\\TypeLib"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2968c724-74e2-4077-ad10-ed897489aadf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--2968c724-74e2-4077-ad10-ed897489aadf",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--12dea9cb-410b-4691-8b7b-083f9d47c75a",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--07e706e6-0d49-4662-8b1b-5599df36dbaf",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\409"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--9fcf4e94-d16b-4540-b69e-75fe834c4a88",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\9"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5d7889d3-396b-4ab6-a221-dee0d544bc1c",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--88b4dff4-51b1-425d-a897-55fabb69f64b",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020905-0000-0000-C000-000000000046}\\8.7\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--47554dfd-1690-4f7d-944d-fa95e510cfbc",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--8839c1e5-c3ae-4361-9d77-36ef93dee014",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--dfc2f46a-8042-49c8-8960-58f12dd86c0b",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2\\9"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ae28d749-b2ed-4147-91b3-78e2b65d02d8",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\4.2\\9\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--795c1bae-831b-4b11-b279-32138c042af0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--795c1bae-831b-4b11-b279-32138c042af0",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--42636628-4a98-4515-84c4-efb048624d16",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--42636628-4a98-4515-84c4-efb048624d16"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--42636628-4a98-4515-84c4-efb048624d16",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e325f097-a49e-4bd4-8362-4281735c0279",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:10.000Z",
"modified": "2019-02-16T21:18:10.000Z",
"first_observed": "2019-02-16T21:18:10Z",
"last_observed": "2019-02-16T21:18:10Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--e325f097-a49e-4bd4-8362-4281735c0279",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--e2e3f385-135e-4d43-a9b0-2c3f543b77ed",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--443e35c7-bed9-4736-acb7-8e27ca55d0d7",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--855e5151-6ffb-47c0-8324-e69fe2310bf1",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8\\0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--08ca55d9-a2dd-4360-b903-07e9d30e3f8a",
"key": "HKEY_CLASSES_ROOT\\TypeLib\\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\\2.8\\0\\win64"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--97f32545-5fb2-430b-b895-83b91b1a3b42",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--6f7de6d0-a260-4ba5-b58b-58c3679b32ea",
"key": "HKEY_CLASSES_ROOT\\Licenses\\8804558B-B773-11d1-BC3E-0000F87552E7"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ab0bc302-d9cf-49b7-a5d0-c794c3f25362",
"name": "\\device\\null"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--ff164482-8a8c-4cc0-82a5-52aeb66539dc"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ff164482-8a8c-4cc0-82a5-52aeb66539dc",
"name": "STD_OUTPUT_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--693e271b-3966-4fb8-9787-de555149c589",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--693e271b-3966-4fb8-9787-de555149c589"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--693e271b-3966-4fb8-9787-de555149c589",
"name": "STD_INPUT_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--311d4452-d95d-4391-a29f-ebf1287efd4c"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--311d4452-d95d-4391-a29f-ebf1287efd4c",
"name": "STD_ERROR_HANDLE"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f5229ae9-caf0-4157-abf7-21c5e6c642b9",
"key": "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\System"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--d93d30ca-8cd9-4258-9355-7c77e0de39af",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Command Processor"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ce3191d5-eecd-421e-9ac0-2a2f8c16a723",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Command Processor"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"file--e1adf2b0-0fe3-4d55-810d-d22a5856138e"
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--e1adf2b0-0fe3-4d55-810d-d22a5856138e",
"name": "conout$"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4"
],
"labels": [
"misp:type=\"mutex\"",
"misp:category=\"Artifacts dropped\""
]
},
{
"type": "mutex",
"spec_version": "2.1",
"id": "mutex--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4",
"name": "Global\\.net clr networking"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f33b60a8-86aa-4318-a304-95c782b1939c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f33b60a8-86aa-4318-a304-95c782b1939c",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell\\1\\PowerShellEngine"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--cb9ad57a-983c-43eb-910b-1dc22121c017",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a22f23cb-3d81-4686-8581-9414b0aba1e1",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--6fdfde85-4599-44ab-aafc-956860f6e6c4",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\PowerShell\\1"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--7dc2a39a-4944-49c1-891d-03c4a89752d2",
"key": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f8c2aa57-b94e-42de-aeec-0ac698fd0abe",
"key": "HKEY_CURRENT_USER\\Environment"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5c607639-ce58-4a7d-a96a-b31d0c1de7fa",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--73dd16a6-8e9b-4889-839e-2f6718a50041",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\EventLog"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--61af2af0-272f-413d-b70a-07611f8539c3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--61af2af0-272f-413d-b70a-07611f8539c3",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--0f3708a6-7579-426a-9cbb-cff51cdbd0d7",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word\\Resiliency"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--26d235e0-d8d7-4256-b82f-f9b190519b6d",
"key": "HKEY_CURRENT_USER\\Software"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f10d6026-37f9-4894-8eb3-153f270ee3db",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--c0437d42-5bc3-4938-a16d-90a243afd4d3",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\11.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ee561233-deaa-4a0f-8583-83ed4fc026f1",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\11.0\\Word"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--3c9637f6-32d8-45a7-b671-4eff38c122e7",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f32b6230-41b9-4926-8e41-f651f5611b32",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f32b6230-41b9-4926-8e41-f651f5611b32",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--ff576e31-f7fd-4c36-9424-0b47e46cffaa",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--d0ebef78-8280-4ae0-bc5c-26b59d85615e",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\11.0\\Word\\File MRU"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109"
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\""
]
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--8f016b30-31ec-49e4-ad5a-4d0ce5c37109",
"value": "amf-fr.org"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983"
],
"labels": [
"misp:type=\"ip-dst|port\"",
"misp:category=\"Network activity\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--5f8ceee8-e144-42b8-bac5-35d7719be983",
"dst_ref": "ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--5f8ceee8-e144-42b8-bac5-35d7719be983",
"value": "51.38.150.171"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--259b1821-d418-4510-aa04-b59e92dd3820",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--87f3ae04-29bd-479b-ba51-96c97f705aab",
"key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Notepad"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--23e7606b-8811-45df-b726-dabedcfcdd32",
"key": "HKEY_CLASSES_ROOT\\.dll"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--1f697f8c-84b1-4339-9906-1142cf955bef",
"key": "HKEY_CLASSES_ROOT\\dllfile"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5",
"key": "HKEY_CLASSES_ROOT\\dllfile\\AutoRegister"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--97492285-8474-4867-ae94-ec61a5fee43d",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows Script\\Features"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--90ec3953-0b63-4d04-9648-a9caa664dfbd",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952",
"key": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--13463837-8319-4893-96d4-d32a4bf2c6fa",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a333fb2c-9866-4a78-9e52-b97ab50ec549",
"key": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--4cf5eb52-9c30-4637-ac1f-9d66855e7edc",
"key": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--03ef6074-aaea-4605-a47c-44402d680d6e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--03ef6074-aaea-4605-a47c-44402d680d6e",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba"
],
"labels": [
"misp:type=\"regkey\"",
"misp:category=\"Persistence mechanism\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--02a75dd8-d84e-4901-9b20-df78e6681dba",
"key": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:11.000Z",
"modified": "2019-02-16T21:18:11.000Z",
"first_observed": "2019-02-16T21:18:11Z",
"last_observed": "2019-02-16T21:18:11Z",
"number_observed": 1,
"object_refs": [
"network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a"
],
"labels": [
"misp:type=\"ip-dst|port\"",
"misp:category=\"Network activity\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"dst_ref": "ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--09d3b623-b0fd-4d24-82d3-54f083bb737a",
"value": "185.10.68.189"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"pattern": "[file:hashes.MD5 = 'efbcffc10763a287bdedfb6e892ae20c' AND file:hashes.SHA1 = '0dfe75a01e525bc599dff0c17204129b7ac3a437' AND file:hashes.SHA256 = '728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b' AND file:name = '728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b.doc']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2019-02-16T21:21:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "file"
}
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"True\""
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--4713618f-9e55-4689-b548-3ee03de3f18e",
"process--35ba0997-d509-4f32-9b8b-e26af9b9efbc"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--4713618f-9e55-4689-b548-3ee03de3f18e",
"pid": 2264,
"parent_ref": "process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--35ba0997-d509-4f32-9b8b-e26af9b9efbc",
"pid": 924
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--a7157e4e-92f0-46f4-9527-0740de387c48",
"process--e5ca629c-eb2e-4666-ba6a-1d06d033f257"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a7157e4e-92f0-46f4-9527-0740de387c48",
"pid": 2496,
"parent_ref": "process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e5ca629c-eb2e-4666-ba6a-1d06d033f257",
"pid": 2264
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:12.000Z",
"modified": "2019-02-16T21:18:12.000Z",
"first_observed": "2019-02-16T21:18:12Z",
"last_observed": "2019-02-16T21:18:12Z",
"number_observed": 1,
"object_refs": [
"process--c9b962ff-144f-4eff-8505-627768660ed0",
"process--f3c12178-5032-4529-b970-b8bd2290b550"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c9b962ff-144f-4eff-8505-627768660ed0",
"pid": 2520,
"parent_ref": "process--f3c12178-5032-4529-b970-b8bd2290b550",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--f3c12178-5032-4529-b970-b8bd2290b550",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:13.000Z",
"modified": "2019-02-16T21:18:13.000Z",
"first_observed": "2019-02-16T21:18:13Z",
"last_observed": "2019-02-16T21:18:13Z",
"number_observed": 1,
"object_refs": [
"process--34614f0f-6f30-45fd-b710-ed9547534527",
"process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--34614f0f-6f30-45fd-b710-ed9547534527",
"pid": 2776,
"parent_ref": "process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--12b2460b-30e3-4741-8a91-b6cba2b2b0d1",
"pid": 2520
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:13.000Z",
"modified": "2019-02-16T21:18:13.000Z",
"first_observed": "2019-02-16T21:18:13Z",
"last_observed": "2019-02-16T21:18:13Z",
"number_observed": 1,
"object_refs": [
"process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"process--bce67245-fb5d-49a8-9f94-d57a683b6523"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--1a13e7cd-acca-4ed9-b641-b545c715af60",
"pid": 2792,
"parent_ref": "process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--bce67245-fb5d-49a8-9f94-d57a683b6523",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"process--088f1799-557c-46ea-b729-5b45dba25897"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"pid": 2800,
"parent_ref": "process--088f1799-557c-46ea-b729-5b45dba25897",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--088f1799-557c-46ea-b729-5b45dba25897",
"pid": 2792
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"process--63808d45-2ef1-4073-8c92-b64a72630901"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--d9dfafca-d8bb-4c84-adce-89beb1814b15",
"pid": 2808,
"parent_ref": "process--63808d45-2ef1-4073-8c92-b64a72630901",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--63808d45-2ef1-4073-8c92-b64a72630901",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"process--d6b05a77-7647-4707-ab8f-09595e5c01a8"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"pid": 2816,
"parent_ref": "process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--d6b05a77-7647-4707-ab8f-09595e5c01a8",
"pid": 2496
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"pid": 2920,
"parent_ref": "process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a945fdf1-aa04-401e-bf8e-0c8dbe915e26",
"pid": 2816
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"process--9a3db6fc-d402-411a-8c03-293adbf890db"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"pid": 2992,
"parent_ref": "process--9a3db6fc-d402-411a-8c03-293adbf890db",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9a3db6fc-d402-411a-8c03-293adbf890db",
"pid": 2776
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"process--3dde9650-9c02-4776-b668-857f2e5f6994"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"pid": 3048,
"parent_ref": "process--3dde9650-9c02-4776-b668-857f2e5f6994",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--3dde9650-9c02-4776-b668-857f2e5f6994",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"pid": 2064,
"parent_ref": "process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--5fa8229a-e960-4cc8-9cdf-d16a6d5c0e9b",
"pid": 3048
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"process--28220896-936f-4bf9-809f-9481312103af"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"pid": 1400,
"parent_ref": "process--28220896-936f-4bf9-809f-9481312103af",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--28220896-936f-4bf9-809f-9481312103af",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"process--e52795d0-d993-4608-b353-bb8c5e013aef"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"pid": 1652,
"parent_ref": "process--e52795d0-d993-4608-b353-bb8c5e013aef",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e52795d0-d993-4608-b353-bb8c5e013aef",
"pid": 1400
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--7130a770-0975-49c8-86ff-a9a719a229cf",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:14.000Z",
"modified": "2019-02-16T21:18:14.000Z",
"first_observed": "2019-02-16T21:18:14Z",
"last_observed": "2019-02-16T21:18:14Z",
"number_observed": 1,
"object_refs": [
"process--7130a770-0975-49c8-86ff-a9a719a229cf",
"process--690575e6-11f0-420b-b0dc-6338dcb12cc9"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--7130a770-0975-49c8-86ff-a9a719a229cf",
"pid": 872,
"parent_ref": "process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--690575e6-11f0-420b-b0dc-6338dcb12cc9",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:15.000Z",
"modified": "2019-02-16T21:18:15.000Z",
"first_observed": "2019-02-16T21:18:15Z",
"last_observed": "2019-02-16T21:18:15Z",
"number_observed": 1,
"object_refs": [
"process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"process--148177b0-6c6e-454b-bf64-719db4ef657e"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--19cb0bdf-b056-4504-9bf5-0a59272da052",
"pid": 528,
"parent_ref": "process--148177b0-6c6e-454b-bf64-719db4ef657e",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--148177b0-6c6e-454b-bf64-719db4ef657e",
"pid": 2992
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:15.000Z",
"modified": "2019-02-16T21:18:15.000Z",
"first_observed": "2019-02-16T21:18:15Z",
"last_observed": "2019-02-16T21:18:15Z",
"number_observed": 1,
"object_refs": [
"process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"process--71b7c29b-fd39-41ce-857c-eb07b612e0c6"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"pid": 1888,
"parent_ref": "process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--71b7c29b-fd39-41ce-857c-eb07b612e0c6",
"pid": 528
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"process--cf003b7c-2185-4d05-85d0-af3f1168ae0a"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--52974b70-ac9e-403f-acf4-7241c91dc77a",
"pid": 2336,
"parent_ref": "process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--cf003b7c-2185-4d05-85d0-af3f1168ae0a",
"pid": 2064
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"process--c1d0b21c-30b9-49f2-b772-b0c68df78108"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"pid": 2356,
"parent_ref": "process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c1d0b21c-30b9-49f2-b772-b0c68df78108",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"process--c8faa126-3558-4a2a-bf51-1d664fb2318f"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--f49ae108-cec3-468c-9515-e52be2f2fb4f",
"pid": 2504,
"parent_ref": "process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"x_misp_name": "winword.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c8faa126-3558-4a2a-bf51-1d664fb2318f",
"pid": 2356
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"process--775972eb-d8fa-4cdd-8897-02cf028de937"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"pid": 2724,
"parent_ref": "process--775972eb-d8fa-4cdd-8897-02cf028de937",
"x_misp_name": "cmd.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--775972eb-d8fa-4cdd-8897-02cf028de937",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"process--fe28b1c2-8207-4769-9afa-dca8428aaac1"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"pid": 2744,
"parent_ref": "process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"x_misp_name": "reg.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--fe28b1c2-8207-4769-9afa-dca8428aaac1",
"pid": 2724
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:16.000Z",
"modified": "2019-02-16T21:18:16.000Z",
"first_observed": "2019-02-16T21:18:16Z",
"last_observed": "2019-02-16T21:18:16Z",
"number_observed": 1,
"object_refs": [
"process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--9f1ca1ce-1035-482d-b529-a8bf66044797",
"pid": 3008,
"parent_ref": "process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"x_misp_name": "certutil.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--0cc543b8-3fcb-4584-a0bf-68fbf6cb4018",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"process--db9955be-40b0-47b0-9e49-6345daed7651"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"pid": 3040,
"parent_ref": "process--db9955be-40b0-47b0-9e49-6345daed7651",
"x_misp_name": "regsvr32.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--db9955be-40b0-47b0-9e49-6345daed7651",
"pid": 2336
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"process--c49ca006-65cd-4790-b102-f08ed67bb796"
],
"labels": [
"misp:name=\"process\"",
"misp:meta-category=\"misc\"",
"misp:to_ids=\"False\""
]
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"pid": 1484,
"parent_ref": "process--c49ca006-65cd-4790-b102-f08ed67bb796",
"x_misp_name": "powershell.exe"
},
{
"type": "process",
"spec_version": "2.1",
"id": "process--c49ca006-65cd-4790-b102-f08ed67bb796",
"pid": 3040
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--248da2ce-03f8-47fb-b4a0-07321377590f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--248da2ce-03f8-47fb-b4a0-07321377590f",
"directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--248da2ce-03f8-47fb-b4a0-07321377590f",
"name": "Users\\aETAdzjz\\AppData\\Roaming\\N9OO5pxpBYkU.bat",
"parent_directory_ref": "directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"x_misp_fullpath": "%APPDATA%\\N9OO5pxpBYkU.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--eba94abd-7ec1-4328-8d19-5bb5aca72c11",
"path": "Users\\aETAdzjz\\AppData\\Roaming\\N9OO5pxpBYkU.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--a2907899-5858-4892-a2a3-3018be097ef4",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--a2907899-5858-4892-a2a3-3018be097ef4",
"key": "HKCU\\Software\\Microsoft\\Notepad",
"values": [
{
"name": "aETAdzjz",
"data": "qE8zByJzpkyD",
"data_type": "REG_SZ"
}
],
"x_misp_hive": "INVALID"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988",
"name": "users\\aetadzjz\\appdata\\roaming\\n9oo5pxpbyku.bat",
"parent_directory_ref": "directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"x_misp_fullpath": "%APPDATA%\\n9oo5pxpbyku.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--0185ab35-c474-45a8-b8f5-5e8f2dc22504",
"path": "users\\aetadzjz\\appdata\\roaming\\n9oo5pxpbyku.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--54a84dcf-3588-458f-a3d9-5ce8629e89e2",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--6e7f414a-4f32-4de9-b1c6-41b1c14a3aa1",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"directory--aca6749e-5eb0-441e-9d54-9aca74306faf"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--15e00eb8-9c77-47af-b71e-b15c945791fe",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--aca6749e-5eb0-441e-9d54-9aca74306faf",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:17.000Z",
"modified": "2019-02-16T21:18:17.000Z",
"first_observed": "2019-02-16T21:18:17Z",
"last_observed": "2019-02-16T21:18:17Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--5776026d-9220-4878-ae0d-3afdf6bd6194",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--eb012044-6124-4b96-8c56-690824570580",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"network-traffic--eb012044-6124-4b96-8c56-690824570580",
"ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184"
],
"labels": [
"misp:name=\"network-socket\"",
"misp:meta-category=\"network\"",
"misp:to_ids=\"False\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--eb012044-6124-4b96-8c56-690824570580",
"dst_ref": "ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--e70d7790-643a-414f-bd05-fb52dadea184",
"value": "51.38.150.171"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"directory--a547f901-da10-4320-95af-721573374741"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--1a2c35db-7775-41b8-88cc-e83025d0125c",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--a547f901-da10-4320-95af-721573374741",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--a547f901-da10-4320-95af-721573374741",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"directory--af05c737-cd65-4160-8063-2fc38fbceabf"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--3d1557ba-a402-4dbb-b600-c029a70d2f86",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--af05c737-cd65-4160-8063-2fc38fbceabf",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b90ef13c-4165-4108-adc3-53234995361a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--b90ef13c-4165-4108-adc3-53234995361a",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191"
],
"labels": [
"misp:name=\"network-socket\"",
"misp:meta-category=\"network\"",
"misp:to_ids=\"False\""
]
},
{
"type": "network-traffic",
"spec_version": "2.1",
"id": "network-traffic--6237df85-dc61-44f2-8119-fb59591a9b22",
"dst_ref": "ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"dst_port": 443,
"protocols": [
"tcp"
]
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--234fab5a-83d2-4cbe-bd6f-548baf670191",
"value": "185.10.68.189"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"directory--b63e2178-6d20-4316-afdb-6a18c0bab7de"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--c506a7b6-efe2-4710-969f-5f5b055eaa1a",
"name": "users\\aetadzjz\\appdata\\roaming\\temp.txt",
"parent_directory_ref": "directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"x_misp_fullpath": "%APPDATA%\\temp.txt"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--b63e2178-6d20-4316-afdb-6a18c0bab7de",
"path": "users\\aetadzjz\\appdata\\roaming\\temp.txt"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"directory--16bc776f-0c26-4112-a0e9-7492e9724007"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ed5b3977-3470-446e-a6f0-af41b68e5353",
"name": "users\\aetadzjz\\appdata\\roaming\\7cixmlowr4y2f.bat",
"parent_directory_ref": "directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"x_misp_fullpath": "%APPDATA%\\7cixmlowr4y2f.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--16bc776f-0c26-4112-a0e9-7492e9724007",
"path": "users\\aetadzjz\\appdata\\roaming\\7cixmlowr4y2f.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:18.000Z",
"modified": "2019-02-16T21:18:18.000Z",
"first_observed": "2019-02-16T21:18:18Z",
"last_observed": "2019-02-16T21:18:18Z",
"number_observed": 1,
"object_refs": [
"file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"directory--57f9a523-db11-4180-b26a-bd45307f0e97"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--8db13a1c-440f-41aa-92a6-41dc534e4efd",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--57f9a523-db11-4180-b26a-bd45307f0e97",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9521bc93-04e4-4844-9666-a0659854c7d7",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--9521bc93-04e4-4844-9666-a0659854c7d7",
"directory--92fffe01-16b0-45bf-969f-bb9169198d40"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9521bc93-04e4-4844-9666-a0659854c7d7",
"name": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc",
"parent_directory_ref": "directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"x_misp_fullpath": "%TEMP%\\d1.doc"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--92fffe01-16b0-45bf-969f-bb9169198d40",
"path": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--81e50c7c-f333-4e67-aedf-775eec9a4fe1",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--26856757-3649-4363-b5a9-68030b721470",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--26856757-3649-4363-b5a9-68030b721470",
"directory--556e5880-58e5-40cf-95a3-04a38f6d7716"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--26856757-3649-4363-b5a9-68030b721470",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--556e5880-58e5-40cf-95a3-04a38f6d7716",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"directory--4dfd289f-edd3-448c-ba77-da4d5c93f028"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--b6f3370e-44ff-4d65-887c-3ade077174a8",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--4dfd289f-edd3-448c-ba77-da4d5c93f028",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--45dac7ec-362e-49e2-a6ab-8d55e4d08276",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"directory--928c938a-131a-4010-9af1-5befa7621de1"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--19c24c8e-9e77-470f-9f9f-a835a3631685",
"name": "users\\aetadzjz\\appdata\\roaming\\temp.txt",
"parent_directory_ref": "directory--928c938a-131a-4010-9af1-5befa7621de1",
"x_misp_fullpath": "%APPDATA%\\temp.txt"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--928c938a-131a-4010-9af1-5befa7621de1",
"path": "users\\aetadzjz\\appdata\\roaming\\temp.txt"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9135f0d8-5dd2-4677-afc4-51f1488e9517",
"name": "users\\aetadzjz\\appdata\\roaming\\zxtlzequ7lyb.bat",
"parent_directory_ref": "directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"x_misp_fullpath": "%APPDATA%\\zxtlzequ7lyb.bat"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--57b5066f-c692-4e46-a35b-b1f50c4a9f27",
"path": "users\\aetadzjz\\appdata\\roaming\\zxtlzequ7lyb.bat"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"directory--760db7a8-5589-44f4-998a-ffe84ee18857"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--e0ccc2c6-f993-477f-8c05-29bc1ae627c6",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--760db7a8-5589-44f4-998a-ffe84ee18857",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--986b61a3-779e-49e4-94d0-f04e5546c9a8",
"name": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc",
"parent_directory_ref": "directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"x_misp_fullpath": "%TEMP%\\d1.doc"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--ed8523b6-8355-4c5b-9ab4-e02c9685776a",
"path": "users\\aetadzjz\\appdata\\local\\temp\\d1.doc"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:19.000Z",
"modified": "2019-02-16T21:18:19.000Z",
"first_observed": "2019-02-16T21:18:19Z",
"last_observed": "2019-02-16T21:18:19Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--4d0ffbfc-0be3-4499-a722-4b64db129025",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"directory--4faf9bac-d493-44e6-ab93-d8214b23f26f"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--d9b95f52-efdd-4083-abaa-20bf42be135a",
"name": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml",
"parent_directory_ref": "directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"x_misp_fullpath": "%WINDIR%\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--4faf9bac-d493-44e6-ab93-d8214b23f26f",
"path": "windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"directory--8587bf98-0811-4078-8e1d-1c633b088f05"
],
"labels": [
"misp:name=\"file\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--3e0e85ee-ceb1-442e-a652-351e691cfc60",
"name": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config",
"parent_directory_ref": "directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"x_misp_fullpath": "%WINDIR%\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "directory",
"spec_version": "2.1",
"id": "directory--8587bf98-0811-4078-8e1d-1c633b088f05",
"path": "windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--2c56936f-2ddc-4102-ba4a-153ec9a0dad2",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--8e656cc6-482e-4952-869a-6cba4d726f83",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"first_observed": "2019-02-16T21:18:20Z",
"last_observed": "2019-02-16T21:18:20Z",
"number_observed": 1,
"object_refs": [
"windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83"
],
"labels": [
"misp:name=\"registry-key\"",
"misp:meta-category=\"file\"",
"misp:to_ids=\"False\""
]
},
{
"type": "windows-registry-key",
"spec_version": "2.1",
"id": "windows-registry-key--8e656cc6-482e-4952-869a-6cba4d726f83",
"x_misp_hive": "HKEY_CURRENT_USER"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--6f35cd0b-d6ac-44f0-919b-80a383c946ef",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"labels": [
"misp:name=\"passive-dns\"",
"misp:meta-category=\"network\""
],
"x_misp_attributes": [
{
"type": "text",
"object_relation": "rrname",
"value": "amf-fr.org",
"category": "Other",
"uuid": "2d024c94-8f4a-47fe-94fb-fb4431bb1389"
},
{
"type": "text",
"object_relation": "rdata",
"value": "51.38.150.171",
"category": "Other",
"uuid": "3237e515-6140-472e-8a40-93f356d7b187"
},
{
"type": "text",
"object_relation": "rrtype",
"value": "A",
"category": "Other",
"uuid": "480b18ce-e416-4a1d-8af4-01acd3667f93"
}
],
"x_misp_meta_category": "network",
"x_misp_name": "passive-dns"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--5c687e2a-e898-40f8-b69b-4bb402de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"labels": [
"misp:name=\"original-imported-file\"",
"misp:meta-category=\"file\""
],
"x_misp_attributes": [
{
"type": "attachment",
"object_relation": "imported-sample",
"value": "stix-report.xml",
"category": "External analysis",
"uuid": "5c687e2a-45e8-4d61-9912-425602de0b81",
"data": "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
},
{
"type": "text",
"object_relation": "format",
"value": "STIX 1.1",
"category": "Other",
"uuid": "5c687e2a-1d24-4cb3-b539-4a1402de0b81"
}
],
"x_misp_meta_category": "file",
"x_misp_name": "original-imported-file"
},
{
"type": "x-misp-object",
"spec_version": "2.1",
"id": "x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"labels": [
"misp:name=\"virustotal-report\"",
"misp:meta-category=\"misc\""
],
"x_misp_attributes": [
{
"type": "datetime",
"object_relation": "last-submission",
"value": "2019-02-15T11:14:58",
"category": "Other",
"uuid": "eb90d5c1-8be2-4876-8aaf-d90365018ed2"
},
{
"type": "link",
"object_relation": "permalink",
"value": "https://www.virustotal.com/file/728bbbea8797c5e00a8737ebf6bebfffb3d84f9c86f144963a2940025329c28b/analysis/1550229298/",
"category": "External analysis",
"uuid": "900a1158-f094-4221-b1a3-b8b07240c9f6"
},
{
"type": "text",
"object_relation": "detection-ratio",
"value": "33/59",
"category": "Other",
"uuid": "965ad42b-6e53-44b7-82ed-b3642c077ea9"
}
],
"x_misp_meta_category": "misc",
"x_misp_name": "virustotal-report"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1c72cd7b-5dc3-40b1-ad20-b5e2973171e4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:21:59.000Z",
"modified": "2019-02-16T21:21:59.000Z",
"relationship_type": "analysed-with",
"source_ref": "indicator--72915d1f-518f-4c2e-a438-8c736e648eae",
"target_ref": "x-misp-object--3ab643d5-68d0-4408-a644-cdd4da7df4ee"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--80fc4d73-d442-4c84-8b76-58a9f4a7bfe1",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--56a0fd8c-bf55-451d-85b6-5f27c970a9d2",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"relationship_type": "created",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--2764d832-fa70-4507-b1ee-15e42ba447db",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"relationship_type": "created",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--248da2ce-03f8-47fb-b4a0-07321377590f"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ea17ebe0-5263-474d-91e6-16f57e76cfde",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:20.000Z",
"modified": "2019-02-16T21:18:20.000Z",
"relationship_type": "modified-properties-of",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--a2907899-5858-4892-a2a3-3018be097ef4"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--eaee4297-3405-44c5-802d-ef79d880f416",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--c9a7758d-0ac7-42cc-a6c2-40791fe6899d"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0b2d8b86-9a3f-48f9-86a6-7e9e18113b35",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--fb07c709-9a1f-4e37-b483-75407bbb9230"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--524f4b17-538e-4222-ba30-8e710bdeca35",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--2968c724-74e2-4077-ad10-ed897489aadf"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4b8face5-dc54-47ac-b473-071525f7254b",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--12dea9cb-410b-4691-8b7b-083f9d47c75a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4d13e6ac-b9c2-4a64-971b-634b4bdd86ee",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bc5b0d67-04d6-4748-bcda-b5a2f8f000c0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--25fd2014-3dfa-44b2-a2db-274a10e133ad",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--5d7889d3-396b-4ab6-a221-dee0d544bc1c"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--559e2952-8fc1-419d-aeac-5c3adba125a3",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--88b4dff4-51b1-425d-a897-55fabb69f64b"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ab8cb617-5238-4206-8d6b-1327bd90d05d",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--47554dfd-1690-4f7d-944d-fa95e510cfbc"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--93c89368-7207-425a-a859-6ee7a4185dfe",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--8839c1e5-c3ae-4361-9d77-36ef93dee014"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4fd2ea6b-9dad-4b1c-a3ff-a8b08ac16273",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--dfc2f46a-8042-49c8-8960-58f12dd86c0b"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--04467f9d-e78f-45e5-bd50-9b26702acd7e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--ae28d749-b2ed-4147-91b3-78e2b65d02d8"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--89801e71-d9d2-4e40-861b-c6fe918d727e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--fce43d53-c05e-4dfc-bfcd-e9bfc5b75b09"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5fd9e0bf-bda6-4104-90d4-60d30d660fda",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:21.000Z",
"modified": "2019-02-16T21:18:21.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--795c1bae-831b-4b11-b279-32138c042af0"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--89a621f1-9b46-49df-b9a6-8eab0d87263c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--42636628-4a98-4515-84c4-efb048624d16"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a4920310-06fa-44fe-836c-114c519fd2e8",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--e325f097-a49e-4bd4-8362-4281735c0279"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1bd3f4cc-0875-47cd-9962-a37ec74ea381",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--e2e3f385-135e-4d43-a9b0-2c3f543b77ed"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c1577d9d-c8df-487d-bdfc-adfc26a9d3ce",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--443e35c7-bed9-4736-acb7-8e27ca55d0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8926413e-a019-4ccf-8251-1cb5fcd68a12",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--855e5151-6ffb-47c0-8324-e69fe2310bf1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8f958072-6e0b-4bb7-9cdf-a7c9e042ae81",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--08ca55d9-a2dd-4360-b903-07e9d30e3f8a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ff919c74-1e88-4194-b02d-0d760795e433",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--97f32545-5fb2-430b-b895-83b91b1a3b42"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--3a369a60-2727-4ef6-bca3-592cf9b87aa2",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--4713618f-9e55-4689-b548-3ee03de3f18e",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4a7271a4-324d-48eb-8566-6d2a88323179",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--48934860-e16d-4297-8461-8d41f0615504",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--6b18afd3-a3f6-4d49-873c-0c90220cdd19",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d9dfafca-d8bb-4c84-adce-89beb1814b15"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8deb2f27-8557-4886-b90f-85f702dec4bd",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--e2bf978e-aa4c-47bc-a1ec-f881f962d49c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--7fabc709-43dc-43f5-a13c-9d9c8a85e3bc",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "deleted",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d53a6a39-a6fa-49ae-bb8a-bbdf64e79988"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a7c4ccdd-693f-4fce-9fec-f3a4ccdc8869",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ab0bc302-d9cf-49b7-a5d0-c794c3f25362"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4f691eb2-f432-411e-b7c3-483d642e0667",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:22.000Z",
"modified": "2019-02-16T21:18:22.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ff164482-8a8c-4cc0-82a5-52aeb66539dc"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4ffce48d-2de1-4ee2-ae39-80a58831e9e2",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--693e271b-3966-4fb8-9787-de555149c589"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0c5acd4b-cc49-4cb6-aa45-0fcfadee3ce7",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--311d4452-d95d-4391-a29f-ebf1287efd4c"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--e0856c1d-c7be-4634-8b73-9ff9a7357ec5",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5cfc6426-ba25-4b02-9704-1135e347eadb",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--9e02cc21-7f52-494a-a46d-8bf8ae36779c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:23.000Z",
"modified": "2019-02-16T21:18:23.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--57bef18c-ebd6-480e-85b6-487494b978ed",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4d606dc9-8937-41b0-b2cb-f9db94d5012e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "created",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--832c42e7-946f-4a7a-b35e-b367b5e16964",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "created",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--e1adf2b0-0fe3-4d55-810d-d22a5856138e"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ea2b3220-f53c-45d0-9e6d-45c362e08a8b",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "created",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--54a84dcf-3588-458f-a3d9-5ce8629e89e2"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4cd358b6-215a-4921-9b86-307e8095980f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "created",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--15e00eb8-9c77-47af-b71e-b15c945791fe"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--6ec149f8-4dc1-4239-8793-a113c614baf6",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "created",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f5ecdbfc-9c95-48d2-b9e7-c5dff3c080b4"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--035cba55-9e29-481d-9ebc-0ddb0f9ea0b4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--58467b49-f55c-403d-89ec-d22f17a4d057",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f236a7bb-b45e-4a96-8081-798d310ff62c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--59f2c1ca-f639-4080-90f2-07d4c8770dc0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8e875829-a573-4383-8952-a40fada0f16d",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--5c607639-ce58-4a7d-a96a-b31d0c1de7fa"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1533cc31-2fee-4fc5-89a4-5624b8ae503f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f33b60a8-86aa-4318-a304-95c782b1939c"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--033df35d-36b1-4baa-966a-67bc67af3db5",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--cb9ad57a-983c-43eb-910b-1dc22121c017"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--d52b9739-8329-4d62-8a35-5d4b632f8b0e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--73dd16a6-8e9b-4889-839e-2f6718a50041"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--184e1077-0b43-4881-9948-5d92bad4706b",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--61af2af0-272f-413d-b70a-07611f8539c3"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--052b3302-9774-4bdc-8bbc-7b74eefc5322",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:24.000Z",
"modified": "2019-02-16T21:18:24.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--d025ca9d-7a4e-470f-8f5b-8fa1d7c84d4e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5bc3ee64-23a5-4776-abb6-fa19be20005e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--26d235e0-d8d7-4256-b82f-f9b190519b6d"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--00e28c49-d146-4e51-a2fe-51ab403d0888",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1c1f5422-4c58-4b3b-901e-f3471af6a5b2",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f10d6026-37f9-4894-8eb3-153f270ee3db"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ec124a63-d439-47c2-adce-e8b119e39c83",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--c0437d42-5bc3-4938-a16d-90a243afd4d3"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--194c1564-6033-4898-9ac4-9a4228e9123f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--ee561233-deaa-4a0f-8583-83ed4fc026f1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--19958a77-588b-4446-b205-03171dc04ea1",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--025dc9c2-2e5a-44ce-a136-c9c75a4d1a87"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a4cdb28e-3a48-4e47-ba5e-b772d560ef70",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--3c9637f6-32d8-45a7-b671-4eff38c122e7"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--aefccf5f-5807-439d-910a-815f726ed5a8",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--f32b6230-41b9-4926-8e41-f651f5611b32"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4137b23c-27b1-4eb2-9175-9711d46ab356",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--ff576e31-f7fd-4c36-9424-0b47e46cffaa"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--e0378ddb-5dd2-45d4-8471-66cff9f1d090",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--d0ebef78-8280-4ae0-bc5c-26b59d85615e"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--10833007-1636-4af4-8ed4-8d97e4766d56",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "read-from",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--8f016b30-31ec-49e4-ad5a-4d0ce5c37109"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4c95e1f4-6644-427b-bda3-3fc075e7104c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "connected-to",
"source_ref": "observed-data--c9b962ff-144f-4eff-8505-627768660ed0",
"target_ref": "observed-data--eb012044-6124-4b96-8c56-690824570580"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f07a9052-f391-4d8f-ad3f-6173733974d8",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--40b2e90d-72ed-404f-9dae-2fd757325778",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:25.000Z",
"modified": "2019-02-16T21:18:25.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bb23c303-0dfd-4899-b57b-c37099c990fd",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a139c919-709e-45cb-a6e2-3b13cffc360a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--34614f0f-6f30-45fd-b710-ed9547534527",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--9d215dfd-a73c-4a5f-9d0b-ee135e916d07",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0cbba7b5-c3d1-4176-9c1d-354dc022906c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "created",
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c5dae647-fd5d-47ce-abc3-1d820ba9ff59",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--6dbc68e2-74ab-4df9-8826-31aeb41463c7",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--6a8adc19-cd70-467f-8d08-1d5b1dbb1a6a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--1a13e7cd-acca-4ed9-b641-b545c715af60",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--d80c6148-c85c-4219-b2f5-c5a9a1250f51",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--51744641-da70-4ef0-8bcc-0c412d8169ed",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--9f59c034-f16b-4f0b-a1d7-89b547c92195",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f5e897a0-6c2e-40c7-87c3-3182f0acf1d0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:26.000Z",
"modified": "2019-02-16T21:18:26.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0402635d-d396-4081-b61e-ac0c06d998b3",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5f493b93-1b30-41a9-98e6-11cb42bb1224",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--99ba3f7e-2ce0-4705-9595-bf2ab226912d",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--2190361e-f7d3-4a39-b9c0-ed563943e15b",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:27.000Z",
"modified": "2019-02-16T21:18:27.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0b0e1872-5508-419b-b8d9-afe6128ac476",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--7d0bf6db-603d-4e65-ab6c-5bb5011d4c0e",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--50d55677-c4db-475a-a041-07e607b12f13",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "created",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--1a2c35db-7775-41b8-88cc-e83025d0125c"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8d17c7b0-b43f-49c6-8fdf-63bd5f4183f8",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "created",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--3d1557ba-a402-4dbb-b600-c029a70d2f86"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--dadd7583-d90a-4ced-bfc7-b5affd599d0a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--f67a93e6-2d47-4b5c-b9b0-a3c4c0d28952"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a8883f7e-028f-4e1f-85f7-6ceb596856fa",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--13463837-8319-4893-96d4-d32a4bf2c6fa"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--77c02d1f-ab1e-4f57-b9c4-0cb907cdb556",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--a333fb2c-9866-4a78-9e52-b97ab50ec549"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8186e7bf-65b1-407a-90a7-1c24e30fad81",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--df73e3cc-c5a4-4e81-9222-80f55e6cd9e3"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--61dedadc-aa6a-4849-9bb7-6f6257500b63",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--4cf5eb52-9c30-4637-ac1f-9d66855e7edc"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4c35210c-dfa6-498d-ad1e-b1071b5cb84b",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--03ef6074-aaea-4605-a47c-44402d680d6e"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5b5a274b-61ef-4ef1-9aaa-609ef22cc452",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--02a75dd8-d84e-4901-9b20-df78e6681dba"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--9322f578-930b-4803-b078-d2e98fb54481",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--b90ef13c-4165-4108-adc3-53234995361a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a321e920-3922-4b48-bd64-bf23f555d3da",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:28.000Z",
"modified": "2019-02-16T21:18:28.000Z",
"relationship_type": "connected-to",
"source_ref": "observed-data--2d414b6f-8d6b-41be-b6fa-012a859aacc8",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0d139c0b-6330-4c56-8878-8e390f3ab4b4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a4003a83-e8e4-4d0a-81bf-52e427c090b5",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c4257b6e-cf5d-4bdc-8e2a-ca6d7cf9b369",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--7130a770-0975-49c8-86ff-a9a719a229cf"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--188edb29-c161-44c5-8d41-a9c4693feefb",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1d6e357e-a2e9-4fba-ad90-6046151b9c04",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "created",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5827bfe5-0603-4d78-8ea5-b55bd894ac04",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "created",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--b9ba07e6-8aca-4e3a-875c-20598e958a73",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "deleted",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--c506a7b6-efe2-4710-969f-5f5b055eaa1a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a613e1f5-095f-40d3-ad83-48fb43273841",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "deleted",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--ed5b3977-3470-446e-a6f0-af41b68e5353"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c173318d-c9a0-4418-9c0d-9b1cbeb004fc",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bb198831-f653-48b0-bfb9-9b917c5b9135",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--7f5412a7-e9ee-408b-93ca-dc9488b96628",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--880c63dd-1a2e-4fcc-9ad1-526e4aaeb635",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--31352d86-d49f-4beb-bd45-a16d5caab639",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--7838d681-d59c-4bb2-aefe-74551946637e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--82e3c9e8-db1d-44d0-927d-e95814b5b651",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--8db13a1c-440f-41aa-92a6-41dc534e4efd"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--915f7e22-aa44-482f-b1f1-41839e91af6c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:29.000Z",
"modified": "2019-02-16T21:18:29.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--9521bc93-04e4-4844-9666-a0659854c7d7"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--8c8df19b-f05b-4acb-ae19-1dac4453de5e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--81e50c7c-f333-4e67-aedf-775eec9a4fe1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f10ae287-613d-40f6-9f59-b07ec2b4873f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--0f3708a6-7579-426a-9cbb-cff51cdbd0d7"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bbfea89d-badc-4b46-b1fc-8f3fc0b51908",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83",
"target_ref": "observed-data--bcb91a4b-aa4c-40ac-aff6-5b32acd085b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4c6daca0-d0c9-4b80-889a-12ed33ab7a18",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4b706802-7db4-47f4-b9c3-8e938808e972",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--07e706e6-0d49-4662-8b1b-5599df36dbaf"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ce7187d7-648e-4eff-ac16-2645fce4c6ac",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--9fcf4e94-d16b-4540-b69e-75fe834c4a88"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--7fa48978-3d44-4458-81aa-085de79ce626",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--fa72dedc-50fd-4bf9-94c1-73b7d256b231",
"target_ref": "observed-data--6f7de6d0-a260-4ba5-b58b-58c3679b32ea"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--381fe606-f938-47eb-b61e-37d35c070e3e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--d8b1a4ab-be25-473d-9c6b-20653b626da3",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--b9a71e6a-8fb5-4186-bc1a-ae1964611b60",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--5b15722c-5068-4c49-9b7b-bf97822c51bc",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--b6e96fa4-11c7-4d21-9f4d-3322335c6f38",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--fcfc2579-f9b0-4eaa-a618-cb36a56a64e4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a7a9c101-5545-47d8-999d-3356088c5665",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:30.000Z",
"modified": "2019-02-16T21:18:30.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--c6289ecd-0fc8-4a2f-ae06-e4929e597e04",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--71c04b78-c3b0-4265-a3a4-6a7dd45cbcd6",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--adf01585-4789-43c5-a6d9-422a9f9b3087",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bbb50636-b877-4aeb-ab0b-7ea76ecb6cb6",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--240d729d-901f-462c-8f28-9622fcc496bd",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--9a74dee1-83a1-4629-89d6-f8ed4680e700",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--afe090cc-57b5-4966-a78c-703b1c472234",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--19cb0bdf-b056-4504-9bf5-0a59272da052",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--afe7b23f-03bf-463a-b779-8e1de57f3892",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--26856757-3649-4363-b5a9-68030b721470"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--312e25ca-075b-46fd-8237-176ead105816",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "created",
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--b6f3370e-44ff-4d65-887c-3ade077174a8"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4995b5e5-dc0a-4575-b9ee-4f7bac7fac50",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--5776026d-9220-4878-ae0d-3afdf6bd6194"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--3be6d2b0-0477-4132-a938-b5c360d92dd9",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--45dac7ec-362e-49e2-a6ab-8d55e4d08276"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--209d50b9-e8e4-4770-bbc4-73d63ed8ce92",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "connected-to",
"source_ref": "observed-data--a003da6d-9fc0-4d1e-9278-e71e45b000a0",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--9d705ff8-0ebb-402a-be39-0563fe4e84a4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--b96da836-2c60-4a9a-b5b2-1b798257cce0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1b9ce63b-f858-4698-a651-cfa87a26e7ff",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9f1ca1ce-1035-482d-b529-a8bf66044797"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--33821b72-d2ac-4bf3-b7fb-77284c331653",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--7fd96bd0-0130-4693-8397-b42d6be63050",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:31.000Z",
"modified": "2019-02-16T21:18:31.000Z",
"relationship_type": "created",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--a7157e4e-92f0-46f4-9527-0740de387c48"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--d959617a-b5bf-44c7-a536-540609e4bae2",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "created",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--27a7e00c-6998-4f94-9ab6-197c56c3a2ea",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "deleted",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--19c24c8e-9e77-470f-9f9f-a835a3631685"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--e6222d44-81c1-4d0e-8f34-77e3c05fffd1",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "deleted",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--9135f0d8-5dd2-4677-afc4-51f1488e9517"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f2b2fe70-57f1-4f1f-94df-562c09555364",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--35f42271-ae1d-450b-8348-732f2eacc1f0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c92b3cd4-cba2-4ab6-a631-2d7773a127c9",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--52974b70-ac9e-403f-acf4-7241c91dc77a",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--64fc46b9-1922-40c0-adc6-44d58ec1bb56",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--f49ae108-cec3-468c-9515-e52be2f2fb4f"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--c480f56a-3774-4dcf-b7b4-36f1f9acc338",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "created",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--a843f0a9-0bdc-45e9-9026-552fc2a6db83"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a7d42f89-771b-48ae-a1df-9918adc06ddc",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "created",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--e0ccc2c6-f993-477f-8c05-29bc1ae627c6"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--f0c5de96-e123-49c7-879d-5d141643b67c",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "created",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--986b61a3-779e-49e4-94d0-f04e5546c9a8"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--bdff80fa-78a7-4c09-a2d2-69ee92b1a2f1",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--82d51f5b-7d64-49d8-92b3-dd69a5cdf3fd",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1c4ebe9c-549a-4ad3-9373-527b93435e2f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--cb25832a-5c41-4d71-b9e1-3ab4dc65b0e0",
"target_ref": "observed-data--4d0ffbfc-0be3-4499-a722-4b64db129025"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--af2f3d5e-5761-4757-9859-52309d7d86e0",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--cdf5e591-9b20-447f-be3a-23a2c32fc050",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:32.000Z",
"modified": "2019-02-16T21:18:32.000Z",
"relationship_type": "created",
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--a5802251-e1fd-49fc-97e5-5b5ce3547b3a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--f5229ae9-caf0-4157-abf7-21c5e6c642b9"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--80a56d40-7bf9-4a6f-ab6d-b5623198b003",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--d93d30ca-8cd9-4258-9355-7c77e0de39af"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--b1000b7b-5c8f-49c2-a787-0dda3147d839",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--9b6515dd-130e-4c99-97ac-b252ba8321fa",
"target_ref": "observed-data--ce3191d5-eecd-421e-9ac0-2a2f8c16a723"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1c4da237-790b-41f3-8cbd-3c42a42c8a08",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"target_ref": "observed-data--259b1821-d418-4510-aa04-b59e92dd3820"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--cb6df3b1-bc7e-4a2c-8268-f28e079054fc",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--dab2040d-cfe8-4757-a6e9-dcca4230b6c2",
"target_ref": "observed-data--87f3ae04-29bd-479b-ba51-96c97f705aab"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--1e1e642d-0c70-4a27-9537-d21350947c95",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "child-of",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0616f17a-26e4-480f-8e01-963c5d68016a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--23e7606b-8811-45df-b726-dabedcfcdd32"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0a87459b-eb50-49e5-b0e6-ac07e882e2a3",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--1f697f8c-84b1-4339-9906-1142cf955bef"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--e61ba405-6fe9-497c-be90-98408e464315",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--b8d47eff-96ba-436c-aa6b-bbd5ffb71ba5"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4cbaea40-9fde-47bd-baa8-72be71895114",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--97492285-8474-4867-ae94-ec61a5fee43d"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--b4d26a37-10e0-411f-9c8a-19dd116b5d5e",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:33.000Z",
"modified": "2019-02-16T21:18:33.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--bb2b8e79-ecb6-4b02-9bde-ada74269494f",
"target_ref": "observed-data--90ec3953-0b63-4d04-9648-a9caa664dfbd"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--2ad196ad-0902-4ddc-a463-731dc5076aee",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "created",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--d9b95f52-efdd-4083-abaa-20bf42be135a"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--4269b633-c9f7-4c3d-b414-0428759cde8a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "created",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--3e0e85ee-ceb1-442e-a652-351e691cfc60"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--90ecb5b9-e92e-4096-92f7-bfff98fe4fe6",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--a22f23cb-3d81-4686-8581-9414b0aba1e1"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--93361a2a-f90a-4607-9af2-0b94165e0c5a",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--6fdfde85-4599-44ab-aafc-956860f6e6c4"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--6354a926-4af1-4ceb-a671-cffdde8137d1",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--7dc2a39a-4944-49c1-891d-03c4a89752d2"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--94572867-17c9-48b6-8a55-4762f1d5c4e9",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--f8c2aa57-b94e-42de-aeec-0ac698fd0abe"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--297fc239-d4ff-4efb-a20a-530689eb677f",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--2c56936f-2ddc-4102-ba4a-153ec9a0dad2"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--ffa22c26-c91e-46ea-8798-532e0c9b1eb4",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "opened",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--8e656cc6-482e-4952-869a-6cba4d726f83"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--091323f4-f5b0-463b-b9a4-f1b31064fdd5",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "connected-to",
"source_ref": "observed-data--e670465d-b55a-4ef3-8c43-a7d6a8f6f511",
"target_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--0b71b5aa-790e-4ccd-87a0-a770c4011350",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "contains",
"source_ref": "observed-data--eb012044-6124-4b96-8c56-690824570580",
"target_ref": "observed-data--5f8ceee8-e144-42b8-bac5-35d7719be983"
},
{
"type": "relationship",
"spec_version": "2.1",
2023-05-19 09:05:37 +00:00
"id": "relationship--23567fe3-4d51-435b-b609-daf778c28176",
2023-04-21 14:44:17 +00:00
"created": "2019-02-16T21:18:34.000Z",
"modified": "2019-02-16T21:18:34.000Z",
"relationship_type": "contains",
"source_ref": "observed-data--6237df85-dc61-44f2-8119-fb59591a9b22",
"target_ref": "observed-data--09d3b623-b0fd-4d24-82d3-54f083bb737a"
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
}
]
}