adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/5902e33b-5f04-44d9-8260-427e950d210f.json

8649 lines
No EOL
283 KiB
JSON
Raw Blame History

{
"Event": {
"analysis": "0",
"date": "2017-04-28",
"extends_uuid": "",
"info": "OSINT - Alert (TA17-117A) Intrusions Affecting Multiple Victims Across Multiple Sectors",
"publish_timestamp": "1493364566",
"published": true,
"threat_level_id": "3",
"timestamp": "1493364465",
"uuid": "5902e33b-5f04-44d9-8260-427e950d210f",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#043400",
"local": false,
"name": "misp-galaxy:tool=\"PlugX\"",
"relationship_type": ""
},
{
"colour": "#0088cc",
"local": false,
"name": "misp-galaxy:tool=\"REDLEAVES\"",
"relationship_type": ""
},
{
"colour": "#ffffff",
"local": false,
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#0eb100",
"local": false,
"name": "admiralty-scale:information-credibility=\"1\"",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "link",
"uuid": "5902e34b-0728-4d97-9a52-4852950d210f",
"value": "https://www.us-cert.gov/ncas/alerts/TA17-117A",
"Tag": [
{
"colour": "#002b4a",
"local": false,
"name": "osint:source-type=\"technical-report\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
}
]
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "text",
"uuid": "5902e35b-24d0-47e1-a02f-41ac950d210f",
"value": "The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses multiple malware implants. Initial victims have been identified in several sectors, including Information Technology, Energy, Healthcare and Public Health, Communications, and Critical Manufacturing.\r\nAccording to preliminary analysis, threat actors appear to be leveraging stolen administrative credentials (local and domain) and certificates, along with placing sophisticated malware implants on critical systems. Some of the campaign victims have been IT service providers, where credential compromises could potentially be leveraged to access customer environments. Depending on the defensive mitigations in place, the threat actor could possibly gain full access to networks and data in a way that appears legitimate to existing monitoring tools.\r\nAlthough this activity is still under investigation, NCCIC is sharing this information to provide organizations information for the detection of potential compromises within their organizations.",
"Tag": [
{
"colour": "#002b4a",
"local": false,
"name": "osint:source-type=\"technical-report\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
}
]
},
{
"category": "External analysis",
"comment": "For a downloadable copy of this report and listings of IOCs, see:",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "link",
"uuid": "5902e382-95a8-44bd-aa64-445e950d210f",
"value": "https://www.us-cert.gov/sites/default/files/publications/IR-ALERT-MED-17-093-01C-Intrusions_Affecting_Multiple_Victims_Across_Multiple_Sectors.pdf",
"Tag": [
{
"colour": "#002b4a",
"local": false,
"name": "osint:source-type=\"technical-report\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
}
]
},
{
"category": "External analysis",
"comment": "For a downloadable copy of this report and listings of IOCs, see:",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "link",
"uuid": "5902e383-662c-4854-99f8-47ca950d210f",
"value": "https://www.us-cert.gov/sites/default/files/publications/IR-ALERT-MED-17-093-01C.xlsx",
"Tag": [
{
"colour": "#002b4a",
"local": false,
"name": "osint:source-type=\"technical-report\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
}
]
},
{
"category": "External analysis",
"comment": "For a downloadable copy of this report and listings of IOCs, see:",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "link",
"uuid": "5902e383-13e8-487b-a0aa-4a57950d210f",
"value": "https://www.us-cert.gov/sites/default/files/publications/IR-ALERT-MED-17-093-01C.stix.xml",
"Tag": [
{
"colour": "#002b4a",
"local": false,
"name": "osint:source-type=\"technical-report\"",
"relationship_type": ""
},
{
"colour": "#075200",
"local": false,
"name": "admiralty-scale:source-reliability=\"b\"",
"relationship_type": ""
},
{
"colour": "#001cad",
"local": false,
"name": "estimative-language:likelihood-probability=\"very-likely\"",
"relationship_type": ""
}
]
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e56e-bcf4-43d3-8328-4c1b950d210f",
"value": "61.97.241.239"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e56f-72ec-4d28-9af4-4fcf950d210f",
"value": "103.208.86.129"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e56f-7f4c-4c16-9e0a-4b18950d210f",
"value": "109.237.108.202"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e56f-ad38-4d98-aeca-4120950d210f",
"value": "109.237.111.175"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e570-4194-4706-9351-41b3950d210f",
"value": "109.248.222.85"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e570-5dfc-40c6-90f9-4ae8950d210f",
"value": "95.47.156.86"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e571-1130-4146-ba62-4c0c950d210f",
"value": "162.243.6.98"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e571-4284-48e7-ab47-4bc4950d210f",
"value": "160.202.163.78"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e571-d4f0-4705-a886-4ac9950d210f",
"value": "86.106.102.3"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e572-6424-479a-88ca-414b950d210f",
"value": "110.10.176.181"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e572-23f0-470d-b812-4372950d210f",
"value": "185.133.40.63"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e573-50b4-4f6e-a6f4-4e5c950d210f",
"value": "185.14.185.189"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e573-1140-41b1-822d-43a7950d210f",
"value": "95.183.52.57"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e573-0634-4ab6-803f-47b0950d210f",
"value": "185.117.88.78"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e574-e044-4bdc-8276-4f6d950d210f",
"value": "185.117.88.77"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e574-9f68-49e1-8e92-44c7950d210f",
"value": "185.117.88.82"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e575-9974-4159-9be5-47c2950d210f",
"value": "109.237.108.150"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e575-fcec-4448-99f9-4bc5950d210f",
"value": "211.110.17.209"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e575-55f8-465c-8c37-4547950d210f",
"value": "81.176.239.56"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e576-33cc-483e-804e-4303950d210f",
"value": "151.236.20.16"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e576-0b18-4fb6-bddb-41b8950d210f",
"value": "107.181.160.109"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e577-5780-42e1-a356-47d0950d210f",
"value": "151.101.100.73"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e577-cb5c-4bde-bc93-4994950d210f",
"value": "158.255.208.170"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e577-47a4-4410-abc8-4646950d210f",
"value": "158.255.208.189"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e578-2110-43cf-9fe8-4bfd950d210f",
"value": "158.255.208.61"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e578-b3c8-4a9c-856c-42f1950d210f",
"value": "160.202.163.79"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e579-bd60-48dc-8de8-43b5950d210f",
"value": "160.202.163.82"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e579-95b8-45de-848f-491a950d210f",
"value": "160.202.163.90"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e579-5e98-48c3-a839-4fd5950d210f",
"value": "160.202.163.91"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57a-9174-4eda-b6b6-4a7d950d210f",
"value": "185.117.88.81"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57a-f854-4d1a-bc16-4a05950d210f",
"value": "185.141.25.33"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57b-78bc-4394-9661-468e950d210f",
"value": "31.184.198.23"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57b-87cc-49dc-ae51-4d5c950d210f",
"value": "31.184.198.38"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57c-11a4-4f80-ad5b-4b6b950d210f",
"value": "92.242.144.2"
},
{
"category": "Network activity",
"comment": "IP Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ip-dst",
"uuid": "5902e57c-3f98-4c16-88b2-4f3f950d210f",
"value": "183.134.11.84"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c0-0cbc-40bf-b435-4fc4950d210f",
"value": "8a93859e5f7079d6746832a3a22ff65c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c1-d5ec-401e-a1db-45cc950d210f",
"value": "b0649c1f7fb15796805ca983fd8f95a3"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c1-90f0-4629-9b8e-44dc950d210f",
"value": "c1cb28327d3364768d1c1e4ce0d9bc07"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c1-b59c-44c8-8386-489f950d210f",
"value": "c0c8dcc9dad39da8278bf8956e30a3fc"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c2-e8f8-4c55-9897-4379950d210f",
"value": "db212129be94fe77362751c557d0e893"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c2-1a14-4116-866b-464c950d210f",
"value": "23d03ee4bf57de7087055b230dae7c5b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c3-dca8-41be-9774-4152950d210f",
"value": "472b1710794d5c420b9d921c484ca9e8"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c3-ecdc-4c65-867b-4175950d210f",
"value": "19610f0d343657f6842d2045e8818f09"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c3-12c4-4483-a10b-4b80950d210f",
"value": "f5744d72c6919f994ff452b0e758ffee"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c4-eff0-4c2d-8464-4027950d210f",
"value": "7891f00dcab0e4a2f928422062e94213"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c4-eb68-41d0-ab6e-460a950d210f",
"value": "1b891bc2e5038615efafabe48920f200"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c5-946c-40b5-8c19-4dfd950d210f",
"value": "dbb867c2250b5be4e67d1977fcf721fb"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c5-d3c0-4cfd-8e0f-45c0950d210f",
"value": "f03f70d331c6564aec8931f481949188"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c6-89c0-4825-b633-455e950d210f",
"value": "75500bb4143a052795ec7d2e61ac3261"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c6-f930-46e4-a8ef-40be950d210f",
"value": "0f6b00b0c5a26a5aa8942ae356329945"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c6-d694-471a-ba3d-42fb950d210f",
"value": "d316848ce47c098ccfe72aa7311aaffa"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c7-3908-457d-b6da-4b4a950d210f",
"value": "e975d5b29d988929e5ad3a8fa19083d1"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c7-f710-400a-b10e-4183950d210f",
"value": "667989ffa5e77943f3384e78adf93510"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c8-8a7c-4669-99c1-407b950d210f",
"value": "5a78974df88ab6a67bb72a5c7a437fb2"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c8-90c8-4497-b3b9-41f1950d210f",
"value": "8ece7de82e1bdd4659a122c06ea9533e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c8-869c-48dd-ac91-453e950d210f",
"value": "850a7e877d8e68188714ff5344f6fc15"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c9-13a4-4f6e-ac55-41ea950d210f",
"value": "3afa9243b3aeb534e02426569d85e517"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5c9-b69c-4c35-afa1-4cde950d210f",
"value": "0c0a39e1cab4fc9896bdf5ef3c96a716"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5ca-fac8-4bfa-972c-49a9950d210f",
"value": "ca9644ef0f7ed355a842f6e2d4511546"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5ca-4400-4e45-b501-4a60950d210f",
"value": "f586edd88023f49bc4f9d84f9fb6bd7d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5ca-9330-4ec9-b734-44a3950d210f",
"value": "3cbb5664d70bbe62f19ee28f26f21d7e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cb-ee48-4590-9d3c-4c51950d210f",
"value": "d1bab4a30f2889ad392d17573302f097"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cb-6ab0-476f-bbe1-47f1950d210f",
"value": "19417f7551bc54db6783823325557773"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cc-ee90-4d35-8753-42d5950d210f",
"value": "bb269704ba8647da97377440d403ae4d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cc-2bcc-4825-bf97-46d3950d210f",
"value": "fa89eeaac3c9de18aee8c58b6580dfea"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cd-c814-493b-b4ca-417d950d210f",
"value": "81df89d6fa0b26cadd4e50ef5350f341"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cd-66f0-472d-91da-43fe950d210f",
"value": "06b0af6ff00647f57119d8a261829f73"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cd-630c-4d15-a1c6-41b1950d210f",
"value": "dd0494eb1ab29e577354fca895bec92a"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5ce-b6b0-44e0-bf17-4c99950d210f",
"value": "6fccfa1559a64edff571d6042abd8a59"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5ce-af00-4d35-ad8a-4618950d210f",
"value": "9ae3b326cf716fbccbecfd292846a3a9"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cf-9268-4c19-a800-4033950d210f",
"value": "598ff82ea4fb52717acafb227c83d474"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5cf-bcec-4571-a3a8-4db3950d210f",
"value": "0b05143e2e4b56dbf5ef7a58b5013bc3"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5f8-c0f0-4c01-bae7-4c05950d210f",
"value": "9c2f3bbfbb1cdfe30ef0aad88d461daf"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5f9-854c-49eb-ba92-4a83950d210f",
"value": "7d10708a518b26cc8c3cbfbaa224e032"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5f9-71dc-451a-8d38-47cf950d210f",
"value": "6235e5a45fa51a10826ced8e90adcf93"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5f9-5374-42ee-a53d-4cd7950d210f",
"value": "ad879f64e9137836283592720d95aadb"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5fa-9024-4024-bae7-4cf1950d210f",
"value": "af406d35c77b1e0df17f839e36bce630"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5fa-8a4c-4b0a-96aa-48a2950d210f",
"value": "6ec0f91b5b74bc06ebb561cdeb0f4796"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5fb-0a20-4e66-9296-4186950d210f",
"value": "80dfcb6ec50f381f153ade2866f18d4b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5fb-7360-4f17-b02f-4c8d950d210f",
"value": "f50460d3ddcc9628d0e86de1aa292895"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "md5",
"uuid": "5902e5fb-f178-4d01-ad62-4c25950d210f",
"value": "3ebbfeee3a832c92bb60b531f749230e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e653-fc5c-4edb-b3fd-4973950d210f",
"value": "56d6c3ffa4f3d5ae742f937fae85f0995814cf90"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e653-de44-4429-9839-41fd950d210f",
"value": "56126b1c19c1121c0f5065204ef5cc4633079b98"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e654-0b04-4601-9568-465b950d210f",
"value": "741e955a9e458a70b5c085b3bfba800fdfb4ccde"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e654-055c-43ef-ba1d-4bc6950d210f",
"value": "009b639441ad5c1260f55afde2d5d21fc5b4f96c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e654-bc68-4987-ae4a-43ac950d210f",
"value": "7fe6c8191749767254513b03da03cfbf6dd6c139"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e655-d74c-4a83-a967-4231950d210f",
"value": "7cace2e51e8ecc5ddb9720a8dc9e1f3596fe343b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e655-feb8-43ad-8658-49b0950d210f",
"value": "2c1b42e8c8acea5082275b6ea5f5c64ebaf4fa30"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e656-0fd8-450c-ada6-4541950d210f",
"value": "42d5c9c4c02e6d5c88ec0acce72327389a92f0d7"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e656-5fb0-4f0e-bcf2-4733950d210f",
"value": "a954a3f20ef8065d98d9e3a3c5ae254e27c63bf6"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e656-ef84-49b8-9c47-4ba5950d210f",
"value": "7cb04a4b86d998604341bc2b610a0a556830993d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e657-09b8-484e-8a24-433a950d210f",
"value": "95ab56ab1f0d4f010569ead7915fbc833a36cd73"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e657-d25c-472b-b59f-42f4950d210f",
"value": "1df29c63c917b089fe0fc099e2783c0c679892e5"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e658-c834-4001-8bb4-4958950d210f",
"value": "01edb82de7b9666eaa5d2791a14092f2e73d2795"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e658-68e4-4a2e-9892-4659950d210f",
"value": "a7d0b38bda630c927820380d311ddc70a9606407"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e658-32fc-49f9-a785-4c9c950d210f",
"value": "1f412a62f50ff71f0b2b2f54aaa980962ebfd8a4"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e659-fb4c-4cfa-8cdd-49a5950d210f",
"value": "4132068417bcbffec16ac655a14f29aa74189fcb"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e659-bbc8-4339-9b42-4819950d210f",
"value": "b1043250c499ccf0ad56a688ccce662f42386869"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65a-f3f4-43a3-8080-4af4950d210f",
"value": "aee17dbab01ed334bb94506fcbc2ed259242159e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65a-8de0-4a01-8a8f-419a950d210f",
"value": "68e3f80012a78518ddbde055b5e42dd4d82e58e5"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65a-b574-4d3a-b59a-4abe950d210f",
"value": "83d419bc812d08c9d09baa49a4313a81eda54702"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65b-6564-4458-8762-41a4950d210f",
"value": "aaee7385b2c836e9d3e14812807f911c2144a894"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65b-ffc4-4c53-a53f-460d950d210f",
"value": "df8f49a3fdf8a9d550b22d65d21a8006ff593ac4"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65c-2348-438f-b23c-478d950d210f",
"value": "de5af856804974ba3df03928fff03447e8f4c9c2"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65c-61cc-4be3-9e3b-4eba950d210f",
"value": "a91669bb4dcb713e997ddf98417730de78cb990a"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65d-4a58-4a8e-b9d1-4044950d210f",
"value": "b966657d35bba9416775d320bb87086001995bbe"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65d-ee6c-429b-9199-4848950d210f",
"value": "6edd9bb17a999b5f5abcf123a2701e4ea4ada9a2"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65d-f29c-4253-8cee-40d1950d210f",
"value": "5b045d98606f000a236b1bd4ac4c9e482b3f5475"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65e-b668-4aab-80f3-45d5950d210f",
"value": "2d5c5e210c7db4ba6012bd761154db0d1f5cd658"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65e-0cd4-4135-ac17-46e4950d210f",
"value": "86cea2cb7510a6031d44b8472d806ae2205f438f"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65e-efbc-443e-9cc2-468d950d210f",
"value": "61df36789f7d2314c79a41be512300d7c84131bb"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65f-ae3c-4482-835c-4164950d210f",
"value": "bd4110fdaa3c99c09ad4883085ddd62b6f9f9bd7"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e65f-ce5c-457b-b9f5-456e950d210f",
"value": "9188923fcfca6bda9e13ec2efeb3b4ccc5f560cc"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e660-bc30-4b0e-aae1-458e950d210f",
"value": "81ba8a1a9e26950c52580f5b046dbe1c8b6f6868"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e660-e324-4fc7-b269-4e82950d210f",
"value": "da3cb3ade7f129838ff3c816b223859d91d377b6"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e660-6e78-4f99-a123-4da3950d210f",
"value": "c793c4e63fe61140dc92749a38e63820776548a3"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e661-a9a8-4d6c-afb5-4984950d210f",
"value": "9e0b78aacf4871cddc0468d517f928970fd54c8d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e661-4cc0-4880-87cd-4f84950d210f",
"value": "2a07420c768fa49c05327741e0709c3ac5a71a06"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e695-514c-4401-9ea2-4a1e950d210f",
"value": "e418387dd296e00aea9141c8c4b73690495640a0"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e696-01d8-4797-9958-4b6a950d210f",
"value": "aaec782a5256150c88b75c912bf4d091cf0c32e9"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e696-27b0-48aa-9d0e-446d950d210f",
"value": "3cfb1bf0063ea9d893f9e95c11e223cc06299337"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e697-cfd4-4d89-b930-4fe8950d210f",
"value": "a6284ed7e11fdffa6b187c0fefafa421e0f56318"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e697-b3bc-412f-a6d8-4eb5950d210f",
"value": "a82a59fd073c3c868be93f52d09203e93e87d79a"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e697-d98c-4944-939c-45c4950d210f",
"value": "aaa19e15cfe66a105428048f3242889afae170dd"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha1",
"uuid": "5902e698-6630-4f06-a84d-4be8950d210f",
"value": "0876f0cb9d03bc5539b242a374976b217095ec0d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e5-4c5c-448f-ae32-431d950d210f",
"value": "ae6b45a92384f6e43672e617c53a44225e2944d66c1ffb074694526386074145"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e5-23d4-4a68-ae54-40e1950d210f",
"value": "fd6a956a7708708cddff78c8505c7db73d7c4e961da8a3c00cc5a51171a92b7b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e6-5e0c-47c7-b168-443d950d210f",
"value": "2c71eb5c781daa43047fa6e3d85d51a061aa1dfa41feb338e0d4139a6dfd6910"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e6-be6c-454f-a5f8-4aff950d210f",
"value": "6605b27e95f5c3c8012e4a75d1861786fb749b9a712a5f4871adbad81addb59e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e6-f798-4d9e-a0a2-43ff950d210f",
"value": "fadf362a52dcf884f0d41ce3df9eaa9bb30227afda50c0e0657c096baff501f0"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e7-59a8-4577-ad21-4148950d210f",
"value": "e88f5bf4be37e0dc90ba1a06a2d47faaeea9047fec07c17c2a76f9f7ab98acf0"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e7-1f98-4343-984c-49fd950d210f",
"value": "e6ecb146f469d243945ad8a5451ba1129c5b190f7d50c64580dbad4b8246f88e"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e7-3650-4c3b-b211-4ed1950d210f",
"value": "4521a74337a8b454f9b80c7d9e57b4c9580567f84e513d9a3ce763275c55e691"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e8-e2e4-439a-8de5-4d6c950d210f",
"value": "f251485a62e104dfd8629dc4d2dfd572ebd0ab554602d682a28682876a47e773"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e8-f79c-48a2-af57-421b950d210f",
"value": "b20ce00a6864225f05de6407fac80ddb83cd0aec00ada438c1e354cdd0d7d5df"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e9-cf44-4bd9-a55d-4f75950d210f",
"value": "9a6692690c03ec33c758cb5648be1ed886ff039e6b72f1c43b23fbd9c342ce8c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e9-de48-4402-b680-4e15950d210f",
"value": "cb0c8681a407a76f8c0fd2512197aafad8120aa62e5c871c29d1fd2a102bc628"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6e9-8c08-4099-a01b-4bb1950d210f",
"value": "45d804f35266b26bf63e3d616715fc593931e33aa07feba5ad6875609692efa2"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ea-cf94-4fde-b7c5-4c0c950d210f",
"value": "19aa5019f3c00211182b2a80dd9675721dac7cfb31d174436d3b8ec9f97d898b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ea-83d8-405a-9daa-4ecb950d210f",
"value": "6392e0701a77ea25354b1f40f5b867a35c0142abde785a66b83c9c8d2c14c0c3"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6eb-44cc-450b-803a-42e8950d210f",
"value": "6c7e85e426999579dd6a540fcd827b644a79cda0ad50211d585a0be513571586"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6eb-b4d4-410d-9dc4-4b7f950d210f",
"value": "dcff19fc193f1ba63c5dc6f91f00070e6912dcec3868e889fed37102698b554b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6eb-c414-4aae-bd23-427a950d210f",
"value": "7eeaa97d346bc3f8090e5b742f42e8900127703420295279ac7e04d06ebe0a04"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ec-5d30-47b8-b9e8-4145950d210f",
"value": "a6b6c66735e5e26002202b9d263bf8c97e278f6969c141853857000c8d242d24"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ec-6e44-4ccf-8bbb-4703950d210f",
"value": "5412cddde0a2f2d78ec9de0f9a02ac2b22882543c9f15724ebe14b3a0bf8cbda"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ec-9b44-4a9a-bb6c-4bd9950d210f",
"value": "92dbbe0eff3fe0082c3485b99e6a949d9c3747afa493a0a1e336829a7c1faafb"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ed-d910-4914-b444-4c2d950d210f",
"value": "5961861d2b9f50d05055814e6bfd1c6291b30719f8a4d02d4cf80c2e87753fa1"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ed-b790-482f-bb86-429f950d210f",
"value": "316e89d866d5c710530c2103f183d86c31e9a90d55e2ebc2dda94f112f3bdb6d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ee-2a0c-430f-b912-4350950d210f",
"value": "bc2f07066c624663b0a6f71cb965009d4d9b480213de51809cdc454ca55f1a91"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ee-bf4c-41a0-be9b-4433950d210f",
"value": "c21eaadf9ffc62ca4673e27e06c16447f103c0cf7acd8db6ac5c8bd17805e39d"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ee-cf2c-4a47-85fe-4009950d210f",
"value": "4cc0adf4baa1e3932d74282affb1a137b30820934ad4f80daceec712ba2bbe14"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ef-8d34-4938-9642-4e15950d210f",
"value": "312dc69dd6ea16842d6e58cd7fd98ba4d28eefeb4fd4c4d198fac4eee76f93c3"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6ef-5544-47d5-a381-442f950d210f",
"value": "76721d08b83aae945aa00fe69319f896b92c456def4df5b203357cf443074c03"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f0-2798-476c-acc3-47fe950d210f",
"value": "c6b8ed157eed54958da73716f8db253ba5124a0e4b649f08de060c4aa6531afc"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f0-66d4-48a9-9bbc-4f73950d210f",
"value": "f1ca9998ca9078c27a6dab286dfe25fcdfb1ad734cc2af390bdcb97da1214563"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f0-7324-46e1-a25f-4941950d210f",
"value": "9f01dd2b19a1032e848619428dd46bfeb6772be2e78b33723d2fa076f1320c57"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f1-8254-41e6-962c-4d40950d210f",
"value": "ca119725c2cef7baad0690d82b770c25ff64c7e7f1fc9e0e65c91d20151cd204"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f1-e1ac-41cc-8a05-4595950d210f",
"value": "6bc2558eb8915edc19835d9e734023a2368f876971f5580478782c7444f9581c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f1-a318-4e20-94b4-4a71950d210f",
"value": "02e702af02a6b9a8b31cd470c18e383093ef4ed404811b414d6d131df01f9acd"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f2-8ed8-4b1e-9725-4812950d210f",
"value": "79f61eda72c41b5ec526a3d5a1a91f86f0bc0eca470e07ab50d9626231143f11"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f2-0df8-4915-9598-484d950d210f",
"value": "2e1f902de32b999642bb09e995082c37a024f320c683848edadaf2db8e322c3c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f3-5070-4483-b9c9-4cbc950d210f",
"value": "fb4e516e1e2a369d1cdfb208ee885cb4848bed707a0514367f464c8e7519cb50"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f3-2a34-472a-844d-48f4950d210f",
"value": "af9dde68c73d69ea535103e963f09587b6aa020081bbce06347de05fa469c257"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f3-c440-4eef-8f85-45c6950d210f",
"value": "ff0b79ed5ca3a5e1a9dabf8e47b15366c1d0783d0396af2cbba8e253020dbb34"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "sha256",
"uuid": "5902e6f4-11c0-48fd-b43c-4fbd950d210f",
"value": "fcccc611730474775ff1cfd4c60481deef586f01191348b07d7a143d174a07b0"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72c-a6c8-46e6-8bf6-496e950d210f",
"value": "3072:UxSo8vomCcZsPvRqlWgY0VMD+S7VrlGgOSqvS1Wz+5CsoB5wV+JcrVgmzBsNuzMU:UCacZsYRZVS9d5Cg+4HBquzMCZfR"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72d-3fa4-4dd3-9f17-4535950d210f",
"value": "3072:3DQcggG8+EfcByY7oNPgaKxUuPiSCbEggvQ4+8DhqKPmCtI0mfBSXBKBlNuPiu77:3Eyi76PgadK3+8DwKPJm0mZ0BiJVm"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72d-4558-40de-907c-4714950d210f",
"value": "3072:4vPHoYTlo34nioyhHYQgnzPNYfPqIcsAZCm7kCVjxkjJ7buRoHSXBKBlQ3JB2Ioh:8QYTG34ioygzPyXa5ZG97r0BiQjoh"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72e-f614-4147-82e8-4dfb950d210f",
"value": "3072:dU8Odn8h0mf8adYxVvMsZKQRpPiSCb/jgUkF525/xpLETTgOUQkwysz9oSXBKBlA:gE5Sx9MsZyTO52hxcJ3LzC0BiNVY"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72e-56d0-4b0a-8d78-498e950d210f",
"value": "3072:MiPK+qCOhn+wJyh/FQgnzPNY+2JdkFn4T8BQVvi0yfYn+6uRoHSXBKBlQ3JQ2Iok:9PqCkn+wJyhzPUd24T8zcn+y0BiQqok"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72e-0edc-4912-a867-4045950d210f",
"value": "6144:H+kHzlkmztsXX23lt67TB0BtuXaA0BiNWn6k:H+kpztsXX2mCGKFrn6k"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72f-3774-4b50-ba68-43ff950d210f",
"value": "3072:3Kb43dClPyOuaAnvnj33Lsl62TYiGF0b2tzO37I42+KT4rhLSdtSXBKBlLqdb7kB:o4cVFuamvqy0w82+KQhLSdt0BiN239a"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72f-5bf4-4a4b-af30-4b08950d210f",
"value": "6144:QX4y8bL7IpF2c1wbxZ/dXf0Bij0BiuJ39c:QX/8bc11wbxZ/B61jJ39c"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e72f-2f2c-4c1d-b75b-4b38950d210f",
"value": "6144:Gv7GYbWMVUyBp7E7lsxJen0Bij0BiPxH+ku:G7GaWGp7E7GJJ1WH+/"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e730-3314-41f9-9644-40f5950d210f",
"value": "6144:F74HhRcj0/EkRAMAY5nwxD1Ar0Bij0BiUXxA:F7sRcjsEY5nwxJT1PXxA"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e730-608c-4f5a-a095-4168950d210f",
"value": "3072:qs/2DuT8RveN3yES0Sg2XriusGgLD5tDwHF1pSXBKBlvxH+ka:J/2GK2rS0SR0DOfp0BivxH+ka"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e731-a9e8-48f1-a518-4be5950d210f",
"value": "3072:so1xoijglqSBNBGaMgPsGkngxDVaUcTr0PWTFPLHF:hYz4SBNB8gLxYUcTr0PWZPLHF"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e731-4258-4235-87af-429d950d210f",
"value": "6144:hY20AljuB28YZgqEPfS1fE1G5rJF6QLBLcTHyy7+xwga/fsB:hY20AljdZgBPfKfCQtLSH5+9a/kB"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e731-ee38-473a-8658-41b7950d210f",
"value": "6144:65JeDKbpqYklgI7r43sc25BMv+a0Bij0BipLm:65UsqdP7rsJ6106"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e732-0cd8-490f-8901-4d40950d210f",
"value": "49152:Na175O/mZxrkaH1EN5/yxnxEil7F8vSZBWwj186KQGwi38KQrF+FO7p1FzohbJq:uO/mZxbHW7yxnxECF8vSZBW+Pbi38KQs"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e732-5ea8-406e-9eab-4f52950d210f",
"value": "12288:0nlPVTFqOhmW+QjE2UnNsQwIXKosg4M3Ic1SqP02JXS0n69se:0nl/7mW+QjaNxbN4qIkila"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e733-675c-44ef-abe5-4e79950d210f",
"value": "6144:VmYFCN2tM+gfmkZxuMh2C30rzhDt7nLLzMCZf:VaAMFZxph2CkvhBLn"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e733-7998-4754-9211-4afd950d210f",
"value": "3072:UcJNysymEx13p8u533Xyn3kCzRGyAK/Zu39tF3uBw8oEU5a1SDzFLzMCnZf9IAaY:UciLXh3K9zZu39tQC8oEnIBzMCZfZaY"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e733-9b24-4f03-964e-4650950d210f",
"value": "3072:fNPaNYarzoyHOj+qPPkD+KFVSXpKt3TPsRtCywElqG:Vydbw+4kDH8XpKd4DxwI"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e734-ebec-402e-ba04-4202950d210f",
"value": "3072:fNPaNYarzoyHOj+qPPkD+KFVSXpKt3TPsRtCywElqG3:Vydbw+4kDH8XpKd4DxwIz"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e734-9864-49dc-b70f-439b950d210f",
"value": "3072:aK55Dxg5oMnR5kpTsYQQf0Lt5rHWl/U5HXLuC0oCE:H55y7nR57YLKnal/U5ato"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e735-f920-440f-ab1b-4002950d210f",
"value": "6144:ROCKoy/OA/y5wSjZEug2IVAQR7KOSp0BiO:E05ay/jZxNQdP7"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e735-7770-4a6f-95be-4518950d210f",
"value": "6144:JfV5IBcpSVVUIr0Izm2nUzXAzUW0BiNoNn6R:JfVrSV6Ir0IVAXAIvFn6R"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e735-4848-47b8-91ef-4e6a950d210f",
"value": "3072:Eif4klql7aOWKEgXn7IfLsl62sPG2kOqfR7CxP76k+ffaF+6E4SXBKBljSXBKBlE:l4hptWKpXiyDM6kv+6E40Bij0Biw39L"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e736-a9d4-42f5-b703-461a950d210f",
"value": "3072:qs/2DuT8RveN3yES0Sg2XriusGgLD5tDwHF1pSXBKBlvxH+k9:J/2GK2rS0SR0DOfp0BivxH+k9"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e736-6588-49fc-aecf-4e25950d210f",
"value": "6144:I7JgxvGuoEMcJzEgTZmVibMq9x1JPvqbPjK0BigdCV:INgcEFZTZmVIMq9x1JPvqbPj78"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e736-9334-4693-a36e-4a02950d210f",
"value": "3072:hi7HsQQXwwybPRzHQMlspVicPQMq9x1JPvqbPjUCtorSSXBKBlp4:hi7HQ6HZmVibMq9x1JPvqbPjR0Bi+"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e737-a5b4-46f6-8589-4b02950d210f",
"value": "6144:cmJ7yC3K9zZu39tQC8oE2QQzMCZf4zMCZf4zMCZfR:cmv3K9V43j9xqqp"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e737-7988-4d47-8969-43c3950d210f",
"value": "768:Ga74qxW588yzTaq/nYkZIsKF/Ia5QaYuIzQchjtA5TykeovEDln7+qniYwP0:VSVyzffYkZi/IaDYljtAkkeN6kwP0"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e738-59dc-4f5d-8a6f-4c59950d210f",
"value": "6144:W2bVESI/Gzfa0YrJkf41akMM0TWr1DAXnpld7aiAt:pCHtg48kqTE1DAXpld3A"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e738-69c8-4d49-bb75-4bd2950d210f",
"value": "6144:a6Tl0vnG7PKavITBYAlCkkMUbWD904I/vRqNM6iAt:ZiaQdYA0kSb8904I/pqN+A"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "ssdeep",
"uuid": "5902e738-1a08-4e73-b52a-4caf950d210f",
"value": "6144:rqfg5tD+sZysueMjObWHJAbM0iKL1lttqPxvkv3:2fqlOjewOARCtMx83"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e826-7a30-4474-b7f1-4d96950d210f",
"value": "abc.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e826-46dc-4b64-b736-46de950d210f",
"value": "ad.getfond.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e827-f998-48e2-82ff-4310950d210f",
"value": "additional.sexidude.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e827-4ff8-47b7-8381-4150950d210f",
"value": "announcements.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e828-ea24-4ce8-9c7b-4c58950d210f",
"value": "apple.cmdnetview.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e828-8af8-4dde-8368-4ba6950d210f",
"value": "apple.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e828-ed7c-4a10-838c-485c950d210f",
"value": "appledownload.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e829-8e44-4ec5-af65-475b950d210f",
"value": "appleimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e829-9b20-471b-a774-4718950d210f",
"value": "appleimages.longmusic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e829-e3e0-438e-b3ff-4b39950d210f",
"value": "appleimages.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82a-4924-4b1e-93d7-4c89950d210f",
"value": "applemirror.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82a-78bc-4232-b669-47ab950d210f",
"value": "applemirror.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82b-fccc-4e2a-95f3-42ce950d210f",
"value": "applemusic.isasecret.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82b-e4c8-4226-98dc-4772950d210f",
"value": "applemusic.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82b-16b0-4cae-9372-4183950d210f",
"value": "applemusic.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82c-80a0-4e98-8e13-404e950d210f",
"value": "applemusic.xxuz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82c-8d58-4e1b-9257-4c25950d210f",
"value": "applemusic.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82d-7fd8-4b91-9463-4ab9950d210f",
"value": "appleupdate.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82d-ab5c-40f1-926b-43cd950d210f",
"value": "appleupdateurl.2waky.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82d-4e60-4729-a0c9-4faa950d210f",
"value": "asfzx.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82e-8114-410d-9581-4080950d210f",
"value": "availab.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82e-4474-443b-8ea8-498c950d210f",
"value": "availability.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82f-15a0-45ad-88cc-4527950d210f",
"value": "babymusicsitetr.mymom.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82f-1668-40d0-bf1d-4f9b950d210f",
"value": "back.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e82f-eff0-459c-a864-498a950d210f",
"value": "back.mofa.dynamic-dns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e830-c4e4-4737-a3d1-4233950d210f",
"value": "bak.ignorelist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e830-49e0-424c-b0a3-40ad950d210f",
"value": "bak.un.dnsrd.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e831-2640-4aaa-9f5f-4131950d210f",
"value": "balance1.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e831-8638-4926-a59b-4991950d210f",
"value": "barber.faqserv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e831-c54c-4608-bf66-4d52950d210f",
"value": "bdoncloud.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e832-b318-43ac-9442-4de5950d210f",
"value": "be.mrslove.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e832-c474-4cb2-974b-420f950d210f",
"value": "bexm.cleansite.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e833-f084-47bb-806a-47d5950d210f",
"value": "bezu.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e833-886c-477f-a444-4e94950d210f",
"value": "billing.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e833-5bcc-46ab-a857-46ad950d210f",
"value": "blaaaaaaaaaaaa.windowsupdate.3-a.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e834-ac10-407e-92a2-4777950d210f",
"value": "brand.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e834-8edc-47ee-ba23-4662950d210f",
"value": "bulletproof.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e835-1c7c-4f21-ac18-4265950d210f",
"value": "catholicmmb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e835-6558-4b6e-9d6e-4243950d210f",
"value": "ccfchrist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e835-87a0-4bb1-ab4d-4c09950d210f",
"value": "cdn.incloud-go.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e836-f2d4-45e1-9e67-4ee8950d210f",
"value": "center.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e836-c07c-49df-b898-41dc950d210f",
"value": "cia.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e836-8858-471d-a4eb-45a5950d210f",
"value": "civilwar123.authorizeddns.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e837-4404-4029-8510-4281950d210f",
"value": "civilwar520.onmypc.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e837-1bd8-46ac-956e-4a74950d210f",
"value": "cloud-kingl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e838-ecdc-4792-989e-451e950d210f",
"value": "cloud-maste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e838-1310-4507-9347-43b7950d210f",
"value": "cnnews.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e838-3e64-4e0f-9be4-4361950d210f",
"value": "commissioner.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e839-b048-483e-80c9-42ec950d210f",
"value": "commons.onedumb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e839-ea04-4059-a0bc-4727950d210f",
"value": "contactus.myddns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e839-3bb0-4fe3-85ef-4a5b950d210f",
"value": "contactus.onmypc.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83a-ea9c-433e-baa0-4d8f950d210f",
"value": "contract.4mydomain.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83a-ba34-4096-a64e-49a5950d210f",
"value": "contractus.qpoe.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83a-45a0-407c-99f3-4738950d210f",
"value": "contractus.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83b-43bc-4884-b8e4-43cd950d210f",
"value": "cress.mynetav.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83b-3388-4583-9e99-417c950d210f",
"value": "ctldl.microsoftupdate.qhigh.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83c-b898-4f08-91ff-42a8950d210f",
"value": "ctldl.windowsupdate.authorizeddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83c-c42c-4666-ba00-40ec950d210f",
"value": "ctldl.windowsupdate.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83c-5924-42cc-8698-48dc950d210f",
"value": "ctldl.windowsupdate.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83d-a964-4103-96ac-4496950d210f",
"value": "ctldl.windowsupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83d-fb84-4595-a588-41cb950d210f",
"value": "ctldl.windowsupdate.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83d-5174-4578-a5f0-46ce950d210f",
"value": "ctldl.windowsupdate.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83e-e260-4c75-b8ac-4b52950d210f",
"value": "cvnx.zyns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e83e-12d0-46fc-93ed-488a950d210f",
"value": "cwiinatonal.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83f-c018-4e5a-a1d5-4c75950d210f",
"value": "dasonews.youdontcare.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83f-0e14-42d6-a5ba-44a1950d210f",
"value": "daughter.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e83f-ae44-4a2e-8935-4328950d210f",
"value": "de.onmypc.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e840-e554-4f67-adcd-4744950d210f",
"value": "dec.seyesb.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e840-b08c-49e4-8f20-4002950d210f",
"value": "details.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e841-362c-46c0-b973-4c5c950d210f",
"value": "development.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e841-9f04-4d8e-b763-45e7950d210f",
"value": "dick.ccfchrist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e841-19dc-4a74-9322-49d3950d210f",
"value": "digsby.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e842-ae68-4e34-b1dd-48b3950d210f",
"value": "disruptive.https443.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e842-3ee4-4d03-a914-4676950d210f",
"value": "document.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e843-ddf0-42f1-b116-4729950d210f",
"value": "download.windowsupdate.dedgesuite.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e843-0cb0-4917-ab31-46ec950d210f",
"value": "download.windowsupdate.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e843-9314-4684-8cc9-43b4950d210f",
"value": "download.windowsupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e844-f308-4ee4-8fe8-49ae950d210f",
"value": "download.windowsupdate.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e844-e2a0-4e6b-bb65-4a38950d210f",
"value": "ea.onmypc.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e845-512c-413c-8b10-45ce950d210f",
"value": "edgar.ccfchrist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e845-1894-443d-a6f0-427a950d210f",
"value": "ehshiroshima.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e845-3784-4b29-b5cf-4d00950d210f",
"value": "eric-averyanov.wha.la"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e846-c9fc-4e4b-ba5a-46a6950d210f",
"value": "eu.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e846-7fa8-4827-9a1e-4f3e950d210f",
"value": "eu.wha.la"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e847-4ca4-47ea-84ec-430e950d210f",
"value": "ewe.toshste.com"
},
{
"category": "Payload delivery",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902e847-4b04-439e-8b72-4274950d210f",
"value": "extraordinary.dynamic"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e847-6cec-4d24-adc0-4972950d210f",
"value": "fabian.ccfchrist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e848-b340-42a5-953e-4387950d210f",
"value": "fbi.sexxxy.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e848-4854-4702-9609-4754950d210f",
"value": "feed.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e849-5a80-4f5d-9a81-405e950d210f",
"value": "file.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e849-de2c-42f0-b29d-4ff7950d210f",
"value": "film.everydayfilmlink.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e849-e9c4-4bf4-aa16-4fc6950d210f",
"value": "findme.epac.to"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84a-202c-4e93-9204-40a9950d210f",
"value": "fire.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84a-0a24-4a0f-b5ff-47bd950d210f",
"value": "firstnews.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84b-9930-40df-9413-41af950d210f",
"value": "flea.poulsenv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84b-3a00-478e-8b80-4f15950d210f",
"value": "foal.wchildress.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84b-7b48-4fa9-9cfa-4f11950d210f",
"value": "fr.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84c-1170-41d0-a34e-46d1950d210f",
"value": "freegamecenter.onedumb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84c-12bc-4e22-b358-41fc950d210f",
"value": "ftp.2014.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84d-885c-4c8c-94f6-4d68950d210f",
"value": "ftp.additional.sexidude.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84d-7f80-4d06-b407-414d950d210f",
"value": "ftp.announcements.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84e-0024-481d-b95d-4c93950d210f",
"value": "ftp.appledownload.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84e-8dd0-4c2c-b328-4bb3950d210f",
"value": "ftp.appleimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84f-99d4-461d-a163-44c6950d210f",
"value": "ftp.appleimages.longmusic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84f-69b0-4d38-a81e-430a950d210f",
"value": "ftp.appleimages.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e84f-efd4-434f-a28b-4041950d210f",
"value": "ftp.applemirror.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e850-3f58-43ac-a601-4caa950d210f",
"value": "ftp.applemirror.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e850-81c4-4ee0-8782-4e7f950d210f",
"value": "ftp.applemusic.isasecret.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e851-9d04-4eaa-bcf9-499a950d210f",
"value": "ftp.applemusic.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e851-23ec-428f-a891-4a64950d210f",
"value": "ftp.applemusic.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e852-92ac-4470-a6a8-404c950d210f",
"value": "ftp.applemusic.xxuz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e852-80b0-416d-a036-459b950d210f",
"value": "ftp.applemusic.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e853-1df4-4bca-bda0-4c4c950d210f",
"value": "ftp.appleupdate.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e853-a878-4bab-b12d-40d6950d210f",
"value": "ftp.asfzx.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e853-cf44-4212-82dc-46c4950d210f",
"value": "ftp.availab.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e854-74a0-4fbf-96dc-49b4950d210f",
"value": "ftp.availability.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e854-d408-465c-bb4b-4bb0950d210f",
"value": "ftp.back.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e855-31d4-4e9c-a0bf-4bd9950d210f",
"value": "ftp.balance1.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e855-04c0-4ec4-9cc4-426a950d210f",
"value": "ftp.be.mrslove.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e856-1b54-46c6-9ac8-4ed4950d210f",
"value": "ftp.brand.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e856-9d28-44f9-a195-48cf950d210f",
"value": "ftp.bulletproof.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e857-46bc-4a06-9694-467f950d210f",
"value": "ftp.civilwar123.authorizeddns.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e857-6600-461e-a025-44c2950d210f",
"value": "ftp.civilwar520.onmypc.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e858-eee0-4627-913f-4471950d210f",
"value": "ftp.cnnews.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e858-dd7c-47d1-ac9d-4130950d210f",
"value": "ftp.commons.onedumb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e858-1e44-45c5-a6f9-4ba2950d210f",
"value": "ftp.contractus.qpoe.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e859-e608-4698-bd8a-4650950d210f",
"value": "ftp.de.onmypc.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e859-dbd0-4268-a237-4eba950d210f",
"value": "ftp.details.squirly.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85a-b7a4-4b74-8810-4625950d210f",
"value": "ftp.disruptive.https443.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85a-efd4-4d36-871b-4475950d210f",
"value": "ftp.ea.onmypc.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85b-5c5c-494f-be40-43c1950d210f",
"value": "ftp.ehshiroshima.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85b-1200-47aa-aa56-4e0a950d210f",
"value": "ftp.eric-averyanov.wha.la"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85c-b5d4-480e-8668-46c5950d210f",
"value": "ftp.eu.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85c-e1d8-446e-b84b-4fbf950d210f",
"value": "ftp.eu.wha.la"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85c-ebe0-484a-9200-4b80950d210f",
"value": "ftp.fire.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85d-551c-44ee-891f-4b76950d210f",
"value": "ftp.fr.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85d-75f8-40ab-904f-41a2950d210f",
"value": "ftp.fuck.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85e-0ba8-4002-bd77-4749950d210f",
"value": "ftp.generat.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85e-1524-44a9-89a2-4beb950d210f",
"value": "ftp.hii.qhigh.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85f-2768-4226-92e8-42e8950d210f",
"value": "ftp.innocent-isayev.sexidude.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e85f-7a18-4fa9-98e9-4e01950d210f",
"value": "ftp.invoices.sexxxy.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e860-9e70-46a4-b3fb-4908950d210f",
"value": "ftp.itlans.isasecret.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e860-c19c-4089-9f24-4098950d210f",
"value": "ftp.itunesdownload.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e860-5228-4b48-bac2-4f3a950d210f",
"value": "ftp.itunesdownload.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e861-cabc-4ec5-9a52-4d6c950d210f",
"value": "ftp.itunesimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e861-bd54-410d-97cb-49f9950d210f",
"value": "ftp.itunesimages.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e862-6598-4a14-9615-48f9950d210f",
"value": "ftp.itunesimages.qpoe.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e862-cec4-462b-aafd-4bf6950d210f",
"value": "ftp.itunesmirror.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e863-9ed8-4325-a2b0-4e99950d210f",
"value": "ftp.itunesmirror.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e863-ddf8-45a3-b8e3-4e00950d210f",
"value": "ftp.itunesmusic.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e864-5128-4834-ba0a-4797950d210f",
"value": "ftp.itunesmusic.jetos.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e864-66f0-420a-a729-4507950d210f",
"value": "ftp.itunesmusic.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e864-a180-4574-b6dd-419d950d210f",
"value": "ftp.itunesmusic.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e865-5498-4880-a0bf-493f950d210f",
"value": "ftp.itunesupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e865-1460-45b0-86b6-47a1950d210f",
"value": "ftp.itunesupdates.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e866-f4b8-4432-bb48-4d4f950d210f",
"value": "ftp.jimin.mymom.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e866-19ac-4fd0-8e75-4985950d210f",
"value": "ftp.key.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e867-9c4c-44f9-b49a-4f58950d210f",
"value": "ftp.knowledge.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e867-e260-4a9a-8d40-45a0950d210f",
"value": "ftp.lan.dynssl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e868-01e4-4c94-9b75-4bda950d210f",
"value": "ftp.latestnews.epac.to"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e868-9b9c-4d2d-b669-4f75950d210f",
"value": "ftp.latestnews.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e868-eef0-4659-85ab-476b950d210f",
"value": "ftp.macfee.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e869-ffe0-448a-9855-4c0e950d210f",
"value": "ftp.maffc.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e869-4dd0-475e-a229-437b950d210f",
"value": "ftp.malware.dsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86a-55ac-4c99-8c61-42d2950d210f",
"value": "ftp.mason.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86a-ed98-487a-9ba9-4086950d210f",
"value": "ftp.mediapath.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86b-b434-44e1-a7fc-4bdf950d210f",
"value": "ftp.microsoft.got-game.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86b-732c-4c4f-84ce-48dd950d210f",
"value": "ftp.microsoft.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86b-5fec-488f-bdeb-45d8950d210f",
"value": "ftp.microsoftimages.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86c-64f4-49de-b80c-4044950d210f",
"value": "ftp.microsoftmusic.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86c-4634-4c99-8a1e-43bc950d210f",
"value": "ftp.microsoftqckmanager.pcanywhere.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86c-310c-4ff7-8658-435c950d210f",
"value": "ftp.microsoftupdate.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86d-cc0c-4487-88bc-4324950d210f",
"value": "ftp.microsoftupdate.qhigh.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86d-f950-47d3-bcaa-456a950d210f",
"value": "ftp.mmy.ddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86e-1d18-4401-883c-494e950d210f",
"value": "ftp.mod.jetos.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86e-a41c-40d8-a9d4-4171950d210f",
"value": "ftp.mofa.dynamic-dns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86e-4800-461e-8bc5-4018950d210f",
"value": "ftp.mofa.ns01.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86f-c35c-4da7-9794-44a9950d210f",
"value": "ftp.moscowdic.trickip.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86f-9c3c-4a11-b03b-497a950d210f",
"value": "ftp.musicfile.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e86f-c1f8-4989-b6fb-40b2950d210f",
"value": "ftp.na.americanunfinished.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e870-af6c-47a9-80bb-48f0950d210f",
"value": "ftp.newsdata.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e870-224c-431a-b2b7-47ae950d210f",
"value": "ftp.no.authorizeddns.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e871-e740-446b-a1dd-4f0c950d210f",
"value": "ftp.nt.mynumber.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e871-ea28-4cc3-af3e-43dc950d210f",
"value": "ftp.nz.compress.to"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e871-eb4c-427d-82a7-4e90950d210f",
"value": "ftp.ol.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e872-cbfc-4f39-a7ee-4e9d950d210f",
"value": "ftp.oracleupdate.dns04.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e872-bbd4-458e-8e91-4086950d210f",
"value": "ftp.portal.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e873-6bb8-4b9b-965e-4fc5950d210f",
"value": "ftp.portal.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e873-108c-4b32-8f66-44be950d210f",
"value": "ftp.portalser.dynamic-dns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e873-1e90-423e-ac20-4de7950d210f",
"value": "ftp.praskovya-matveyeva.mefound.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e874-7b74-4d1f-a5bb-4345950d210f",
"value": "ftp.praskovya-ulyanova.dumb1.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e874-5540-49e1-ac6b-4528950d210f",
"value": "ftp.products.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e875-664c-4660-bbff-4963950d210f",
"value": "ftp.products.cleansite.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e875-d0d4-4099-84d3-4cb1950d210f",
"value": "ftp.products.serveuser.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e876-c720-4a64-9552-447c950d210f",
"value": "ftp.purchase.lflinkup.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e876-a0f0-4834-9064-4f76950d210f",
"value": "ftp.recent.dns-stuff.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e877-7284-417f-b0ee-4322950d210f",
"value": "ftp.recent.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e877-90f4-41a2-808d-4946950d210f",
"value": "ftp.referred.gr8domain.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e877-918c-4284-b45d-4ad2950d210f",
"value": "ftp.referred.yourtrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e878-13a4-45b4-bc5b-46db950d210f",
"value": "ftp.register.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e878-2a50-43f4-b635-4d73950d210f",
"value": "ftp.registration2.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e879-6470-4bf2-aa60-446d950d210f",
"value": "ftp.registrations.4pu.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e879-0904-4655-be1d-402c950d210f",
"value": "ftp.registrations.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87a-c76c-46b4-b525-43f5950d210f",
"value": "ftp.remeberdata.iownyour.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87a-1888-48b0-8620-4ae5950d210f",
"value": "ftp.reserveds.onedumb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87b-7728-4737-b03e-4524950d210f",
"value": "ftp.rethem.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87b-451c-4e14-beb9-439b950d210f",
"value": "ftp.sdmsg.onmypc.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87b-12f4-4f32-9fd1-49c7950d210f",
"value": "ftp.se.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87c-1b9c-4c96-ae05-42e9950d210f",
"value": "ftp.senseye.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87c-8300-4e01-89f9-4db4950d210f",
"value": "ftp.septdlluckysystem.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87d-fd70-452d-b105-40b3950d210f",
"value": "ftp.seraphim-yurieva.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87d-6658-4475-89e6-4cdd950d210f",
"value": "ftp.serv.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87d-b864-40e3-a77c-4866950d210f",
"value": "ftp.server1.proxydns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87e-60f0-4c80-9098-4081950d210f",
"value": "ftp.seyesb.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87e-4dac-47d1-a651-4504950d210f",
"value": "ftp.shugiin.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87f-e5c0-41bc-a26b-434a950d210f",
"value": "ftp.sstday.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e87f-51ec-4a62-abf3-4ed8950d210f",
"value": "ftp.support1.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e880-f5dc-4e19-8dbf-45ee950d210f",
"value": "ftp.svc.dynssl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e880-f020-4056-8d72-4e12950d210f",
"value": "ftp.synssl.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e880-fe5c-4d41-b3cf-4124950d210f",
"value": "ftp.tamraj.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e881-4430-4413-87a3-4c55950d210f",
"value": "ftp.ticket.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e881-be38-43c0-a4b9-4f8c950d210f",
"value": "ftp.tophost.dynamicdns.co.uk"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e882-eeb0-470b-9815-4927950d210f",
"value": "ftp.transfer.lflinkup.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e882-0c74-4ad3-92f6-4f0e950d210f",
"value": "ftp.transfer.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e883-8794-4344-a880-498d950d210f",
"value": "ftp.ugreen.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e883-6034-4cd9-afb3-45c4950d210f",
"value": "ftp.uk.dynamicdns.org.uk"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e884-ec6c-4fc4-b639-4947950d210f",
"value": "ftp.un.ddns.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e884-7dec-4cd5-b2a9-4580950d210f",
"value": "ftp.un.dnsrd.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e885-ae38-4ccd-b4c6-4c39950d210f",
"value": "ftp.usa.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e885-c7b4-4cb1-9511-4eef950d210f",
"value": "ftp.well.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e885-a45c-4a9f-8513-4c42950d210f",
"value": "ftp.windowfile.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e886-a034-459d-9b94-4838950d210f",
"value": "ftp.windowsimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e886-45fc-4dcd-b2cb-4e5f950d210f",
"value": "ftp.windowsmirrors.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e887-7860-48c8-8805-40f6950d210f",
"value": "ftp.windowsupdate.2waky.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e887-0018-4d66-ad66-4157950d210f",
"value": "ftp.windowsupdate.3-a.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e888-99d8-43a0-abcd-4eb2950d210f",
"value": "ftp.windowsupdate.authorizeddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e888-6f44-491c-8160-4a5e950d210f",
"value": "ftp.windowsupdate.dns05.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e889-38a0-4217-afa8-46f6950d210f",
"value": "ftp.windowsupdate.esmtp.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e889-d8e8-4009-9a39-4dea950d210f",
"value": "ftp.windowsupdate.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e889-fa28-4c69-ba83-4291950d210f",
"value": "ftp.windowsupdate.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88a-9264-4143-a8c7-4a65950d210f",
"value": "ftp.windowsupdate.gettrials.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88a-ba74-4732-9733-43ef950d210f",
"value": "ftp.windowsupdate.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88b-b044-4f3f-98b7-430a950d210f",
"value": "ftp.windowsupdate.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88b-cd60-4052-ac2e-42cf950d210f",
"value": "ftp.windowsupdate.lflink.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88c-ac44-491f-b834-4d1b950d210f",
"value": "ftp.windowsupdate.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88c-0d20-4527-a26a-463a950d210f",
"value": "ftp.windowsupdate.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88d-393c-413e-bcca-4c22950d210f",
"value": "ftp.windowsupdate.rebatesrule.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88d-4ebc-421c-90cc-46f1950d210f",
"value": "ftp.windowsupdate.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88d-1258-474a-ac60-450c950d210f",
"value": "ftp.windowsupdate.serveusers.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88e-5ec0-499c-a58f-4d21950d210f",
"value": "ftp.yandexr.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88e-0894-4a36-8cc7-4283950d210f",
"value": "fukuoka.cloud-maste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88f-a12c-496e-8027-497b950d210f",
"value": "gavin.ccfchrist.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e88f-40f8-447d-98eb-46e4950d210f",
"value": "generat.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e890-9370-4f31-90e4-4d5a950d210f",
"value": "gifuonlineshopping.mynumber.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e891-c74c-4fe4-9204-4008950d210f",
"value": "glicense.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e891-e514-46ee-96a6-4e01950d210f",
"value": "globalnews.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e892-8a10-4e18-9c06-4b37950d210f",
"value": "grammar.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e892-e2bc-427b-929e-4b5d950d210f",
"value": "helpus.ddns.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e893-91bc-4790-b72d-454a950d210f",
"value": "hii.qhigh.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e893-39f4-4244-984d-48f7950d210f",
"value": "home.trickip.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e894-72b0-4914-94ce-4b45950d210f",
"value": "hukuoka.cloud-maste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e894-d0f0-4441-96ab-416b950d210f",
"value": "ibmmsg.strangled.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e894-940c-49ec-a446-4d98950d210f",
"value": "imitate.faqserv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e895-078c-4b58-bf6b-407f950d210f",
"value": "incloud-go.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e895-6c64-46f2-90d0-4b90950d210f",
"value": "incloud-obert.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e896-2c44-40ee-83f1-4546950d210f",
"value": "innocent-isayev.sexidude.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e896-6e20-4a79-b0c7-43bc950d210f",
"value": "innov-tec.com.ua"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e897-f180-452f-b5cf-4880950d210f",
"value": "interpreter.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e897-d3a8-4c59-84fa-462e950d210f",
"value": "invoices.sexxxy.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e897-3bcc-47f2-a8bf-4703950d210f",
"value": "iphone.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e898-d834-4108-8b87-4302950d210f",
"value": "ipv4.microsoftupdate.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e898-8fac-46e6-9dfb-4722950d210f",
"value": "ipv4.windowsupdate.3-a.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e899-3890-4cc7-856b-4e1d950d210f",
"value": "ipv4.windowsupdate.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e899-15d4-4c1e-8292-48eb950d210f",
"value": "ipv4.windowsupdate.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89a-01a8-4589-9dec-47c9950d210f",
"value": "ipv4.windowsupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89a-db30-460b-b28a-4404950d210f",
"value": "ipv4.windowsupdate.lflink.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89b-ce8c-4f67-9134-4c73950d210f",
"value": "ipv4.windowsupdate.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89b-eaec-4f66-92a7-47eb950d210f",
"value": "ipv4.windowsupdate.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89c-2154-4097-b025-46b2950d210f",
"value": "itlans.isasecret.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89c-cde0-4f87-91cc-453d950d210f",
"value": "itunesdownload.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89d-b734-487c-922d-4f91950d210f",
"value": "itunesdownload.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89d-1eac-4335-b391-43fb950d210f",
"value": "itunesdownload.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89d-1eb0-44d7-bc45-4eb3950d210f",
"value": "itunesimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89e-4f10-4821-92d1-4dcf950d210f",
"value": "itunesimages.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89e-f6f4-4fe0-88de-4218950d210f",
"value": "itunesimages.qpoe.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89f-3f04-4748-bd97-4798950d210f",
"value": "itunesmirror.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e89f-9b14-48c0-8903-42f2950d210f",
"value": "itunesmirror.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a0-49b0-436b-8799-4408950d210f",
"value": "itunesmusic.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a0-28a8-45eb-a8bb-4277950d210f",
"value": "itunesmusic.jetos.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a1-4654-48e4-9a64-4f87950d210f",
"value": "itunesmusic.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a1-13ec-4390-800a-4112950d210f",
"value": "itunesmusic.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a2-c674-4ad3-b6c4-4a75950d210f",
"value": "itunesupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a2-8690-445f-babb-494e950d210f",
"value": "itunesupdates.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a3-4670-4e29-9c47-4248950d210f",
"value": "james.tffghelth.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a3-96b8-4ee5-94f2-4c14950d210f",
"value": "jcie.mofa.ns01.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8a4-99fc-4ac7-9893-4b8c950d210f",
"value": "jica-go-jp.bike"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8a4-b070-436d-8d12-4f06950d210f",
"value": "jica-go-jp.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a4-2a70-43d3-86c9-4d70950d210f",
"value": "jimin.mymom.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8a5-8198-423d-81f4-42be950d210f",
"value": "jimin-jp.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a5-2140-4b3f-a1f2-400c950d210f",
"value": "jpnewslogs.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a6-3238-4f52-a480-4f20950d210f",
"value": "jp.rakutenmusic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a6-e6f4-4d8f-9d7e-4cc1950d210f",
"value": "jpstarmarket.serveusers.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a7-7e6c-4cc1-ac26-45dd950d210f",
"value": "kawasaki.unhamj.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a7-4d80-49ff-9031-480e950d210f",
"value": "kennedy.tffghelth.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a8-746c-4777-9dee-47fe950d210f",
"value": "key.zzux.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a8-7560-4f46-971d-431c950d210f",
"value": "kikimusic.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a9-fe68-40ba-87d4-419c950d210f",
"value": "kmd.crabdance.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a9-ad94-408a-89da-407c950d210f",
"value": "knowledge.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8a9-bf5c-433a-8343-4b14950d210f",
"value": "kxsbwappupdate.dhcp.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8aa-39e4-4dc6-aee7-48f2950d210f",
"value": "kztmusiclnk.dnsrd.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8aa-0b8c-4882-8518-4d57950d210f",
"value": "lan.dynssl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ab-2b68-411b-a035-483d950d210f",
"value": "latestnews.epac.to"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ab-e9cc-4a29-9928-41a0950d210f",
"value": "latestnews.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ac-8b70-49aa-9688-4210950d210f",
"value": "lennon.fftpoor.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ac-5804-410c-bcd4-448a950d210f",
"value": "license.shenajou.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ac-45d0-4690-ad17-4b83950d210f",
"value": "lion.wchildress.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ad-4c50-4020-8c40-461d950d210f",
"value": "lizard.poulsenv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ad-4078-4535-89b3-4a4b950d210f",
"value": "macfee.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ae-3778-42c1-926f-46f3950d210f",
"value": "machine.ddns.ms"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ae-1e88-45e7-9915-4a8e950d210f",
"value": "maffc.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8af-7cf4-487d-9fca-4b8d950d210f",
"value": "mailowl.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8af-fb3c-4025-a443-446d950d210f",
"value": "malcolm.fftpoor.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b0-ae20-4569-9f4b-48e0950d210f",
"value": "malware.dsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b0-a984-4161-9afc-4579950d210f",
"value": "mason.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b1-07fc-4dc9-b4f2-431f950d210f",
"value": "mediapath.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8b1-0704-4dea-b07f-467f950d210f",
"value": "meiji-ac-jp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b2-0e24-4f64-84d9-49c0950d210f",
"value": "microhome.wikaba.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8b2-3904-4e7a-9f9d-4f4d950d210f",
"value": "microsoft.got"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b3-7d0c-410e-8cfc-40fa950d210f",
"value": "microsoft.got-game.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b3-7c60-42a5-aa08-4552950d210f",
"value": "microsoft.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b4-86b4-4514-aa0c-4f54950d210f",
"value": "microsoftempowering.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b4-248c-42fb-b261-4a86950d210f",
"value": "microsoftgetstarted.sexidude.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b5-ded4-48a4-aacf-49e1950d210f",
"value": "microsoftimages.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b5-6020-476f-bc7e-4282950d210f",
"value": "microsoftmirror.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b5-3c1c-45cc-a7b6-4342950d210f",
"value": "microsoftmusic.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b6-fc28-4928-932d-4c31950d210f",
"value": "microsoftmusic.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b6-f97c-4590-8f07-4237950d210f",
"value": "microsoftqckmanager.pcanywhere.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b7-486c-4b22-b3f7-4e11950d210f",
"value": "microsoftstores.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b7-747c-41ac-b55b-429f950d210f",
"value": "microsoftupdate.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b8-3d30-4681-b6e4-4802950d210f",
"value": "microsoftupdate.qhigh.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b8-b680-4ef5-b97e-41cc950d210f",
"value": "micrsoftware.dsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b9-48b0-4fc1-9293-4436950d210f",
"value": "mmy.ddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8b9-3eac-4231-95ef-4963950d210f",
"value": "mobile.2waky.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ba-e5a0-46d2-9d76-47e5950d210f",
"value": "mod.jetos.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ba-0d64-4bd5-b462-4d20950d210f",
"value": "mofa.dynamic-dns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bb-4dc8-41db-bcd8-4dbc950d210f",
"value": "mofa.ns01.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8bb-4a8c-40e7-83de-4200950d210f",
"value": "mofa-go-jp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bc-0ab8-4516-9ec2-41a6950d210f",
"value": "moonnightthse.zyns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bc-93d8-4c85-83b7-43d0950d210f",
"value": "moscowdic.trickip.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bd-1204-4a71-95a7-4007950d210f",
"value": "moscowstdsupdate.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bd-6630-4907-b564-4888950d210f",
"value": "mrsloveaqx.mrslove.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8be-dd98-4ab9-9ec0-45e3950d210f",
"value": "ms.ecc.u-tokyo-ac-jp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8be-bcd0-4059-bb6f-4aca950d210f",
"value": "mseupdate.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bf-3c58-4413-8654-4e13950d210f",
"value": "msg.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8bf-3974-4f49-87f5-494c950d210f",
"value": "msn.incloud-go.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c0-edf0-4113-9aeb-4855950d210f",
"value": "music.cleansite.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c0-42c4-4fcf-88b0-493b950d210f",
"value": "musicfile.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c0-1aa0-43ca-9162-43b2950d210f",
"value": "musiclinker.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c1-71fc-4983-aa2d-493c950d210f",
"value": "mx.yetrula.eu"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c1-6320-4591-a1fb-4201950d210f",
"value": "mytwhomeinst.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c2-bfc0-4b6f-b496-475c950d210f",
"value": "na.americanunfinished.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c2-6b34-4a14-8546-4a69950d210f",
"value": "networkjpnzee.mynetav.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c3-398c-4458-a096-416c950d210f",
"value": "newcityoforward.rebatesrule.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c3-95a8-4f30-bada-452f950d210f",
"value": "newsdata.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c4-3dec-46f5-8044-4ad1950d210f",
"value": "newsfile.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c4-744c-46a8-ae58-4824950d210f",
"value": "newsreport.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c5-9034-4b13-a67d-4735950d210f",
"value": "newtime.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c5-96c8-4890-99f3-4143950d210f",
"value": "nezwq.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c6-f398-42ce-bbc5-4ade950d210f",
"value": "nmrx.mrbonus.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c6-99e0-4f22-9c63-47e0950d210f",
"value": "no.authorizeddns.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c7-ed4c-4179-b63e-43fb950d210f",
"value": "nsa.mefound.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c7-abe8-445b-afc9-4730950d210f",
"value": "nt.mynumber.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c8-7b40-4b70-be57-45c3950d210f",
"value": "nttdata.otzo.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c8-a1c4-41d5-8f86-4eb8950d210f",
"value": "nuisance.serveusers.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c9-2040-4c5a-9f78-4c9f950d210f",
"value": "nz.compress.to"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8c9-33dc-43be-9bf5-48a0950d210f",
"value": "ol.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ca-a65c-4cba-ad79-484a950d210f",
"value": "onlinednsserver.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ca-4e80-4f4a-ad2b-4233950d210f",
"value": "oracleupdate.dns04.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cb-42f0-464d-b98e-4da3950d210f",
"value": "outlook.sindeali.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cb-797c-40e1-a685-44df950d210f",
"value": "owlmedia.mefound.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cc-9890-457e-97ad-48de950d210f",
"value": "peopleinfodata.3-a.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cc-15e8-43c4-a821-4fc1950d210f",
"value": "pepper.sexxxy.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cd-bc6c-4558-ae7b-4b2d950d210f",
"value": "portal.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cd-edc0-4616-a05b-44cb950d210f",
"value": "portal.sendsmtp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cd-3254-4af8-9eb3-4d97950d210f",
"value": "portalser.dynamic-dns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ce-5080-4453-9293-4330950d210f",
"value": "praskovya-matveyeva.mefound.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ce-3678-45bc-b8d1-4a6b950d210f",
"value": "praskovya-ulyanova.dumb1.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cf-0d34-4516-a810-4bee950d210f",
"value": "products.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8cf-24d8-42dd-8e4a-4212950d210f",
"value": "products.cleansite.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d0-a450-45b7-b7b8-4909950d210f",
"value": "products.serveuser.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d0-73fc-4dd3-bf97-4bf0950d210f",
"value": "program.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d1-da6c-4942-a096-4413950d210f",
"value": "purchase.lflinkup.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d1-f8b8-4f96-af70-41f8950d210f",
"value": "rain.orctldl.windowsupdate.authorizeddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d2-70e0-4692-b6e8-43ca950d210f",
"value": "read.xxuz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d2-16e4-4d94-9b59-4bef950d210f",
"value": "recent.dns-stuff.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d3-cb00-4cf9-b5e9-435d950d210f",
"value": "recent.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d3-74b4-427e-bc82-4ff6950d210f",
"value": "redflower.isasecret.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d4-ef0c-46cd-87bc-4808950d210f",
"value": "referred.gr8domain.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d4-9980-4dd8-94ac-415a950d210f",
"value": "referred.yourtrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d5-153c-4cc1-aa33-446b950d210f",
"value": "register.ourhobby.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d5-9780-485f-9a0e-4095950d210f",
"value": "registration2.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d6-8728-42bd-bcaa-4f9d950d210f",
"value": "registrations.4pu.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d6-8130-42fa-9f73-4979950d210f",
"value": "registrations.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d7-ad4c-4dd9-9d65-483c950d210f",
"value": "remeberdata.iownyour.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d7-888c-4436-8130-4a75950d210f",
"value": "reserveds.onedumb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d8-118c-4937-9c9c-4375950d210f",
"value": "rethem.almostmy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d8-a4f8-4f62-a912-4759950d210f",
"value": "sakai.unhamj.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8d9-bed0-4804-95ea-4ea7950d210f",
"value": "salvaiona.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8d9-1f18-48ee-9c2e-4bfb950d210f",
"value": "sappore.cloud-maste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8da-cb18-4ed8-b403-40d8950d210f",
"value": "sc.weboot.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8da-ba24-4c0c-87ba-4a8b950d210f",
"value": "scorpion.poulsenv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8da-de30-4eed-88bb-467c950d210f",
"value": "sdmsg.onmypc.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8db-9240-42e1-bc65-440a950d210f",
"value": "se.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8db-5a1c-478f-bb06-483f950d210f",
"value": "secertnews.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8dc-073c-4b47-a509-4d10950d210f",
"value": "send.mofa.ns01.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8dc-44e0-45c1-9b8b-4c75950d210f",
"value": "sendmsg.jumpingcrab.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8dd-990c-42c8-9bf6-4857950d210f",
"value": "senseye.ikwb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8dd-16b4-4797-8074-4f7f950d210f",
"value": "septdlluckysystem.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8de-36b8-4fd9-a7e3-4cef950d210f",
"value": "seraphim-yurieva.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8de-db1c-4482-b6de-4ef2950d210f",
"value": "serv.justdied.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8df-2948-49bd-96d3-4126950d210f",
"value": "server1.proxydns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8df-8a44-4f1e-9fe6-40bf950d210f",
"value": "seyesb.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e0-a1bc-46e0-9c1a-4dac950d210f",
"value": "shrimp.bdoncloud.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e0-914c-497a-ab94-4a10950d210f",
"value": "shugiin.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8e1-289c-4e54-8ee7-4399950d210f",
"value": "sindeali.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e1-70e4-4e0a-a4b7-47e2950d210f",
"value": "singed.otzo.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e2-7970-4efb-b9db-4c3b950d210f",
"value": "sojourner.mypicture.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e2-6a64-4ee8-b83a-4c06950d210f",
"value": "sstday.jkub.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e3-9864-4f85-a3b3-45e7950d210f",
"value": "stone.jumpingcrab.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e3-a1e0-41bf-ae45-4591950d210f",
"value": "style.u-tokyo-ac-jp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e4-3ff8-4567-bd6d-459b950d210f",
"value": "support1.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e4-1ff8-4d72-9cce-421f950d210f",
"value": "svc.dynssl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e5-5e0c-4fed-8611-4e90950d210f",
"value": "synssl.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e5-82fc-43b8-acb3-46fe950d210f",
"value": "taipeifoodsite.ocry.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e6-f220-4c5c-9452-45c4950d210f",
"value": "tamraj.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e6-e550-4743-88d3-49b1950d210f",
"value": "tfa.longmusic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e6-e284-4893-a8c0-4a35950d210f",
"value": "ticket.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e7-6878-44cc-b820-4798950d210f",
"value": "tophost.dynamicdns.co.uk"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e7-edc4-4d3a-8a94-42cd950d210f",
"value": "transfer.lflinkup.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e8-49bc-4d96-80f2-4214950d210f",
"value": "transfer.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e8-b888-493e-ac08-47ba950d210f",
"value": "travelyokogawafz.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e9-aa8c-4c19-8a4f-467c950d210f",
"value": "trout.belowto.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8e9-e8b0-4a5e-b94e-44e3950d210f",
"value": "twmusic.proxydns.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ea-28e4-40af-9b25-4cf8950d210f",
"value": "twpeoplemusicsite.my03.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ea-2b84-4be2-baf5-49fb950d210f",
"value": "twsslpopservupro.dynssl.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8eb-3f48-45c5-b5d7-4d73950d210f",
"value": "twtravelinfomation.toythieves.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8eb-b140-4a94-9cd3-4048950d210f",
"value": "twx.mynumber.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ec-2988-4d37-847f-4d5a950d210f",
"value": "ugreen.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ec-1a48-49e8-b767-4916950d210f",
"value": "uk.dynamicdns.org.uk"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ed-815c-4fe1-a091-4a28950d210f",
"value": "ukuoka.cloud-maste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ed-a998-433c-b29f-4da5950d210f",
"value": "ultimedia.vmmini.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ee-a584-4828-adc2-46f9950d210f",
"value": "un.ddns.info"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ee-5fa0-49d1-99a1-400e950d210f",
"value": "un.dnsrd.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8ef-26c8-442a-b035-483d950d210f",
"value": "unhamj.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ef-5fac-47fb-8522-4ddf950d210f",
"value": "updates.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f0-fa30-493f-ad8f-49e5950d210f",
"value": "usa.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f0-cfd0-455e-a2b2-496c950d210f",
"value": "usiness.vmmini.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f1-7cf8-409e-ae1c-4233950d210f",
"value": "usliveupdateonline.ygto.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f1-8c3c-4b01-a51e-417b950d210f",
"value": "ut-portal-u-tokyo-ac-jp.tyoto-go-jp.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f2-c45c-44b1-90cc-4511950d210f",
"value": "v4.microsoftupdate.mrbasic.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f2-c124-43f9-ae40-469f950d210f",
"value": "v4.windowsupdate.dedgesuite.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f3-1af0-493e-873d-4882950d210f",
"value": "v4.windowsupdate.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f3-e860-4324-86c4-4afc950d210f",
"value": "v4.windowsupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f4-7000-4660-999c-4605950d210f",
"value": "v4.windowsupdate.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8f4-f3c8-464a-a581-482f950d210f",
"value": "vmmini.com"
},
{
"category": "Network activity",
"comment": "REDLEAVES Network Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902e8f5-2a4c-4867-abe2-4755950d210f",
"value": "alert tcp any any -> any any (msg: \"REDLEAVES Implant\"; content: \"|00 00 7a 8d 9b dc|\"; offset: 2; depth: 6; content: \"|00 00|\"; offset: 10; depth: 2; sid: 314;)"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "domain",
"uuid": "5902e8f5-18e4-441c-b4ef-4f36950d210f",
"value": "wchildress.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f6-db0c-4868-8c0b-4bc5950d210f",
"value": "wcxh.mynetav.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f6-256c-4ea5-9a66-4a68950d210f",
"value": "well.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f7-a9d8-4529-a43c-4578950d210f",
"value": "whale.toshste.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f7-24e8-4428-857e-4dce950d210f",
"value": "windowfile.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f8-7b44-4149-b9e4-40c6950d210f",
"value": "windowsimages.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f8-9658-421c-9458-4aa8950d210f",
"value": "windowsmirrors.vizvaz.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f8-266c-40ba-9e9a-4c39950d210f",
"value": "windowsupdate.2waky.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8f9-6718-447b-8dd5-4caa950d210f",
"value": "windowsupdate.3-a.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fa-0884-4246-9608-453c950d210f",
"value": "windowsupdate.acmetoy.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fa-6910-4754-b8ab-4077950d210f",
"value": "windowsupdate.authorizeddns.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fb-97f4-49a6-be82-4e04950d210f",
"value": "windowsupdate.authorizeddns.org"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fb-c8b8-4a1d-a2e9-4247950d210f",
"value": "windowsupdate.authorizeddns.us"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fb-7af4-4f71-9f47-4983950d210f",
"value": "windowsupdate.dedgesuite.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fc-51fc-415d-aadd-4572950d210f",
"value": "windowsupdate.dns05.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fc-0f2c-47d1-bef4-4dd0950d210f",
"value": "windowsupdate.dnset.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fd-caa0-4c54-a06c-4a1a950d210f",
"value": "windowsupdate.esmtp.biz"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fd-9dc0-41f9-b0c3-40bd950d210f",
"value": "windowsupdate.ezua.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fe-c830-4f59-8a79-4dce950d210f",
"value": "windowsupdate.fartit.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8fe-d5bc-4846-b722-4e46950d210f",
"value": "windowsupdate.gettrials.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ff-6fc8-4a5a-a5f4-4cd0950d210f",
"value": "windowsupdates.itemdb.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e8ff-b600-4480-8276-4681950d210f",
"value": "windowsupdate.instanthq.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e900-9830-4766-9ddd-4a3d950d210f",
"value": "windowsupdate.itsaol.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e900-b28c-42f3-b995-408f950d210f",
"value": "windowsupdate.jungleheart.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e901-ce3c-4b87-b867-4590950d210f",
"value": "windowsupdate.lflink.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e901-6d14-4ee7-a3e6-4f6b950d210f",
"value": "windowsupdate.mrface.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e902-c2c0-41ca-81d2-4a2a950d210f",
"value": "windowsupdate.mylftv.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e902-46c4-4155-b0f9-4bb4950d210f",
"value": "windowsupdate.organiccrap.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e903-2b3c-4de5-89fa-4035950d210f",
"value": "windowsupdate.rebatesrule.net"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e903-0f54-4ed5-a762-409a950d210f",
"value": "windowsupdate.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e904-a624-4493-bfdb-4e07950d210f",
"value": "windowsupdate.serveusers.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e904-18f0-4c90-b7c1-4879950d210f",
"value": "windowsupdate.wcwname.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e905-9378-42bb-974f-4e06950d210f",
"value": "windowsupdate.x24hr.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e905-1654-4403-8f7c-4eab950d210f",
"value": "yahoo.incloud-go.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e906-9324-4041-aaa1-4c14950d210f",
"value": "yandexr.sellclassics.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e906-1000-4be6-adfe-42ad950d210f",
"value": "yfrfyhf.youdontcare.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e907-ca3c-40ed-9435-49a5950d210f",
"value": "yokohamajpinstaz.mrbonus.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e907-fd9c-490d-934c-4afb950d210f",
"value": "zebra.bdoncloud.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e908-7b14-4ca2-b28b-452d950d210f",
"value": "zebra.incloud-go.com"
},
{
"category": "Network activity",
"comment": "Domain Watchlist",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "hostname",
"uuid": "5902e908-45d8-4805-8a33-4d98950d210f",
"value": "zero.pcanywhere.net"
},
{
"category": "Network activity",
"comment": "REDLEAVES Network Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902e949-4fe4-4e6a-bc1c-417e950d210f",
"value": "alert tcp any -> any any (msg:\u00e2\u20ac\u009dSuspicious PLUGX URI String\u00e2\u20ac\u009d; content:\u00e2\u20ac\u009dPOST\u00e2\u20ac\u009d; http_method; content:\u00e2\u20ac\u009d/update?id=\u00e2\u20ac\u009d; http_uri; fast_pattern:only; pcre:\u00e2\u20ac\u009d/update\\?id=[a-fA-F0-9]{8} HTTP/\u00e2\u20ac\u009d; sid:101;)"
},
{
"category": "Artifacts dropped",
"comment": "REDLEAVES YARA Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "yara",
"uuid": "5902e985-e854-4e6e-9269-4bb4950d210f",
"value": "rule Dropper_DeploysMalwareViaSideLoading {\r\n meta:\r\n description = \"Detect a dropper used to deploy an implant via side loading. This dropper has specifically been observed deploying REDLEAVES & PlugX\"\r\n author = \"USG\"\r\n true_positive = \"5262cb9791df50fafcb2fbd5f93226050b51efe400c2924eecba97b7ce437481: drops REDLEAVES. 6392e0701a77ea25354b1f40f5b867a35c0142abde785a66b83c9c8d2c14c0c3: drops plugx. \"\r\n strings: \r\n $UniqueString = {2e 6c 6e 6b [0-14] 61 76 70 75 69 2e 65 78 65} // \".lnk\" near \"avpui.exe\"\r\n $PsuedoRandomStringGenerator = {b9 1a [0-6] f7 f9 46 80 c2 41 88 54 35 8b 83 fe 64} // Unique function that generates a 100 character pseudo random string.\r\n condition:\r\n any of them\r\n}"
},
{
"category": "Artifacts dropped",
"comment": "REDLEAVES YARA Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "yara",
"uuid": "5902e9ad-d554-4234-b809-49c5950d210f",
"value": "rule REDLEAVES_DroppedFile_ImplantLoader_Starburn {\r\n meta:\r\n description = \"Detect the DLL responsible for loading and deobfuscating the DAT file containing shellcode and core REDLEAVES RAT\"\r\n author = \"USG\"\r\n true_positive = \"7f8a867a8302fe58039a6db254d335ae\" // StarBurn.dll\r\n strings:\r\n $XOR_Loop = {32 0c 3a 83 c2 02 88 0e 83 fa 08 [4-14] 32 0c 3a 83 c2 02 88 0e 83 fa 10} // Deobfuscation loop\r\n condition:\r\n any of them\r\n}"
},
{
"category": "Artifacts dropped",
"comment": "REDLEAVES YARA Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "yara",
"uuid": "5902e9d9-9ea0-451f-9c1f-4bf9950d210f",
"value": "rule REDLEAVES_DroppedFile_ObfuscatedShellcodeAndRAT_handkerchief {\r\n meta:\r\n description = \"Detect obfuscated .dat file containing shellcode and core REDLEAVES RAT\"\r\n author = \"USG\"\r\n true_positive = \"fb0c714cd2ebdcc6f33817abe7813c36\" // handkerchief.dat\r\n strings:\r\n $RedleavesStringObfu = {73 64 65 5e 60 74 75 74 6c 6f 60 6d 5e 6d 64 60 77 64 72 5e 65 6d 6d 6c 60 68 6f 2f 65 6d 6d} // This is 'red_autumnal_leaves_dllmain.dll' XOR'd with 0x01\r\n condition:\r\n any of them\r\n}"
},
{
"category": "Artifacts dropped",
"comment": "REDLEAVES YARA Signatures",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "yara",
"uuid": "5902ea4d-393c-4163-9e84-46f6950d210f",
"value": "rule REDLEAVES_CoreImplant_UniqueStrings {\r\n meta:\r\n description = \"Strings identifying the core REDLEAVES RAT in its deobfuscated state\"\r\n author = \"USG\"\r\n strings:\r\n $unique2 = \"RedLeavesSCMDSimulatorMutex\" nocase wide ascii\r\n $unique4 = \"red_autumnal_leaves_dllmain.dll\" wide ascii\r\n $unique7 = \"\\\\NamePipe_MoreWindows\" wide ascii\r\n condition:\r\n any of them\r\n}"
},
{
"category": "Network activity",
"comment": "PLUGX Network Signature",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902ea6c-5304-4c4c-9663-49f7950d210f",
"value": "alert tcp any any -> any any (msg:\"Non-Std TCP Client Traffic contains 'HX1|3a|' 'HX2|3a|' 'HX3|3a|' 'HX4|3a|' (PLUGX Variant)\"; sid:XX; rev:1; flow:established,to_server; content:\"Accept|3a 20 2a 2f 2a|\"; nocase; content:\"HX1|3a|\"; distance:0; within:6; fast_pattern; content:\"HX2|3a|\"; nocase; distance:0; content:\"HX3|3a|\"; nocase; distance:0; content:\"HX4|3a|\"; nocase; distance:0; classtype:nonstd-tcp; priority:X;)"
},
{
"category": "Network activity",
"comment": "PLUGX Network Signature",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902ea82-f8f0-423b-8dcc-4001950d210f",
"value": "alert tcp any any -> any any (msg:\"Non-Std TCP Client Traffic contains 'X-Session|3a|''X-Status|3a|''X-Size|3a|''X-Sn|3a|'(PLUGX)\"; sid:XX; rev:1; flow:established,to_server; content:\"X-Session|3a|\"; nocase; fast_pattern; content:\"X-Status|3a|\"; nocase; distance:0; content:\"X-Size|3a|\"; nocase; distance:0; content:\"X-Sn|3a|\"; nocase; distance:0; classtype:nonstd-tcp; priority:X;)"
},
{
"category": "Network activity",
"comment": "PLUGX Network Signature",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902eabd-52d0-4ecd-ba61-46bf950d210f",
"value": "alert tcp any any -> any any (msg:\"Non-Std TCP Client Traffic contains 'MJ1X|3a|' 'MJ2X|3a|' 'MJ3X|3a|' 'MJ4X|3a|' (PLUGX Variant)\"; sid:XX; rev:1; flow:established,to_server; content:\"MJ1X|3a|\"; nocase; fast_pattern; content:\"MJ2X|3a|\"; nocase; distance:0; content:\"MJ3X|3a|\"; nocase; distance:0; content:\"MJ4X|3a|\"; nocase; distance:0; classtype:nonstd-tcp; priority:X;)"
},
{
"category": "Network activity",
"comment": "PLUGX Network Signature",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "snort",
"uuid": "5902ead9-a210-4fa4-856c-4f86950d210f",
"value": "alert tcp any any -> any any (msg:\"Non-Std TCP Client Traffic contains 'Cookies|3a|' 'Sym1|2e|' '|2c|Sym2|2e|' '|2c|Sym3|2e|' '|2c|Sym4|2e|' (Chches Variant)\"; sid:XX; rev:1; flow:established,to_server; content:\"Cookies|3a|\"; nocase; content:\"Sym1|2e|0|3a|\"; nocase; distance:0; fast_pattern; content:\"|2c|Sym2|2e|\"; nocase; distance:0; content:\"|2c|Sym3|2e|\"; nocase; distance:0; content:\"|2c|Sym4|2e|\"; nocase; distance:0; classtype:nonstd-tcp; priority:X;)"
},
{
"category": "Artifacts dropped",
"comment": "PLUGX and REDLEAVES YARA Signature",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "yara",
"uuid": "5902eb18-5250-4d6e-8395-47af950d210f",
"value": "rule PLUGX_RedLeaves\r\n{\r\nmeta:\r\nauthor = \"US-CERT Code Analysis Team\"\r\ndate = \"03042017\r\nincident = \"10118538\"\r\ndate = \"2017/04/03\"\r\nMD5_1 = \"598FF82EA4FB52717ACAFB227C83D474\"\r\nMD5_2 = \"7D10708A518B26CC8C3CBFBAA224E032\"\r\nMD5_3 = \"AF406D35C77B1E0DF17F839E36BCE630\"\r\nMD5_4 = \"6EB9E889B091A5647F6095DCD4DE7C83\"\r\nMD5_5 = \"566291B277534B63EAFC938CDAAB8A399E41AF7D\"\r\ninfo = \"Detects specific RedLeaves and PlugX binaries\"\r\nstrings:\r\n$s0 = { 80343057403D2FD0010072F433C08BFF80343024403D2FD0010072F4 }\r\n$s1 = \"C:\\\\Users\\\\user\\\\Desktop\\\\my_OK_2014\\\\bit9\\\\runsna\\\\Release\\\\runsna.pdb\"\r\n$s2 = \"d:\\\\work\\\\plug4.0(shellcode)\"\r\n$s3 = \"\\\\shellcode\\\\shellcode\\\\XSetting.h\"\r\n$s4 = { 42AFF4276A45AA58474D4C4BE03D5B395566BEBCBDEDE9972872C5C4C5498228 }\r\n$s5 = { 8AD32AD002D180C23830140E413BCB7CEF6A006A006A00566A006A00 }\r\n$s6 = { EB055F8BC7EB05E8F6FFFFFF558BEC81ECC8040000535657 }\r\n$s7 = { 8A043233C932043983C10288043283F90A7CF242890D18AA00103BD37CE2891514AA00106A006A006A0056 }\r\n$s8 = { 293537675A402A333557B05E04D09CB05EB3ADA4A4A40ED0B7DAB7935F5B5B08 }\r\n$s9 = \"RedLeavesCMDSimulatorMutex\"\r\ncondition:\r\n$s0 or $s1 or $s2 and $s3 or $s4 or $s5 or $s6 or $s7 or $s8 or $s9\r\n}"
},
{
"category": "Artifacts dropped",
"comment": "Stolen Hacking Team Signing Certificate",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "x509-fingerprint-sha1",
"uuid": "5902eba4-4ed4-4b59-8aa5-4843950d210f",
"value": "b366dbe8b3e81915ca5c5170c65dcad8348b11f0"
},
{
"category": "Antivirus detection",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "text",
"uuid": "5902ebd1-5d2c-4506-81cf-4edd950d210f",
"value": "Backdoor.APT.Kaba"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ec84-cc5c-488b-8847-44b5950d210f",
"value": "\\\\.\\pipe\\1[12345678]"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ec85-d764-49a1-bd2d-4bb2950d210f",
"value": "\\\\.\\pipe\\2[12345678]"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": false,
"type": "windows-service-name",
"uuid": "5902ecc1-0bac-4a9d-92eb-40ed950d210f",
"value": "BUGREPOR"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ecf9-bbe8-4cb7-83b4-42ff950d210f",
"value": "%TEMP%\\BUGREPORTERBUGREPOR"
},
{
"category": "Artifacts dropped",
"comment": "Malware Path Used",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ed18-75d8-455d-943f-4b0c950d210f",
"value": "%AppData%\\Reader.exe"
},
{
"category": "Artifacts dropped",
"comment": "Malware Path Used",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ed18-a7ec-40f8-b6ac-40d9950d210f",
"value": "%AppData%\\Notron.exe"
},
{
"category": "Artifacts dropped",
"comment": "Malware Path Used",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "filename",
"uuid": "5902ed19-87b4-4725-9ef8-4671950d210f",
"value": "%AppData%\\SCSI_Initiarot.exe"
},
{
"category": "Artifacts dropped",
"comment": "PlugX Registry key (HKEY_CURRENT_USER)",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "regkey",
"uuid": "5902ed89-5744-4b2b-9c03-45ab950d210f",
"value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MJ"
},
{
"category": "Artifacts dropped",
"comment": "PlugX Registry key (HKEY_CURRENT_USER)",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364204",
"to_ids": true,
"type": "regkey",
"uuid": "5902ed8a-8424-4f45-b500-4ab5950d210f",
"value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MJ\\PROXY"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: fcccc611730474775ff1cfd4c60481deef586f01191348b07d7a143d174a07b0",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364506",
"to_ids": true,
"type": "sha1",
"uuid": "5902ef1a-a9a4-47a3-bd35-4fc402de0b81",
"value": "4413a7f864255767a6d84c3e8362b9873a7e224b"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: fcccc611730474775ff1cfd4c60481deef586f01191348b07d7a143d174a07b0",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364506",
"to_ids": true,
"type": "md5",
"uuid": "5902ef1a-c0a4-49cd-adf9-4b8802de0b81",
"value": "01468a69ca8676b51a357676e0856c88"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: fcccc611730474775ff1cfd4c60481deef586f01191348b07d7a143d174a07b0",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364506",
"to_ids": false,
"type": "link",
"uuid": "5902ef1a-76e8-4178-8743-4a7102de0b81",
"value": "https://www.virustotal.com/file/fcccc611730474775ff1cfd4c60481deef586f01191348b07d7a143d174a07b0/analysis/1492598668/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: ff0b79ed5ca3a5e1a9dabf8e47b15366c1d0783d0396af2cbba8e253020dbb34",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364507",
"to_ids": false,
"type": "link",
"uuid": "5902ef1b-0578-4462-abf1-4d8d02de0b81",
"value": "https://www.virustotal.com/file/ff0b79ed5ca3a5e1a9dabf8e47b15366c1d0783d0396af2cbba8e253020dbb34/analysis/1492636333/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: af9dde68c73d69ea535103e963f09587b6aa020081bbce06347de05fa469c257",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364507",
"to_ids": false,
"type": "link",
"uuid": "5902ef1b-4548-4adc-b1e2-4fc302de0b81",
"value": "https://www.virustotal.com/file/af9dde68c73d69ea535103e963f09587b6aa020081bbce06347de05fa469c257/analysis/1492636330/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 2e1f902de32b999642bb09e995082c37a024f320c683848edadaf2db8e322c3c",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364508",
"to_ids": false,
"type": "link",
"uuid": "5902ef1c-9334-4241-8c5c-45d102de0b81",
"value": "https://www.virustotal.com/file/2e1f902de32b999642bb09e995082c37a024f320c683848edadaf2db8e322c3c/analysis/1491842309/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 6bc2558eb8915edc19835d9e734023a2368f876971f5580478782c7444f9581c",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364508",
"to_ids": false,
"type": "link",
"uuid": "5902ef1c-989c-47c0-a5dd-454102de0b81",
"value": "https://www.virustotal.com/file/6bc2558eb8915edc19835d9e734023a2368f876971f5580478782c7444f9581c/analysis/1492531222/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 76721d08b83aae945aa00fe69319f896b92c456def4df5b203357cf443074c03",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364509",
"to_ids": false,
"type": "link",
"uuid": "5902ef1d-3f50-451c-9807-4e9802de0b81",
"value": "https://www.virustotal.com/file/76721d08b83aae945aa00fe69319f896b92c456def4df5b203357cf443074c03/analysis/1493326609/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 312dc69dd6ea16842d6e58cd7fd98ba4d28eefeb4fd4c4d198fac4eee76f93c3",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364509",
"to_ids": false,
"type": "link",
"uuid": "5902ef1d-4894-4168-8606-446902de0b81",
"value": "https://www.virustotal.com/file/312dc69dd6ea16842d6e58cd7fd98ba4d28eefeb4fd4c4d198fac4eee76f93c3/analysis/1490936185/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 4cc0adf4baa1e3932d74282affb1a137b30820934ad4f80daceec712ba2bbe14",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364510",
"to_ids": false,
"type": "link",
"uuid": "5902ef1e-7d3c-4f53-beee-46a002de0b81",
"value": "https://www.virustotal.com/file/4cc0adf4baa1e3932d74282affb1a137b30820934ad4f80daceec712ba2bbe14/analysis/1492484591/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: c21eaadf9ffc62ca4673e27e06c16447f103c0cf7acd8db6ac5c8bd17805e39d",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364510",
"to_ids": false,
"type": "link",
"uuid": "5902ef1e-116c-4b52-874b-41a202de0b81",
"value": "https://www.virustotal.com/file/c21eaadf9ffc62ca4673e27e06c16447f103c0cf7acd8db6ac5c8bd17805e39d/analysis/1487365285/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: bc2f07066c624663b0a6f71cb965009d4d9b480213de51809cdc454ca55f1a91",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364510",
"to_ids": false,
"type": "link",
"uuid": "5902ef1e-25d8-495a-9ac1-445e02de0b81",
"value": "https://www.virustotal.com/file/bc2f07066c624663b0a6f71cb965009d4d9b480213de51809cdc454ca55f1a91/analysis/1493327440/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 316e89d866d5c710530c2103f183d86c31e9a90d55e2ebc2dda94f112f3bdb6d",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364511",
"to_ids": false,
"type": "link",
"uuid": "5902ef1f-a37c-40ca-8646-482802de0b81",
"value": "https://www.virustotal.com/file/316e89d866d5c710530c2103f183d86c31e9a90d55e2ebc2dda94f112f3bdb6d/analysis/1493326527/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 5961861d2b9f50d05055814e6bfd1c6291b30719f8a4d02d4cf80c2e87753fa1",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364511",
"to_ids": false,
"type": "link",
"uuid": "5902ef1f-1a74-4d29-9645-4e2d02de0b81",
"value": "https://www.virustotal.com/file/5961861d2b9f50d05055814e6bfd1c6291b30719f8a4d02d4cf80c2e87753fa1/analysis/1493326793/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 92dbbe0eff3fe0082c3485b99e6a949d9c3747afa493a0a1e336829a7c1faafb",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364512",
"to_ids": false,
"type": "link",
"uuid": "5902ef20-eae8-4e7a-9e84-498202de0b81",
"value": "https://www.virustotal.com/file/92dbbe0eff3fe0082c3485b99e6a949d9c3747afa493a0a1e336829a7c1faafb/analysis/1493327142/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 5412cddde0a2f2d78ec9de0f9a02ac2b22882543c9f15724ebe14b3a0bf8cbda",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364512",
"to_ids": false,
"type": "link",
"uuid": "5902ef20-f394-48e1-b2ab-4b4702de0b81",
"value": "https://www.virustotal.com/file/5412cddde0a2f2d78ec9de0f9a02ac2b22882543c9f15724ebe14b3a0bf8cbda/analysis/1493327143/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: a6b6c66735e5e26002202b9d263bf8c97e278f6969c141853857000c8d242d24",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364512",
"to_ids": false,
"type": "link",
"uuid": "5902ef20-7bd4-4e55-8a82-425102de0b81",
"value": "https://www.virustotal.com/file/a6b6c66735e5e26002202b9d263bf8c97e278f6969c141853857000c8d242d24/analysis/1493326867/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 7eeaa97d346bc3f8090e5b742f42e8900127703420295279ac7e04d06ebe0a04",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364513",
"to_ids": false,
"type": "link",
"uuid": "5902ef21-795c-4804-a586-463402de0b81",
"value": "https://www.virustotal.com/file/7eeaa97d346bc3f8090e5b742f42e8900127703420295279ac7e04d06ebe0a04/analysis/1493326995/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: dcff19fc193f1ba63c5dc6f91f00070e6912dcec3868e889fed37102698b554b",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364513",
"to_ids": false,
"type": "link",
"uuid": "5902ef21-55a4-4ad0-ac9d-47b202de0b81",
"value": "https://www.virustotal.com/file/dcff19fc193f1ba63c5dc6f91f00070e6912dcec3868e889fed37102698b554b/analysis/1493327607/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 6c7e85e426999579dd6a540fcd827b644a79cda0ad50211d585a0be513571586",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364514",
"to_ids": false,
"type": "link",
"uuid": "5902ef22-2b0c-469b-98ab-4ab002de0b81",
"value": "https://www.virustotal.com/file/6c7e85e426999579dd6a540fcd827b644a79cda0ad50211d585a0be513571586/analysis/1493327532/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 6392e0701a77ea25354b1f40f5b867a35c0142abde785a66b83c9c8d2c14c0c3",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364514",
"to_ids": false,
"type": "link",
"uuid": "5902ef22-6b3c-4349-8b48-41cc02de0b81",
"value": "https://www.virustotal.com/file/6392e0701a77ea25354b1f40f5b867a35c0142abde785a66b83c9c8d2c14c0c3/analysis/1493326569/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 19aa5019f3c00211182b2a80dd9675721dac7cfb31d174436d3b8ec9f97d898b",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364515",
"to_ids": false,
"type": "link",
"uuid": "5902ef23-dedc-4679-b5a2-4cbd02de0b81",
"value": "https://www.virustotal.com/file/19aa5019f3c00211182b2a80dd9675721dac7cfb31d174436d3b8ec9f97d898b/analysis/1492484322/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 45d804f35266b26bf63e3d616715fc593931e33aa07feba5ad6875609692efa2",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364515",
"to_ids": false,
"type": "link",
"uuid": "5902ef23-d0b4-41e9-a956-45ad02de0b81",
"value": "https://www.virustotal.com/file/45d804f35266b26bf63e3d616715fc593931e33aa07feba5ad6875609692efa2/analysis/1491800341/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: cb0c8681a407a76f8c0fd2512197aafad8120aa62e5c871c29d1fd2a102bc628",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364515",
"to_ids": false,
"type": "link",
"uuid": "5902ef23-553c-467c-b8c0-42f302de0b81",
"value": "https://www.virustotal.com/file/cb0c8681a407a76f8c0fd2512197aafad8120aa62e5c871c29d1fd2a102bc628/analysis/1487321767/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 9a6692690c03ec33c758cb5648be1ed886ff039e6b72f1c43b23fbd9c342ce8c",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364516",
"to_ids": false,
"type": "link",
"uuid": "5902ef24-0dc0-47cb-8908-475902de0b81",
"value": "https://www.virustotal.com/file/9a6692690c03ec33c758cb5648be1ed886ff039e6b72f1c43b23fbd9c342ce8c/analysis/1493326575/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: b20ce00a6864225f05de6407fac80ddb83cd0aec00ada438c1e354cdd0d7d5df",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364516",
"to_ids": false,
"type": "link",
"uuid": "5902ef24-256c-4632-bd53-4c3c02de0b81",
"value": "https://www.virustotal.com/file/b20ce00a6864225f05de6407fac80ddb83cd0aec00ada438c1e354cdd0d7d5df/analysis/1493327105/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: f251485a62e104dfd8629dc4d2dfd572ebd0ab554602d682a28682876a47e773",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364517",
"to_ids": false,
"type": "link",
"uuid": "5902ef25-8e48-4669-9677-4d3202de0b81",
"value": "https://www.virustotal.com/file/f251485a62e104dfd8629dc4d2dfd572ebd0ab554602d682a28682876a47e773/analysis/1493241485/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 4521a74337a8b454f9b80c7d9e57b4c9580567f84e513d9a3ce763275c55e691",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364517",
"to_ids": false,
"type": "link",
"uuid": "5902ef25-ecd4-4df3-8e9d-4aab02de0b81",
"value": "https://www.virustotal.com/file/4521a74337a8b454f9b80c7d9e57b4c9580567f84e513d9a3ce763275c55e691/analysis/1493326555/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: e6ecb146f469d243945ad8a5451ba1129c5b190f7d50c64580dbad4b8246f88e",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364518",
"to_ids": false,
"type": "link",
"uuid": "5902ef26-d108-471e-8f01-4bef02de0b81",
"value": "https://www.virustotal.com/file/e6ecb146f469d243945ad8a5451ba1129c5b190f7d50c64580dbad4b8246f88e/analysis/1493326836/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: e88f5bf4be37e0dc90ba1a06a2d47faaeea9047fec07c17c2a76f9f7ab98acf0",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364518",
"to_ids": false,
"type": "link",
"uuid": "5902ef26-21f8-4823-ad14-45fa02de0b81",
"value": "https://www.virustotal.com/file/e88f5bf4be37e0dc90ba1a06a2d47faaeea9047fec07c17c2a76f9f7ab98acf0/analysis/1493326638/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: fadf362a52dcf884f0d41ce3df9eaa9bb30227afda50c0e0657c096baff501f0",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364519",
"to_ids": false,
"type": "link",
"uuid": "5902ef27-3e48-4829-8156-4df502de0b81",
"value": "https://www.virustotal.com/file/fadf362a52dcf884f0d41ce3df9eaa9bb30227afda50c0e0657c096baff501f0/analysis/1493327643/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 6605b27e95f5c3c8012e4a75d1861786fb749b9a712a5f4871adbad81addb59e",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364519",
"to_ids": false,
"type": "link",
"uuid": "5902ef27-43b8-42fa-8ae3-4eda02de0b81",
"value": "https://www.virustotal.com/file/6605b27e95f5c3c8012e4a75d1861786fb749b9a712a5f4871adbad81addb59e/analysis/1493327385/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 2c71eb5c781daa43047fa6e3d85d51a061aa1dfa41feb338e0d4139a6dfd6910",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364520",
"to_ids": false,
"type": "link",
"uuid": "5902ef28-12b0-4047-b145-435002de0b81",
"value": "https://www.virustotal.com/file/2c71eb5c781daa43047fa6e3d85d51a061aa1dfa41feb338e0d4139a6dfd6910/analysis/1493327477/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: fd6a956a7708708cddff78c8505c7db73d7c4e961da8a3c00cc5a51171a92b7b",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364520",
"to_ids": false,
"type": "link",
"uuid": "5902ef28-4520-45c5-9c3e-475b02de0b81",
"value": "https://www.virustotal.com/file/fd6a956a7708708cddff78c8505c7db73d7c4e961da8a3c00cc5a51171a92b7b/analysis/1490935402/"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: ae6b45a92384f6e43672e617c53a44225e2944d66c1ffb074694526386074145",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364520",
"to_ids": false,
"type": "link",
"uuid": "5902ef28-59c4-4895-b28e-4b7702de0b81",
"value": "https://www.virustotal.com/file/ae6b45a92384f6e43672e617c53a44225e2944d66c1ffb074694526386074145/analysis/1493327091/"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: a82a59fd073c3c868be93f52d09203e93e87d79a",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364521",
"to_ids": true,
"type": "sha256",
"uuid": "5902ef29-9f54-46f4-86d6-49d502de0b81",
"value": "037469bf87f3a8d8c55ce5437d6a15dd2bfaf69df8698544567e96d00a70ff96"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: a82a59fd073c3c868be93f52d09203e93e87d79a",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364521",
"to_ids": false,
"type": "link",
"uuid": "5902ef29-75a8-48f5-9561-44e002de0b81",
"value": "https://www.virustotal.com/file/037469bf87f3a8d8c55ce5437d6a15dd2bfaf69df8698544567e96d00a70ff96/analysis/1492636331/"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: 3cfb1bf0063ea9d893f9e95c11e223cc06299337",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364521",
"to_ids": true,
"type": "sha256",
"uuid": "5902ef29-00c4-4f0d-ab33-4bcd02de0b81",
"value": "a95fc1833a0d359da8f8dfe0104ea197cc2d4fd20db6c85e4e6d0fa22f126d0c"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 3cfb1bf0063ea9d893f9e95c11e223cc06299337",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364522",
"to_ids": false,
"type": "link",
"uuid": "5902ef2a-e1ec-4eb5-a551-466602de0b81",
"value": "https://www.virustotal.com/file/a95fc1833a0d359da8f8dfe0104ea197cc2d4fd20db6c85e4e6d0fa22f126d0c/analysis/1493358860/"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: 2a07420c768fa49c05327741e0709c3ac5a71a06",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364522",
"to_ids": true,
"type": "sha256",
"uuid": "5902ef2a-1c00-402b-ac99-4c1302de0b81",
"value": "f4ea0a25d0861be969ca49f09e5581e29a8d314d8d4ebd4991540f1d03140055"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: 2a07420c768fa49c05327741e0709c3ac5a71a06",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364523",
"to_ids": false,
"type": "link",
"uuid": "5902ef2b-8630-4a46-8665-456a02de0b81",
"value": "https://www.virustotal.com/file/f4ea0a25d0861be969ca49f09e5581e29a8d314d8d4ebd4991540f1d03140055/analysis/1492636332/"
},
{
"category": "Payload delivery",
"comment": "File Hash Watchlist - Xchecked via VT: da3cb3ade7f129838ff3c816b223859d91d377b6",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364523",
"to_ids": true,
"type": "sha256",
"uuid": "5902ef2b-28b4-47d7-802d-4f2202de0b81",
"value": "210d10cd90413d5d41d801e3f6b145f61542585bd996f5435a5664145105c994"
},
{
"category": "External analysis",
"comment": "File Hash Watchlist - Xchecked via VT: da3cb3ade7f129838ff3c816b223859d91d377b6",
"deleted": false,
"disable_correlation": false,
"timestamp": "1493364524",
"to_ids": false,
"type": "link",
"uuid": "5902ef2c-0eec-424d-9879-418502de0b81",
"value": "https://www.virustotal.com/file/210d10cd90413d5d41d801e3f6b145f61542585bd996f5435a5664145105c994/analysis/1492636332/"
}
]
}
}
Reference in a new issue View git blame Copy permalink