CybOX_Simple_File_Instance.xml

<?xml version="1.0" encoding="UTF-8"?>
<cybox:Observables xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:cybox="http://docs.oasis-open.org/cti/ns/cybox/core-2"
    xmlns:cyboxCommon="http://docs.oasis-open.org/cti/ns/cybox/common-2"
    xmlns:FileObj="http://docs.oasis-open.org/cti/ns/cybox/objects/file-2"
    xmlns:cyboxVocabs="http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2"
    xmlns:example="http://example.com/"
    xsi:schemaLocation="
    http://docs.oasis-open.org/cti/ns/cybox/core-2 ../core.xsd
    http://docs.oasis-open.org/cti/ns/cybox/objects/file-2 ../objects/File_Object.xsd http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2 ../default_vocabularies.xsd"
    cybox_major_version="2" cybox_minor_version="1" cybox_update_version="1">
    <cybox:Observable id="example:Observable-58115a77-e24a-42b5-bb29-7bd56fa9655f">
        <cybox:Description>This observable specifies a specific file observation.</cybox:Description>
        <cybox:Object id="example:Object-17e97e7c-d3e6-4138-891b-291576dc5d41">
            <cybox:Properties xsi:type="FileObj:FileObjectType">
                <FileObj:File_Name>bad_file24.exe</FileObj:File_Name>
                <FileObj:File_Path>AppData\Mozilla</FileObj:File_Path>
                <FileObj:File_Extension>.exe</FileObj:File_Extension>
                <FileObj:Size_In_Bytes>3282</FileObj:Size_In_Bytes>
                <FileObj:Hashes>
					<cyboxCommon:Hash>
						<cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>
						<cyboxCommon:Simple_Hash_Value>a7a0390e99406f8975a1895860f55f2f</cyboxCommon:Simple_Hash_Value>
					</cyboxCommon:Hash>
				</FileObj:Hashes>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
</cybox:Observables>