{
  "id": "bundle--b4f09a49-6949-41a4-b6b5-92882607b63a",
  "objects": [
    {
      "id": "artifact--5ce5b5ab-326e-438d-8437-a47068503fc5",
      "payload_bin": "AAH/",
      "type": "artifact"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "attack-pattern--d4aa6cca-c956-4360-9da0-3d034b13bb07",
      "kill_chain_phases": [
        {
          "kill_chain_name": "example-chain",
          "phase_name": "prepare"
        }
      ],
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "雪 / attack",
      "spec_version": "2.1",
      "type": "attack-pattern"
    },
    {
      "id": "autonomous-system--8d159c8b-ed38-4fc2-86cb-7bee00c04ddb",
      "name": "Boundary AS",
      "number": 0,
      "type": "autonomous-system"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "first_seen": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "campaign--ec97bdb8-76f9-47cf-b336-aa058c8f5696",
      "last_seen": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Campaign",
      "spec_version": "2.1",
      "type": "campaign"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "description": "Line one\nLine two — café",
      "id": "course-of-action--f788eccc-6c03-46c1-885c-6c9e669f5d59",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Mitigate",
      "spec_version": "2.1",
      "type": "course-of-action"
    },
    {
      "contains_refs": [
        "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3"
      ],
      "ctime": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "directory--865050b8-6269-422c-8f2a-82fa8bc92ec4",
      "path": "/tmp/雪",
      "type": "directory"
    },
    {
      "id": "domain-name--c50c48c3-7181-43d9-8c77-6dfbe1c65ca9",
      "resolves_to_refs": [
        "ipv4-addr--0cb0d9b8-6c76-4ed6-98fc-5c9a4b629434"
      ],
      "type": "domain-name",
      "value": "example.invalid"
    },
    {
      "display_name": "Alice",
      "id": "email-addr--22efb832-3789-42c7-b40b-fc9938645954",
      "type": "email-addr",
      "value": "alice@example.invalid"
    },
    {
      "additional_header_fields": {
        "X-Example": [
          "second",
          "first"
        ],
        "X-Single": "one"
      },
      "body": "First line\nSecond line",
      "from_ref": "email-addr--22efb832-3789-42c7-b40b-fc9938645954",
      "id": "email-message--96c7a5b1-9b69-497a-a782-5a4f72b3d68f",
      "is_multipart": false,
      "subject": "Unicode subject 雪",
      "type": "email-message"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "created_by_ref": "identity--33257ab6-ad4e-48dc-971a-55d678cc155c",
      "extension_types": [
        "property-extension"
      ],
      "id": "extension-definition--83cc4e05-1331-4c13-acc0-bd58873714f2",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Reviewed future extension definition",
      "schema": "https://example.invalid/schema.json",
      "spec_version": "2.1",
      "type": "extension-definition",
      "version": "1.0.0"
    },
    {
      "contains_refs": [
        "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3"
      ],
      "hashes": {
        "SHA-256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      },
      "id": "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3",
      "name": "雪.bin",
      "size": 9007199254740991,
      "type": "file"
    },
    {
      "context": "outside-suggested-vocabulary",
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "grouping--43d1fe55-058c-4bb4-9122-044c38b420a0",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "object_refs": [
        "identity--33257ab6-ad4e-48dc-971a-55d678cc155c"
      ],
      "spec_version": "2.1",
      "type": "grouping"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "identity--33257ab6-ad4e-48dc-971a-55d678cc155c",
      "identity_class": "outside-suggested-vocabulary",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Organisation",
      "sectors": [
        "invented-sector"
      ],
      "spec_version": "2.1",
      "type": "identity"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "incident--037ea8fa-8629-4d81-8668-6d06c74ac320",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Incident",
      "spec_version": "2.1",
      "type": "incident"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "indicator--2e2c4915-c5a1-485f-96ad-2d9a1ec42130",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "pattern": "[file:name = '雪.exe']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2024-01-02T03:04:05.123456789012345678901234567890Z"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "infrastructure--ed3a63a7-8081-48c1-9508-2a17c9dec8ff",
      "infrastructure_types": [
        "invented-infrastructure"
      ],
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Infrastructure",
      "spec_version": "2.1",
      "type": "infrastructure"
    },
    {
      "aliases": [
        "second",
        "first",
        "second"
      ],
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "intrusion-set--78a9b176-b31c-466a-a372-f3948ca8c439",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Intrusion set",
      "spec_version": "2.1",
      "type": "intrusion-set"
    },
    {
      "id": "ipv4-addr--0cb0d9b8-6c76-4ed6-98fc-5c9a4b629434",
      "type": "ipv4-addr",
      "value": "192.0.2.1"
    },
    {
      "id": "ipv6-addr--46182ac4-4b12-4c4f-ab75-e0533c23c989",
      "type": "ipv6-addr",
      "value": "2001:db8::1"
    },
    {
      "contents": {
        "fr": {
          "content": "Texte traduit",
          "external_references": [
            {
              "description": ""
            },
            {
              "description": "Deux"
            }
          ]
        }
      },
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "language-content--eaee7579-83e1-4fcf-ad55-c9819a15a479",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "object_modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "object_ref": "note--a88b0260-4b9b-4cc7-99a1-797c607be416",
      "spec_version": "2.1",
      "type": "language-content"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "location--7179306a-bb4f-4f71-8d93-81a798ebc5aa",
      "latitude": 0.123456789012345678901234567890,
      "longitude": -1E-30,
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Precise coordinates",
      "precision": 1E-30,
      "spec_version": "2.1",
      "type": "location"
    },
    {
      "id": "mac-addr--12dd7e25-7919-45f7-af52-ffb510854c93",
      "type": "mac-addr",
      "value": "00:11:22:aa:bb:cc"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "malware--76239f07-a4be-432e-a103-a1b7b73296ff",
      "is_family": false,
      "malware_types": [
        "invented-malware"
      ],
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Malware",
      "operating_system_refs": [
        "software--f090f735-06c2-4359-a326-e91bf5b21ab5"
      ],
      "sample_refs": [
        "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3"
      ],
      "spec_version": "2.1",
      "type": "malware"
    },
    {
      "analysis_sco_refs": [
        "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3"
      ],
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "malware-analysis--1943a1b4-22fc-4e35-a2c1-5558c651db4f",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "product": "Analysis product",
      "result": "invented-result",
      "spec_version": "2.1",
      "type": "malware-analysis"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "definition": {
        "statement": "Copyright example\nUse with care"
      },
      "definition_type": "statement",
      "id": "marking-definition--e95f8739-dda2-41c7-a512-bebea9e72256",
      "spec_version": "2.1",
      "type": "marking-definition"
    },
    {
      "id": "mutex--763f3e64-4ced-495c-a171-29e10cc83062",
      "name": "Named mutex",
      "type": "mutex"
    },
    {
      "dst_port": 65535,
      "id": "network-traffic--98c7ebb2-2fa1-49c5-885f-3913d0198d29",
      "ipfix": {
        "customName": "exact",
        "octetDeltaCount": 9007199254740991
      },
      "is_active": false,
      "protocols": [
        "ipv4",
        "tcp"
      ],
      "src_byte_count": 0,
      "src_port": 0,
      "src_ref": "ipv4-addr--0cb0d9b8-6c76-4ed6-98fc-5c9a4b629434",
      "type": "network-traffic"
    },
    {
      "content": "Multiline\nUnicode Ελληνικά 👩🏽‍💻",
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "note--a88b0260-4b9b-4cc7-99a1-797c607be416",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "object_refs": [
        "identity--33257ab6-ad4e-48dc-971a-55d678cc155c"
      ],
      "spec_version": "2.1",
      "type": "note"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "first_observed": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "observed-data--0f67ba7a-082f-49a5-a53f-d5f2b063faeb",
      "last_observed": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "number_observed": 1,
      "object_refs": [
        "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3",
        "process--548e9f95-a27c-4c50-9beb-0b243b46c8f4"
      ],
      "spec_version": "2.1",
      "type": "observed-data"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "opinion--ab4aaeec-0873-426f-9aff-92b99a6c10df",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "object_refs": [
        "identity--33257ab6-ad4e-48dc-971a-55d678cc155c"
      ],
      "opinion": "strongly-agree",
      "spec_version": "2.1",
      "type": "opinion"
    },
    {
      "child_refs": [
        "process--548e9f95-a27c-4c50-9beb-0b243b46c8f4"
      ],
      "environment_variables": {
        "PATH": "/a:/b",
        "UNICODE": "雪"
      },
      "id": "process--548e9f95-a27c-4c50-9beb-0b243b46c8f4",
      "image_ref": "file--1a6e26eb-6d5b-40ce-a974-d19fae34dcc3",
      "is_hidden": false,
      "parent_ref": "process--548e9f95-a27c-4c50-9beb-0b243b46c8f4",
      "pid": 0,
      "type": "process"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "relationship--43138850-1b0c-4b78-9d65-3bfd2a3c48ea",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "relationship_type": "invented-relationship",
      "source_ref": "identity--33257ab6-ad4e-48dc-971a-55d678cc155c",
      "spec_version": "2.1",
      "target_ref": "tool--345b5e3a-e81f-4fcf-aa87-51a9008bb937",
      "type": "relationship"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "report--68ee719e-4941-4101-9dc5-a1dcf3c2792a",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Report",
      "object_refs": [
        "indicator--2e2c4915-c5a1-485f-96ad-2d9a1ec42130"
      ],
      "published": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "report_types": [
        "invented-report"
      ],
      "spec_version": "2.1",
      "type": "report"
    },
    {
      "count": 0,
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "sighting--bc1a1e5c-c6fa-43fa-839c-40927ab3a942",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "sighting_of_ref": "indicator--2e2c4915-c5a1-485f-96ad-2d9a1ec42130",
      "spec_version": "2.1",
      "summary": false,
      "type": "sighting",
      "where_sighted_refs": [
        "identity--33257ab6-ad4e-48dc-971a-55d678cc155c"
      ]
    },
    {
      "id": "software--f090f735-06c2-4359-a326-e91bf5b21ab5",
      "languages": [
        "eng"
      ],
      "name": "Software",
      "type": "software",
      "vendor": "Example"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "threat-actor--ef24a06c-15d9-487f-8c1e-7fe97e81dc4a",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Actor",
      "spec_version": "2.1",
      "threat_actor_types": [
        "invented-actor"
      ],
      "type": "threat-actor"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "id": "tool--345b5e3a-e81f-4fcf-aa87-51a9008bb937",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Tool",
      "spec_version": "2.1",
      "tool_types": [
        "invented-tool"
      ],
      "type": "tool"
    },
    {
      "id": "url--8d759ba2-9b1d-485a-b4db-dd08d6fb29d4",
      "type": "url",
      "value": "https://example.invalid/a?b=1"
    },
    {
      "id": "user-account--867e6eaf-783b-4113-a970-9d80811703fa",
      "is_disabled": false,
      "is_privileged": false,
      "type": "user-account",
      "user_id": "0"
    },
    {
      "created": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "external_references": [
        {
          "external_id": "V-1",
          "hashes": {
            "SHA-256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
          },
          "source_name": "example"
        }
      ],
      "id": "vulnerability--91cfef99-ba1b-4329-ba62-67c2c395e1ac",
      "modified": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "name": "Example vulnerability",
      "spec_version": "2.1",
      "type": "vulnerability"
    },
    {
      "id": "windows-registry-key--9d3973f6-1b2d-4909-8adc-5266aaeb8ecf",
      "key": "HKEY_LOCAL_MACHINE\\Software\\Example",
      "type": "windows-registry-key",
      "values": [
        {
          "data": "0",
          "data_type": "REG_DWORD",
          "name": "Setting"
        }
      ]
    },
    {
      "id": "x509-certificate--4ce11bfa-ab4d-464a-9d4b-44aa374870e7",
      "is_self_signed": false,
      "serial_number": "01",
      "type": "x509-certificate",
      "validity_not_after": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "validity_not_before": "2024-01-02T03:04:05.123456789012345678901234567890Z",
      "x509_v3_extensions": {
        "basic_constraints": "CA:FALSE",
        "key_usage": "digitalSignature"
      }
    }
  ],
  "type": "bundle"
}