{
    "schema": "attack_flow_v2",
    "theme": "dark_theme",
    "objects": [
        {
            "id": "flow",
            "instance": "99983681-ab8e-41ab-9b3c-cbb2cc777526",
            "properties": [
                [
                    "name",
                    "Turla - Carbon Emulation Plan"
                ],
                [
                    "description",
                    "The emulation plan, created by the ATT&CK ® Evaluations team, used during Day 1 of the ATT&CK evaluations Round 5. This scenario focuses on Carbon, a second-stage backdoor and framework that targets Windows and Linux infrastructures and provides data exfiltration capabilities."
                ],
                [
                    "author",
                    [
                        [
                            "name",
                            "Lauren Parker"
                        ],
                        [
                            "identity_class",
                            "individual"
                        ],
                        [
                            "contact_information",
                            "lparker@mitre.org"
                        ]
                    ]
                ],
                [
                    "scope",
                    "emulation-plan"
                ],
                [
                    "external_references",
                    [
                        [
                            "29353b339617f9eae39c2cf0e972a9f7",
                            [
                                [
                                    "source_name",
                                    "GitHub"
                                ],
                                [
                                    "description",
                                    "emulation plan"
                                ],
                                [
                                    "url",
                                    "https://github.com/attackevals/turla/tree/main/Emulation_Plan/Carbon_Scenario"
                                ]
                            ]
                        ],
                        [
                            "a7d65a8f13d462c5c4b77b853e789797",
                            [
                                [
                                    "source_name",
                                    "MITRE ATT&CK"
                                ],
                                [
                                    "description",
                                    "tool description"
                                ],
                                [
                                    "url",
                                    "https://attack.mitre.org/software/S0335/"
                                ]
                            ]
                        ],
                        [
                            "d2d2850d41bf2ae4642e51d1184ae912",
                            [
                                [
                                    "source_name",
                                    "MITRE ATT&CK"
                                ],
                                [
                                    "description",
                                    "group description"
                                ],
                                [
                                    "url",
                                    "https://attack.mitre.org/groups/G0010/"
                                ]
                            ]
                        ],
                        [
                            "f9d2b458f53c15af1fbcf900a63eada6",
                            [
                                [
                                    "source_name",
                                    "Unites States Attorney's Office"
                                ],
                                [
                                    "description",
                                    "Press Release"
                                ],
                                [
                                    "url",
                                    "https://www.justice.gov/usao-edny/pr/justice-department-announces-court-authorized-disruption-snake-malware-network"
                                ]
                            ]
                        ]
                    ]
                ],
                [
                    "created",
                    {
                        "time": "2023-08-14T12:34:32.279-04:00",
                        "zone": "America/New_York"
                    }
                ]
            ],
            "objects": [
                "fba858fe-9ade-4ae0-a6dc-fa39aefaabed",
                "a0090f3a-5d6a-4c7a-a4f8-4834cdd7ef27",
                "c0715732-b95b-4099-857b-4aba2dd3eaea",
                "300880cc-4b60-4426-bb3b-37001a91bfca",
                "a5f23d85-3e34-41e3-b19f-f46a449d24a7",
                "cbb053bb-18d8-4627-8e99-2780e2659c33",
                "60ea78d1-cc63-4638-84a0-1800785cd578",
                "3b750114-4a44-4a04-80b4-fad67ffb5094",
                "e3f56d38-5cde-4adf-b953-135f60afddbd",
                "008034e3-e277-4af1-8079-d4938b135aad",
                "c4536f66-216c-4044-a76a-b436acb74bea",
                "c3aecf8f-976c-4bfd-ad0e-4f593f3de80a",
                "0438cac9-b38d-4923-8ad4-697fa9b6483d",
                "3970411a-dac8-4bb6-8f67-7ad3d47f5dd4",
                "c162cbff-2683-40d5-9c55-cbd5772a3368",
                "4a316b90-9245-4084-8579-4cfbdb1a0733",
                "e718b299-80d5-49d8-a1f1-95dd104ea4d9",
                "d11500e6-6630-4ff5-aa0d-a8034bd36591",
                "4f0b72ec-1b96-4db0-a7db-d680d4e5359a",
                "f2399911-5380-47b4-8347-6bba92427018",
                "0f6d4ecb-7d4d-4b52-8204-351f1374ba43",
                "b10f5d52-fbba-4877-82ee-1fc4f7923c5b",
                "84b0f44c-c437-4eda-b632-866f3d877ee8",
                "dd0346d1-fba9-44c2-9106-805311014c57",
                "26c8038f-6927-4419-9e60-de942e071e14",
                "c28ee213-19d4-49b2-89a3-9e9f75dc536f",
                "6d2e8c8d-0fb5-42a3-b7dd-057879e7f46f",
                "a67b0ea2-d312-48ba-9527-7904482d9c43",
                "ba993d3d-6142-480b-985f-5441a848975b",
                "bf232d20-6d49-40d0-8c44-58f08574dad3",
                "3b3d9355-a0b6-4bc7-ad93-0919707b2b50",
                "7be8e6c0-296c-4b98-90e5-fd331bcbca2f",
                "8e0fb962-1ee7-4cdc-8103-3aaa11fbc087",
                "38fbe363-2654-43ed-a256-299a665d5cea",
                "dbaf15d1-9048-4211-80fb-b3469bd69e32",
                "ca800eeb-c23d-4456-a6d4-731b48448084",
                "e1c36bf9-9ac8-48b2-92ed-71599250b80f",
                "e2afd7a1-e442-4319-b964-089ff967ec4b",
                "1059a2b7-c397-409c-bae0-ceac3f2f15ff",
                "b5538a6e-3390-4e34-b83e-81bfcbf4578c",
                "9b34c004-b1b7-4fb4-8e55-45474c4c1667",
                "c128b9ff-ff6f-4694-91fc-85608d3c0156",
                "85001359-1af8-44fc-bbf5-d94c13a10c76",
                "a2e72f01-1d8a-4fb4-80bd-966b040c684d",
                "ff9df42a-98ce-416e-b026-d64d9babc03f",
                "5ba16c5c-1110-4aa6-9aff-6a196b1b3108",
                "17ff54db-19c8-43a1-986d-34d9127f3111",
                "b0f2ad8b-0055-4b4d-adef-af0f630b8ed0",
                "7f33f316-b7f7-4897-9976-cdc1946fe51e",
                "60637009-a067-43a5-a99d-2943e57eb94d",
                "ed466bf8-02fb-446b-a025-4426ca5bf42d",
                "87a04b97-e6d6-4fc2-88c1-22c8042302a7",
                "640ef9d0-f753-419e-9f7e-aaa55a4b8c93",
                "58a3dd6f-0a46-41a6-b5c1-b8664c45fba5",
                "9b423938-8a03-4bce-81d3-fc8a13cee73e",
                "15379da5-b13e-4bbc-88df-f3f0111860ed",
                "2d81bcff-0658-416c-a69a-9593608f35bb",
                "292f1605-5328-4a09-a1b2-a5e6ef7cc2f6",
                "3bae9a99-3953-4314-a780-256b9bbf4b41",
                "c5cf30b1-9f0f-4d35-8f78-eacb1e57d4d3",
                "f9ac23e2-21d7-4d08-8597-ac92543b956a",
                "be80dca1-f4ac-4789-9ca9-4f732698fb01",
                "51d7eecc-c49f-4c11-8435-5223333177ed",
                "3421620d-1bfe-4f15-8540-908c0c746b35",
                "646198fc-a266-4162-a9d7-411ebc6a5b8d",
                "81242f31-47bf-4365-9562-efc254a012ae",
                "abe37913-3154-4b42-b003-a942daa49539",
                "fac4c2d0-5e50-42ce-b469-ab2229654a2b",
                "c27a03f2-446e-4c7b-8c09-be6ccb56057f",
                "e0fd0a55-fada-4f3f-bae4-71f7a831caa2",
                "5d100051-face-4840-a62a-d20d2461b76e",
                "cdcb494f-573c-4169-ab15-a883c329a472",
                "d4bb90d8-c094-4436-94b9-78a51b9c389c",
                "2f849122-a91a-40f1-abcf-76fda69c6112",
                "268e07bf-12b0-4fd0-8821-d9945ebcefdf",
                "72849d6f-4b58-48da-b2c8-aefa44687ecd",
                "409fad56-f3e0-41b2-a8e8-0c666b664d46",
                "62f31eff-a7b0-435f-847b-b3c77ba795dd",
                "ea2a426e-6942-4271-a1a0-970c650d2dff",
                "574dde15-0c26-4422-8aa5-58acb371acfd",
                "88d7a441-e901-458d-b342-659e45179801",
                "bafcbabf-e3ea-4f37-97ea-1ac7dc03cdfb",
                "042497cb-081d-4435-aef4-447c50035fe3",
                "05407eed-39a7-4b54-be86-50988d34ae62",
                "3df76537-e1b0-48f3-b9df-7fc2b1c245df",
                "e16fc8b1-a542-474c-a533-ea04a8bb5745",
                "be27dd06-3241-44a9-be22-ad70bbb6cc40",
                "7723a87e-8ab1-46c0-bae0-a98e3ce7beeb",
                "0d3729d7-966b-49a4-8313-b86123ca8c1d",
                "81fca328-26f8-45a1-acd9-5789317ad8bc",
                "21f52ceb-b046-466b-8278-47f4d76a67f7",
                "3e35aa75-ada7-4a88-895e-e714273bdb1d",
                "7f188d68-1fc8-4697-9eb1-6343c9191a8e",
                "60e8cf86-c5f9-433f-bac7-727aa9708e85",
                "da52712e-9768-4972-bf29-fb1883ab7c65",
                "42805bce-4477-40f0-ad1a-c59e9a0a5951",
                "e9a0ff23-31e1-48ea-896e-e607ef52551e",
                "a655976a-b511-4d66-8f37-d0dcc8b65655",
                "5dd2ebc2-737f-4157-8016-51f6c2187f61",
                "c4e2725b-3b61-42b6-b6b1-c3ff2715a4d2",
                "c59b4c90-112b-4992-ab6c-a83c552e0a01",
                "510252e0-f143-4955-89ef-bf782fdd31f5",
                "7f98b93d-373a-4133-906b-1d99c546bc7b",
                "bcb9ac6c-9512-434e-aa21-6688cd1e858c",
                "25531aa1-3f88-4b82-ae73-b3b897b161a2",
                "b3e5cea9-e892-407e-a9d1-8a338cac2afc",
                "85725af9-4e4c-4c39-a364-de552d56562f",
                "32eb64e9-c138-441d-9b0a-22c9737ece8d",
                "cd1b1612-4c35-4db6-b6c0-f93807c2d0ae",
                "574054d4-d7b4-4a57-b625-da316ad8c044",
                "daaed13b-7faf-4524-97cb-6c6e2ab8044d",
                "a8217c02-6125-4fd8-ba08-530fbce8930e",
                "d30103ef-f631-405e-afd6-b64c06893a6a",
                "560e02d6-873c-4075-857e-c60e7074be70",
                "bfbe47ed-4e00-408c-9475-f98490c9e91f",
                "14ca6263-2df8-4d42-b9ee-c80ab54e8dc4",
                "2638875d-c059-4614-b1d6-8ea2a8aa1e96",
                "9d85472b-7c58-478b-adee-ae1c54cf7eb9",
                "7a43f9f1-8196-4354-9f0c-f7df6d88c3af",
                "30bd4a9e-100e-4b92-805e-31200d8b82e9",
                "7aee190e-ce35-4fa1-9078-5b859feee10e",
                "77782ce5-8500-44f5-9c8c-eac62a640a45",
                "d7ae3b0f-69ee-4a79-a377-29eb640b3967",
                "ac128898-e3d9-4dfd-be7e-f7389daf996a",
                "bb026450-be53-4e9b-a9a4-8fe4430f5361",
                "f40aac7a-9c7a-4093-ad5a-29ef958ee7a2",
                "50d111f6-54be-4096-abeb-a4712d3acf0e",
                "5dd04db0-bcbd-4b89-a24d-557cdcb7b98a",
                "a3ba5351-9428-4a55-bf78-e9c89e29b050",
                "e5f65f06-5799-4ed3-bb50-9fdfac567a3f",
                "2f32d747-f0f6-446c-bf93-d544ce4c892c",
                "36d2f694-2399-421b-8edb-c0b23a420206",
                "ff662bac-b43e-4609-b653-2b1e964c452f",
                "60a21f79-8e29-4f2e-b7d7-8811a3d1003a",
                "cf6bd88c-c57c-462d-b091-4ef14d7988fe",
                "21aa4ee0-ebe4-49c5-9ee4-1f20c4dec599",
                "73915270-8b18-408d-9b87-615007b95137",
                "aacca38f-fabc-4e3f-946e-24489602968a",
                "792259a5-1220-4fe0-a5d2-03ce48cebab4",
                "65a6720b-548b-40f9-adbd-100362efb3c4",
                "d12bfefa-b40b-4064-b5d6-f92c0a2a4966",
                "c6f31286-ee7f-4d2c-91de-09f8e450bcd2",
                "3c496d33-ef3e-478f-ab5f-c139ada1acd3",
                "4376c6b1-f534-45db-a81c-1cdb3b2a5b51",
                "f9a57570-5f1c-4eb4-a543-45ba2364291f",
                "607e503f-3915-4186-9487-2986be87075b",
                "2c17b552-1c3f-4251-b40d-84eaf0b84d42",
                "5fd887ca-b7aa-4e04-807f-5dbd2091bf02",
                "6d8bf22e-013a-4980-87da-f1f708727c38",
                "aa64b720-ae2c-4d16-8084-37026bfae881",
                "e4c50b95-3680-4997-9209-1ee68ec54ef0",
                "ad60185f-e172-40ba-a418-7df9a765a201",
                "355be087-e0af-40f2-b0ed-7b27f9e06403",
                "663c67b4-2c55-473c-9093-ae1526a53033",
                "d3afef2e-2346-457e-9c1b-5c7230419f14",
                "ce2ab8f1-4d5c-478a-88b6-83d17f2185fc",
                "15c41dc2-53c0-4ca9-89ed-9e76cdd474b4",
                "8cdbbb67-f921-4ada-9eb4-8baf758d505b",
                "6c0b2c3a-54da-45cc-a26e-b8558eaa14f9",
                "d0bca837-851f-4a85-adbf-eea74ccdd361",
                "37f9f394-315a-45df-b852-ee3fc5014cbc",
                "650a57a8-96e8-4e7c-aaf0-6a5e4ca5c29f",
                "8ebebcc6-6f5e-4039-bc90-37427dc8fd73",
                "478f8209-aff3-48a2-97a8-f3d50b2502de",
                "eda86f23-3b3c-466b-9176-46957ad673cb",
                "9fba1e4f-9899-48e3-bd61-e8205b4e769e",
                "d91e49f8-5fae-499a-a14f-027ffec5d321",
                "3e309154-ec98-4067-8c92-e90672f5869f",
                "92afc379-dfb0-4dc2-8737-1114bf72253b",
                "d5f45a5e-6064-439b-8c92-887a7464511f",
                "1dfd8170-80b3-422c-9204-4d6b44cd05e3",
                "9dd1611c-604a-4484-8432-3e450079712a",
                "faf3f714-0a5f-4931-977c-494478b97294",
                "dcbbe87c-7021-4858-a558-dffb4b847914",
                "eb928e27-7eed-455f-8b0b-916a88a303e0",
                "0e541791-394b-4162-be03-9f9278f7e1d5",
                "8316a0b4-66de-499a-8a42-d9065d3c4ba7",
                "cf2612ab-902d-4fd2-a7b5-8e7b244af462",
                "5162318e-a7a9-4698-ab0a-48c88a29d8fc",
                "8f81b5c7-c419-4703-a4e4-e51a6ba22b97",
                "48d3c8fb-6780-4a10-a3e6-fcd1cc1c1b32",
                "bf51d484-632c-4317-b8ab-021acafe0b05",
                "077ec5e3-8e89-4ac3-8a01-d0d057a4d24d",
                "a5584fbf-3d2c-4d39-8543-dbef40f285d3",
                "77373e64-f955-49d3-842d-28e0dfd6d087",
                "ce56fffa-e517-4459-b7b8-6ff58a77a6ad",
                "893ab53f-f8d5-417a-868e-4532bdb94b06",
                "582da220-1362-4c1b-ac1e-8edac4e3a7ca",
                "87584b53-b48f-44dd-8d01-e317a9e62c87",
                "899b222b-c41c-4463-85b5-a337d7476660",
                "0d577233-2b2e-4e32-8e78-cf20e4d129d3",
                "c357365c-fe30-49dd-8da6-de60ccb7724e",
                "40e9b8d4-100b-4aa3-9123-82392dba9232",
                "405ecdfd-6a8e-46cd-b514-2293b790636f",
                "c3d7f29b-68f2-4089-bf41-6e3d94bffcd2",
                "d1046ea8-e7db-4fcf-bef9-77c585d92f35",
                "6fb1e1b0-2388-4bea-954c-858549a0fb2b",
                "6b067335-70fd-474d-9394-4ca443039fbb",
                "29ef7edf-5438-415f-a10f-27d79cb39bac",
                "7e0bfe12-467b-481c-a190-bc2f2b81ebe9",
                "76634d34-e225-4ac5-a1a1-707cde424e46",
                "d19d7718-a9cd-4c88-8930-c25ac023a994",
                "3c0ec891-3e2e-4b65-a968-6ea52b554b13",
                "c50397e5-bbb5-433d-8123-2f466680a675",
                "22d2c2e4-0e4d-4b4c-868b-8056fe634d32",
                "703e7750-2856-464f-9040-c9c25574db64",
                "b1749e1b-dc2c-4c19-a5e3-70cd794c9b8c",
                "152d7662-47d4-46cf-9819-72c430757abb",
                "5eb36921-dd1b-4de5-96b0-9d0ef2058749",
                "639eb5ef-fceb-4ca5-ba61-14eed316c97f",
                "748a674a-72bf-457d-aae1-516434fa31a6",
                "c01cfa4d-64b6-437d-b270-092f381577eb",
                "3c3b7ca1-60a0-4286-ad11-1232a8c30269",
                "59203da5-73ed-4cac-9ab2-13e1e6cb26e7",
                "d6fe7e2d-42e1-41f0-a142-0561e733d5b8",
                "889d521d-57fb-4bf2-9fe2-9f78818afa1d",
                "ac437e61-2f2e-4ac9-9daa-cf12d3399527",
                "0dc5ed20-eec4-409e-8a4f-912fa3bfbb0a",
                "7ff0b240-1fe8-46e8-ab47-49b705864b96",
                "d0b1c8fe-13a6-41e7-96fe-e08b37febccb",
                "57583f62-d4fb-42a0-946e-5bf039dd23eb",
                "f84e56b2-d28d-4200-985c-39688f12bfc5",
                "ceb33404-38f3-489f-9ed8-676d389836ad",
                "5a6daf1e-b3c2-4cb2-bb0f-a6a2ba99f52c",
                "a0002de1-4df1-4c78-bf76-407bbf551e6e",
                "01a24a01-0891-495f-b2bf-2faf24a1c0b2",
                "a9f72a14-7e67-4bda-b3f1-fc8febe5d5ce",
                "465b48e0-0c8a-43bd-8e90-3f33b4d55341",
                "71dd65f1-45e6-4f6f-8249-6a7909eb4b13",
                "df9288f1-4d96-49f7-9a5a-963fa77d0389",
                "b235d21a-daba-487e-a5fe-4f034056c50e",
                "ddad5941-ff0d-4104-927d-9a5cd88d7189",
                "1115ca53-8e01-450f-9b08-372af94613ce",
                "a12b4799-1f17-4b8c-9497-8d12a29e76bf",
                "e29d1661-7554-4e82-a89f-450acb5c18bb",
                "9f9c3ab6-12a8-44de-8fb8-19a2a5a53dfa",
                "76f1da1f-d530-4eab-a283-9457194f3baa",
                "3bfa8d52-32c9-4001-a213-7ef9ff06e74b",
                "af046f51-6908-474e-9cf0-3796d37d6b0d",
                "6a6ab413-862c-499c-873a-ff97ece68044",
                "9ba17838-ce01-45a9-a8e7-9795724ade94",
                "ff604248-f53b-4a3c-921e-c337f6faf6a2",
                "48c31894-6b07-46e7-889b-c49ab0d78b03",
                "331f943a-95a2-49c1-894a-36b28656e112",
                "78054e85-b18f-487b-8770-23b5e23f5edf",
                "f6a360e9-017f-4e9e-a622-b244e580dc7b",
                "964e994c-a8f0-41e0-a951-7d6df4b9a9f1",
                "7e5c41d5-df6f-49ea-84cf-1fe900b9fd6f",
                "3c222ff8-ceb3-4a48-9beb-b4862857541b",
                "02db09d2-4a6b-4822-93cf-3356185a4de8",
                "b3dc5a50-e699-4327-a06f-700e54b1c00c",
                "93fc9ea4-a42d-4608-a066-2ba72ef81743",
                "114ce8e7-5f14-49ed-a14b-8b975574928f",
                "37225277-74cf-4fdc-ad3c-cf909b5665d9",
                "54504110-d800-434e-ac35-b393c0d04358",
                "b43c700d-47de-4c38-a6d7-f414c7c0d030",
                "d61bcea4-01b9-4f5b-9adf-f5d5a2275013",
                "b2dc5abb-7d7c-473d-b124-0aaf23c3ea47",
                "8b005c54-e446-4a17-99d0-1892ad4d7373",
                "24d2e486-abd9-4790-bb36-4eea0a8cfaa2",
                "53900fc1-afff-4a2e-8cfa-cfefdd352e1b",
                "ea1020dc-aabc-4753-bced-1f83782d01c0",
                "fb9dad2d-28d4-409b-9384-6fa3aff37a5a",
                "c1220c75-3597-4fd3-a340-550b6863bd1b",
                "68f92163-215b-40b0-8ab3-c2d1a245ae59",
                "0beed176-56c8-4154-81b6-be13da211109",
                "83918801-3f6c-46cf-bcfb-2526b51bf5fb",
                "89675195-dd60-4fd8-83e7-d96ad314ea6c",
                "4d164140-e60b-4f01-8430-38062b07ba8c",
                "2908b72e-f062-4601-a536-edef7a910279",
                "22f5e129-2c9f-4b79-8317-7a3178a071d8",
                "74453d46-eb96-4e82-a676-76b644e272f3",
                "d616c7b8-ec33-4ff5-be7a-3033154731f6",
                "eb09b9be-8a82-4a2e-b5c6-8746b13f48c8",
                "aab5ecac-d592-4c87-9e77-10f3e0a1df38",
                "d9f0fdcc-8fac-4ea2-b11f-88302030dfb5",
                "c9109f42-c087-4ede-8709-a26b7e954fcf",
                "a32a6261-8469-4912-87a1-b5153f4a2ee9",
                "0ba9c654-32a5-4853-9a27-e1b583ccb159",
                "307e5d85-a676-44f0-a4d9-d8efb5853225",
                "8d609ef9-3ae8-4c1a-9e30-b79dc45eb661",
                "d03f66c8-1f90-43f5-9150-5b3c09046dfd",
                "2ceffd16-c580-4ba1-9462-c8719934e244",
                "1f51e091-f984-44b9-9de4-f4d53c43cc90",
                "27da13a9-09bf-4dfd-846e-b7beea16fbe4",
                "79ca06c8-3229-4d41-9160-c228830522dc",
                "7f60addd-0e7f-4218-acdb-e0ebe5c514f0",
                "b354ba41-073f-46a0-83e5-9c11992bf441",
                "c786d46f-cd49-4ec0-a972-bcd5d55cfd04",
                "b3a66965-1879-4861-a4cf-3bca5b896604",
                "f5f760aa-365f-44dc-88ca-4fa4d27463cb",
                "9b6d7b74-c4a1-410b-9fc6-635881e3e4a4",
                "54da6a33-0669-4e98-9d97-7456327d0ada",
                "0651ae75-6361-429d-94f9-4f079e43397e",
                "d92657d3-60dd-495b-bf8d-a602853ae9c1",
                "b40d272d-17df-42f2-ba21-de0c9a460def",
                "67fcca2e-9d46-49aa-aef1-38099d0636c9",
                "ffeafcc9-ac70-4466-b139-7c256e843e1d",
                "08c7c377-56da-46dd-b99a-62c86d8c4ad6",
                "53bda5b2-062d-4a60-a2b2-f8bb1018a954",
                "995318be-bb91-48e9-8607-feef8a0322ec",
                "06d9743e-3243-40eb-8448-7a56a11f44d7",
                "752470ae-25cb-4f37-b64b-2133f2d3284a",
                "65fa3b8b-c3f5-4cf7-b4b3-85faf2fb4740",
                "e5dac779-01a7-40c7-9bb8-9831ed0f8a7e",
                "74c3e5ab-823f-413b-b558-05e925ff290f",
                "b8b80ae0-8d09-4f08-97ef-bbe475ff8b4d",
                "45351783-5516-4524-a176-d8b8d9c48b10",
                "ae138298-9a73-4237-b792-dc379f330ce9",
                "afb3f3c4-0ba7-4882-8c2c-ddc9b80b5674",
                "54396e15-e40a-4d44-957e-134032ec8e30",
                "79e27662-752d-4321-8a4c-4e08b25d2d86",
                "120f5102-986c-4ad5-921b-087c52e84827",
                "cdea0282-b3f6-4e1b-afa3-ff01a05a1451",
                "d532a295-2d21-44ed-b9da-ce699b2a22c4",
                "05fcf90d-0427-43a9-9fb4-138e2386f169",
                "ff98a1f7-4540-4092-9e6c-a6eb804842b6",
                "38bf3079-a747-4c6d-9a57-5856b5cc5e53",
                "e6b45aff-e2e3-45e6-9dd0-6e6765250772",
                "157b0ffd-b909-488c-99f4-214bd97c91b7",
                "b5c7cf55-2fe5-4bb8-a8e9-75643619c5e7",
                "38437399-99d3-4f58-bf9e-0b53efc45c7d",
                "faf0efde-ca45-4b89-9e31-c783da3d8fed",
                "ed222435-f461-4810-b389-a4aef702098d",
                "0bc5eaa1-2786-4c72-a27b-afd2b62e8599",
                "ac066ffd-c979-4436-bd84-d6738a189ca0",
                "7ac5824b-8781-4153-a825-ba58dacca717",
                "3f41358e-f23d-4325-bcff-0ca7d7dc0284",
                "3aaf6319-be0f-45b8-8f80-2dd103c51f83",
                "471df515-f143-4759-bafb-75252ccfb896",
                "ca852f01-e5e0-4635-be05-30c93ef7bfc8",
                "91e662e8-b64f-4a57-8f9c-2f1ce06cb673",
                "fa22dc7f-a275-470e-ae30-3cd85ed9c6e0",
                "eedb256d-67bf-4295-9c7e-4f9632e5dd00",
                "4bc8e909-ba9d-4574-a1ec-f730f13ba77d",
                "a04b91f8-0c84-49d4-ad15-b64ae2b3be0c",
                "9f7b9f48-6c23-4c2b-8bf5-f6fa222d7ce5",
                "2eea001b-b702-4109-b1e8-9ee0b503304c"
            ]
        },
        {
            "id": "dynamic_line",
            "instance": "fba858fe-9ade-4ae0-a6dc-fa39aefaabed",
            "source": "0f233bd8-2374-480f-a7db-db61df8fe4d3",
            "target": "5657020c-8378-4e37-83ed-eeeb44224bc9",
            "handles": [
                "48b3798f-9bc5-4121-8b83-79a67445bb4e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0f233bd8-2374-480f-a7db-db61df8fe4d3"
        },
        {
            "id": "generic_latch",
            "instance": "5657020c-8378-4e37-83ed-eeeb44224bc9"
        },
        {
            "id": "generic_handle",
            "instance": "48b3798f-9bc5-4121-8b83-79a67445bb4e"
        },
        {
            "id": "dynamic_line",
            "instance": "a0090f3a-5d6a-4c7a-a4f8-4834cdd7ef27",
            "source": "ebcf4fad-d8ef-4465-9d77-d74c2e101885",
            "target": "a72a1b41-4d31-425b-929d-8fc65ac411d5",
            "handles": [
                "2b95999f-6b65-4c94-9a0c-0ac5bd27fcb8"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ebcf4fad-d8ef-4465-9d77-d74c2e101885"
        },
        {
            "id": "generic_latch",
            "instance": "a72a1b41-4d31-425b-929d-8fc65ac411d5"
        },
        {
            "id": "generic_handle",
            "instance": "2b95999f-6b65-4c94-9a0c-0ac5bd27fcb8"
        },
        {
            "id": "dynamic_line",
            "instance": "c0715732-b95b-4099-857b-4aba2dd3eaea",
            "source": "7ec6215b-b47d-4875-8a42-fe8441212443",
            "target": "6bdf9433-4368-47de-98c0-618f4824b95c",
            "handles": [
                "50154efd-5bf9-4ad7-ba62-37a866b8f7b6"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "7ec6215b-b47d-4875-8a42-fe8441212443"
        },
        {
            "id": "generic_latch",
            "instance": "6bdf9433-4368-47de-98c0-618f4824b95c"
        },
        {
            "id": "generic_handle",
            "instance": "50154efd-5bf9-4ad7-ba62-37a866b8f7b6"
        },
        {
            "id": "dynamic_line",
            "instance": "300880cc-4b60-4426-bb3b-37001a91bfca",
            "source": "56f53c31-8da4-46f6-91b0-f7b1e67154f5",
            "target": "cdf6d8f2-29b4-44ae-bef0-b2be3b412c38",
            "handles": [
                "4cfc352e-dca5-4b23-80da-73d90a7d4bd4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "56f53c31-8da4-46f6-91b0-f7b1e67154f5"
        },
        {
            "id": "generic_latch",
            "instance": "cdf6d8f2-29b4-44ae-bef0-b2be3b412c38"
        },
        {
            "id": "generic_handle",
            "instance": "4cfc352e-dca5-4b23-80da-73d90a7d4bd4"
        },
        {
            "id": "dynamic_line",
            "instance": "a5f23d85-3e34-41e3-b19f-f46a449d24a7",
            "source": "fad77d31-4838-4bb3-9516-b0a1fb505fee",
            "target": "c94f3906-4b8d-46c2-be69-244db1764399",
            "handles": [
                "62cb484e-5bcd-420f-8ca8-3a9b1623fc22"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "fad77d31-4838-4bb3-9516-b0a1fb505fee"
        },
        {
            "id": "generic_latch",
            "instance": "c94f3906-4b8d-46c2-be69-244db1764399"
        },
        {
            "id": "generic_handle",
            "instance": "62cb484e-5bcd-420f-8ca8-3a9b1623fc22"
        },
        {
            "id": "dynamic_line",
            "instance": "cbb053bb-18d8-4627-8e99-2780e2659c33",
            "source": "18af9c38-8e70-45e7-9dc1-789112f8d1cd",
            "target": "84280d79-2dfe-4bdc-b5e8-6ea4caee39f9",
            "handles": [
                "070da0ef-5d4f-42f0-b207-617d30cb16c1"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "18af9c38-8e70-45e7-9dc1-789112f8d1cd"
        },
        {
            "id": "generic_latch",
            "instance": "84280d79-2dfe-4bdc-b5e8-6ea4caee39f9"
        },
        {
            "id": "generic_handle",
            "instance": "070da0ef-5d4f-42f0-b207-617d30cb16c1"
        },
        {
            "id": "dynamic_line",
            "instance": "60ea78d1-cc63-4638-84a0-1800785cd578",
            "source": "4e590e32-0812-47c2-8565-f660f6d17869",
            "target": "e812c5c9-eaf7-4339-adb5-2b52bfe2a9a5",
            "handles": [
                "b61fc0dd-63b4-485c-9ec7-d3a50615c18d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4e590e32-0812-47c2-8565-f660f6d17869"
        },
        {
            "id": "generic_latch",
            "instance": "e812c5c9-eaf7-4339-adb5-2b52bfe2a9a5"
        },
        {
            "id": "generic_handle",
            "instance": "b61fc0dd-63b4-485c-9ec7-d3a50615c18d"
        },
        {
            "id": "dynamic_line",
            "instance": "3b750114-4a44-4a04-80b4-fad67ffb5094",
            "source": "8ee69551-bddb-4741-9272-d96c2ce1299c",
            "target": "a9f2f079-b5c2-418c-9a01-336c7796e75a",
            "handles": [
                "a0b39047-b136-4aa5-a804-813b99624f00"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8ee69551-bddb-4741-9272-d96c2ce1299c"
        },
        {
            "id": "generic_latch",
            "instance": "a9f2f079-b5c2-418c-9a01-336c7796e75a"
        },
        {
            "id": "generic_handle",
            "instance": "a0b39047-b136-4aa5-a804-813b99624f00"
        },
        {
            "id": "dynamic_line",
            "instance": "e3f56d38-5cde-4adf-b953-135f60afddbd",
            "source": "ee6755d5-18e6-4284-a732-37733fc15d8c",
            "target": "619851a6-3726-464d-9f50-a7b6baead4c4",
            "handles": [
                "4344b0cd-1916-41a6-ba5e-601aafc82974"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ee6755d5-18e6-4284-a732-37733fc15d8c"
        },
        {
            "id": "generic_latch",
            "instance": "619851a6-3726-464d-9f50-a7b6baead4c4"
        },
        {
            "id": "generic_handle",
            "instance": "4344b0cd-1916-41a6-ba5e-601aafc82974"
        },
        {
            "id": "dynamic_line",
            "instance": "008034e3-e277-4af1-8079-d4938b135aad",
            "source": "c7b4e0c4-5140-45df-b19b-3dfa27bc024a",
            "target": "8a707901-190a-42e2-81f5-0c57e7310b1e",
            "handles": [
                "b54a1cd1-066f-416f-a0aa-9411135f49e4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "c7b4e0c4-5140-45df-b19b-3dfa27bc024a"
        },
        {
            "id": "generic_latch",
            "instance": "8a707901-190a-42e2-81f5-0c57e7310b1e"
        },
        {
            "id": "generic_handle",
            "instance": "b54a1cd1-066f-416f-a0aa-9411135f49e4"
        },
        {
            "id": "dynamic_line",
            "instance": "c4536f66-216c-4044-a76a-b436acb74bea",
            "source": "438bc93a-235a-4c37-8dad-73538a4c18b5",
            "target": "84b694ce-d3ff-4020-b943-df1d20293fc9",
            "handles": [
                "a6372228-8e2e-4311-910c-3b2a6394154d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "438bc93a-235a-4c37-8dad-73538a4c18b5"
        },
        {
            "id": "generic_latch",
            "instance": "84b694ce-d3ff-4020-b943-df1d20293fc9"
        },
        {
            "id": "generic_handle",
            "instance": "a6372228-8e2e-4311-910c-3b2a6394154d"
        },
        {
            "id": "dynamic_line",
            "instance": "c3aecf8f-976c-4bfd-ad0e-4f593f3de80a",
            "source": "1dcd1f57-f0b7-4246-a990-c161e376160e",
            "target": "6f1676b7-d26d-40b6-9ec7-286ceb12f866",
            "handles": [
                "67b2be26-d8cb-46ce-a10e-a16b57647180"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1dcd1f57-f0b7-4246-a990-c161e376160e"
        },
        {
            "id": "generic_latch",
            "instance": "6f1676b7-d26d-40b6-9ec7-286ceb12f866"
        },
        {
            "id": "generic_handle",
            "instance": "67b2be26-d8cb-46ce-a10e-a16b57647180"
        },
        {
            "id": "dynamic_line",
            "instance": "0438cac9-b38d-4923-8ad4-697fa9b6483d",
            "source": "9be8b428-09c5-4708-b474-6c5c9e1576d4",
            "target": "81ea0351-f66b-408d-b1ab-ac700064cc49",
            "handles": [
                "6b2455f2-5e83-4ac7-a7c1-e2345f86671b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "9be8b428-09c5-4708-b474-6c5c9e1576d4"
        },
        {
            "id": "generic_latch",
            "instance": "81ea0351-f66b-408d-b1ab-ac700064cc49"
        },
        {
            "id": "generic_handle",
            "instance": "6b2455f2-5e83-4ac7-a7c1-e2345f86671b"
        },
        {
            "id": "dynamic_line",
            "instance": "3970411a-dac8-4bb6-8f67-7ad3d47f5dd4",
            "source": "230089bc-eaae-473a-b20a-f9e1decf1684",
            "target": "64f1b77d-15f2-4d3b-b5c2-540e462612b9",
            "handles": [
                "33d52de2-42eb-4368-af9c-bcfc6cf468d6"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "230089bc-eaae-473a-b20a-f9e1decf1684"
        },
        {
            "id": "generic_latch",
            "instance": "64f1b77d-15f2-4d3b-b5c2-540e462612b9"
        },
        {
            "id": "generic_handle",
            "instance": "33d52de2-42eb-4368-af9c-bcfc6cf468d6"
        },
        {
            "id": "dynamic_line",
            "instance": "c162cbff-2683-40d5-9c55-cbd5772a3368",
            "source": "068cb330-b895-4919-8773-78a7cf5c7002",
            "target": "849fe377-eca2-4424-b6e4-29ae12d69903",
            "handles": [
                "3f4e9a59-9189-44c9-8275-791d4332fbd5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "068cb330-b895-4919-8773-78a7cf5c7002"
        },
        {
            "id": "generic_latch",
            "instance": "849fe377-eca2-4424-b6e4-29ae12d69903"
        },
        {
            "id": "generic_handle",
            "instance": "3f4e9a59-9189-44c9-8275-791d4332fbd5"
        },
        {
            "id": "dynamic_line",
            "instance": "4a316b90-9245-4084-8579-4cfbdb1a0733",
            "source": "945cdb9e-a097-4ead-a411-538e844040bc",
            "target": "b5b86821-f1df-46f5-aa22-37bde638dfe7",
            "handles": [
                "3e38e5a0-2395-4f03-94dd-a726ef26e123"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "945cdb9e-a097-4ead-a411-538e844040bc"
        },
        {
            "id": "generic_latch",
            "instance": "b5b86821-f1df-46f5-aa22-37bde638dfe7"
        },
        {
            "id": "generic_handle",
            "instance": "3e38e5a0-2395-4f03-94dd-a726ef26e123"
        },
        {
            "id": "dynamic_line",
            "instance": "e718b299-80d5-49d8-a1f1-95dd104ea4d9",
            "source": "319e153f-878f-4ab5-8174-764dbc7ecc0b",
            "target": "254a756d-9004-4df6-bc5a-43d6d0aa3f60",
            "handles": [
                "209d8d9d-29ab-44b1-a4f8-c8b4a5d4afd8"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "319e153f-878f-4ab5-8174-764dbc7ecc0b"
        },
        {
            "id": "generic_latch",
            "instance": "254a756d-9004-4df6-bc5a-43d6d0aa3f60"
        },
        {
            "id": "generic_handle",
            "instance": "209d8d9d-29ab-44b1-a4f8-c8b4a5d4afd8"
        },
        {
            "id": "dynamic_line",
            "instance": "d11500e6-6630-4ff5-aa0d-a8034bd36591",
            "source": "e38bbfed-ab44-4449-98f9-a5c75bf76706",
            "target": "1097f835-a6c3-4700-a6ed-342495682091",
            "handles": [
                "44f1c2e5-1f31-415c-bd19-550d21523ab2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e38bbfed-ab44-4449-98f9-a5c75bf76706"
        },
        {
            "id": "generic_latch",
            "instance": "1097f835-a6c3-4700-a6ed-342495682091"
        },
        {
            "id": "generic_handle",
            "instance": "44f1c2e5-1f31-415c-bd19-550d21523ab2"
        },
        {
            "id": "dynamic_line",
            "instance": "4f0b72ec-1b96-4db0-a7db-d680d4e5359a",
            "source": "0154cdc7-aee1-4bb1-a59b-3186720dc214",
            "target": "25554fcd-2bcf-4e39-9e04-4d080b1c7558",
            "handles": [
                "bffc357c-9e5d-442a-8de6-c0a0df783a66"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0154cdc7-aee1-4bb1-a59b-3186720dc214"
        },
        {
            "id": "generic_latch",
            "instance": "25554fcd-2bcf-4e39-9e04-4d080b1c7558"
        },
        {
            "id": "generic_handle",
            "instance": "bffc357c-9e5d-442a-8de6-c0a0df783a66"
        },
        {
            "id": "dynamic_line",
            "instance": "f2399911-5380-47b4-8347-6bba92427018",
            "source": "9311fea8-ecce-4570-adf5-a2d2ca72f76b",
            "target": "48c90eca-3440-4f37-beab-3a156a1486b1",
            "handles": [
                "7e38dfca-6ec6-43ef-a3d4-ebbceac59801"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "9311fea8-ecce-4570-adf5-a2d2ca72f76b"
        },
        {
            "id": "generic_latch",
            "instance": "48c90eca-3440-4f37-beab-3a156a1486b1"
        },
        {
            "id": "generic_handle",
            "instance": "7e38dfca-6ec6-43ef-a3d4-ebbceac59801"
        },
        {
            "id": "dynamic_line",
            "instance": "0f6d4ecb-7d4d-4b52-8204-351f1374ba43",
            "source": "4774d5e3-8959-4292-836a-f63c147febf6",
            "target": "18c9c7a4-eeff-4e90-a7de-938e63bada0f",
            "handles": [
                "dcfbb0e1-964b-4a36-88e0-8518ff8a5c58"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4774d5e3-8959-4292-836a-f63c147febf6"
        },
        {
            "id": "generic_latch",
            "instance": "18c9c7a4-eeff-4e90-a7de-938e63bada0f"
        },
        {
            "id": "generic_handle",
            "instance": "dcfbb0e1-964b-4a36-88e0-8518ff8a5c58"
        },
        {
            "id": "dynamic_line",
            "instance": "b10f5d52-fbba-4877-82ee-1fc4f7923c5b",
            "source": "4953d20f-af79-47a1-aa75-24844cb32bc3",
            "target": "7c65661b-843c-4a08-a9ab-2f646efd0d12",
            "handles": [
                "7115b0c5-b1cc-417b-bca2-0cb6a17ca15f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4953d20f-af79-47a1-aa75-24844cb32bc3"
        },
        {
            "id": "generic_latch",
            "instance": "7c65661b-843c-4a08-a9ab-2f646efd0d12"
        },
        {
            "id": "generic_handle",
            "instance": "7115b0c5-b1cc-417b-bca2-0cb6a17ca15f"
        },
        {
            "id": "dynamic_line",
            "instance": "84b0f44c-c437-4eda-b632-866f3d877ee8",
            "source": "a11fa04c-5cfa-48e2-bf9f-b1f84459003e",
            "target": "b3825df3-8265-40ce-b942-4c9b098fae2f",
            "handles": [
                "929d8a9f-dbb2-488a-a269-4e883a6c3d44"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a11fa04c-5cfa-48e2-bf9f-b1f84459003e"
        },
        {
            "id": "generic_latch",
            "instance": "b3825df3-8265-40ce-b942-4c9b098fae2f"
        },
        {
            "id": "generic_handle",
            "instance": "929d8a9f-dbb2-488a-a269-4e883a6c3d44"
        },
        {
            "id": "dynamic_line",
            "instance": "dd0346d1-fba9-44c2-9106-805311014c57",
            "source": "b8c366a2-4acc-403f-9ff4-8944219012e9",
            "target": "0ef47577-6498-445c-94d0-356759bb9cbe",
            "handles": [
                "04fe35a8-6d98-4610-b0d0-8e9d0b9b83e8"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b8c366a2-4acc-403f-9ff4-8944219012e9"
        },
        {
            "id": "generic_latch",
            "instance": "0ef47577-6498-445c-94d0-356759bb9cbe"
        },
        {
            "id": "generic_handle",
            "instance": "04fe35a8-6d98-4610-b0d0-8e9d0b9b83e8"
        },
        {
            "id": "dynamic_line",
            "instance": "26c8038f-6927-4419-9e60-de942e071e14",
            "source": "2b3fdf2e-276a-4d56-a7ca-418b67b38ff9",
            "target": "aceef139-7147-48d0-a999-8106e65a2312",
            "handles": [
                "1f932c7d-4d96-4b5f-87a2-417d2d663ef3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "2b3fdf2e-276a-4d56-a7ca-418b67b38ff9"
        },
        {
            "id": "generic_latch",
            "instance": "aceef139-7147-48d0-a999-8106e65a2312"
        },
        {
            "id": "generic_handle",
            "instance": "1f932c7d-4d96-4b5f-87a2-417d2d663ef3"
        },
        {
            "id": "dynamic_line",
            "instance": "c28ee213-19d4-49b2-89a3-9e9f75dc536f",
            "source": "836e93a0-944e-42cf-bf10-eae5a8bba7aa",
            "target": "cc461922-ae71-4ca3-9b4b-9d31dde21f1f",
            "handles": [
                "d8a55b5a-cad6-42b0-b704-a3e4a223cf74"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "836e93a0-944e-42cf-bf10-eae5a8bba7aa"
        },
        {
            "id": "generic_latch",
            "instance": "cc461922-ae71-4ca3-9b4b-9d31dde21f1f"
        },
        {
            "id": "generic_handle",
            "instance": "d8a55b5a-cad6-42b0-b704-a3e4a223cf74"
        },
        {
            "id": "dynamic_line",
            "instance": "6d2e8c8d-0fb5-42a3-b7dd-057879e7f46f",
            "source": "a596cbc0-d844-409f-a77e-c47b2c8b9833",
            "target": "a239cfc1-273b-469b-abbd-d1e84c8d90ae",
            "handles": [
                "ce1431bf-38b1-4199-ac63-abd82dbca722"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a596cbc0-d844-409f-a77e-c47b2c8b9833"
        },
        {
            "id": "generic_latch",
            "instance": "a239cfc1-273b-469b-abbd-d1e84c8d90ae"
        },
        {
            "id": "generic_handle",
            "instance": "ce1431bf-38b1-4199-ac63-abd82dbca722"
        },
        {
            "id": "dynamic_line",
            "instance": "a67b0ea2-d312-48ba-9527-7904482d9c43",
            "source": "fa6980c0-b422-4f7c-9155-ee5e514d1679",
            "target": "7d2988e2-7aba-4639-9df3-d277a6acb534",
            "handles": [
                "c7e07a75-e1a0-4c27-8e3c-e3b107dfe0a4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "fa6980c0-b422-4f7c-9155-ee5e514d1679"
        },
        {
            "id": "generic_latch",
            "instance": "7d2988e2-7aba-4639-9df3-d277a6acb534"
        },
        {
            "id": "generic_handle",
            "instance": "c7e07a75-e1a0-4c27-8e3c-e3b107dfe0a4"
        },
        {
            "id": "dynamic_line",
            "instance": "ba993d3d-6142-480b-985f-5441a848975b",
            "source": "22005518-c680-4bec-bee7-a4188836607f",
            "target": "5f962ba3-b943-4e93-88ec-2f558ba978df",
            "handles": [
                "f64ec2c8-d001-4ee9-b8e5-9ed7623f219f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "22005518-c680-4bec-bee7-a4188836607f"
        },
        {
            "id": "generic_latch",
            "instance": "5f962ba3-b943-4e93-88ec-2f558ba978df"
        },
        {
            "id": "generic_handle",
            "instance": "f64ec2c8-d001-4ee9-b8e5-9ed7623f219f"
        },
        {
            "id": "dynamic_line",
            "instance": "bf232d20-6d49-40d0-8c44-58f08574dad3",
            "source": "50af796f-6201-4e4a-921d-2585b703b05c",
            "target": "71b182eb-b528-4dd0-8b54-402f9ddaec3f",
            "handles": [
                "38c60e01-a638-4dcd-b344-ce084b99e180"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "50af796f-6201-4e4a-921d-2585b703b05c"
        },
        {
            "id": "generic_latch",
            "instance": "71b182eb-b528-4dd0-8b54-402f9ddaec3f"
        },
        {
            "id": "generic_handle",
            "instance": "38c60e01-a638-4dcd-b344-ce084b99e180"
        },
        {
            "id": "dynamic_line",
            "instance": "3b3d9355-a0b6-4bc7-ad93-0919707b2b50",
            "source": "fc077a68-ad3c-4298-a3df-6cc5a66bc867",
            "target": "43db07f4-4b8d-4373-8e59-38d65bcc1b9b",
            "handles": [
                "89da2274-af86-4c06-a698-69832083165e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "fc077a68-ad3c-4298-a3df-6cc5a66bc867"
        },
        {
            "id": "generic_latch",
            "instance": "43db07f4-4b8d-4373-8e59-38d65bcc1b9b"
        },
        {
            "id": "generic_handle",
            "instance": "89da2274-af86-4c06-a698-69832083165e"
        },
        {
            "id": "dynamic_line",
            "instance": "7be8e6c0-296c-4b98-90e5-fd331bcbca2f",
            "source": "990e180e-357f-4832-be38-61d7fe7340f6",
            "target": "1248114d-1f5f-45f3-a4ef-7b26eab11e1c",
            "handles": [
                "18b274d1-4592-45b5-b132-e0a5d8ee3693"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "990e180e-357f-4832-be38-61d7fe7340f6"
        },
        {
            "id": "generic_latch",
            "instance": "1248114d-1f5f-45f3-a4ef-7b26eab11e1c"
        },
        {
            "id": "generic_handle",
            "instance": "18b274d1-4592-45b5-b132-e0a5d8ee3693"
        },
        {
            "id": "dynamic_line",
            "instance": "8e0fb962-1ee7-4cdc-8103-3aaa11fbc087",
            "source": "4034a5fc-bacb-4728-8c9b-070cbc0a92b1",
            "target": "9ada2ad7-29b5-414d-a059-aaa85dfb2ee5",
            "handles": [
                "aa33016a-e985-412f-83fb-19f70f331c90"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4034a5fc-bacb-4728-8c9b-070cbc0a92b1"
        },
        {
            "id": "generic_latch",
            "instance": "9ada2ad7-29b5-414d-a059-aaa85dfb2ee5"
        },
        {
            "id": "generic_handle",
            "instance": "aa33016a-e985-412f-83fb-19f70f331c90"
        },
        {
            "id": "dynamic_line",
            "instance": "38fbe363-2654-43ed-a256-299a665d5cea",
            "source": "ad72f532-48ee-49b5-a780-865187ef92b5",
            "target": "d4cfab62-797a-4096-9821-7b8982892812",
            "handles": [
                "f897444c-cc61-4c3f-9721-237221e1ec3f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ad72f532-48ee-49b5-a780-865187ef92b5"
        },
        {
            "id": "generic_latch",
            "instance": "d4cfab62-797a-4096-9821-7b8982892812"
        },
        {
            "id": "generic_handle",
            "instance": "f897444c-cc61-4c3f-9721-237221e1ec3f"
        },
        {
            "id": "dynamic_line",
            "instance": "dbaf15d1-9048-4211-80fb-b3469bd69e32",
            "source": "42983167-999b-49aa-bfc5-2c562a568ac0",
            "target": "cb19d225-855d-4166-8021-00258cbac784",
            "handles": [
                "1cc9cdb2-cc6f-4dad-a5dc-1759de7b8c7f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "42983167-999b-49aa-bfc5-2c562a568ac0"
        },
        {
            "id": "generic_latch",
            "instance": "cb19d225-855d-4166-8021-00258cbac784"
        },
        {
            "id": "generic_handle",
            "instance": "1cc9cdb2-cc6f-4dad-a5dc-1759de7b8c7f"
        },
        {
            "id": "dynamic_line",
            "instance": "ca800eeb-c23d-4456-a6d4-731b48448084",
            "source": "216fb572-262b-4d0f-9e20-75484b92bace",
            "target": "2447ff5e-0fd5-4a61-b5e6-253d0934c1b8",
            "handles": [
                "92b590a7-3021-49db-b1f9-835a26d623f8"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "216fb572-262b-4d0f-9e20-75484b92bace"
        },
        {
            "id": "generic_latch",
            "instance": "2447ff5e-0fd5-4a61-b5e6-253d0934c1b8"
        },
        {
            "id": "generic_handle",
            "instance": "92b590a7-3021-49db-b1f9-835a26d623f8"
        },
        {
            "id": "dynamic_line",
            "instance": "e1c36bf9-9ac8-48b2-92ed-71599250b80f",
            "source": "b6fadedd-ad31-4939-9ff4-85cf26f2c1be",
            "target": "31a9fd22-96ad-4432-a27a-917b823b22c2",
            "handles": [
                "2a51ab73-c27f-4457-80e8-1ae5dbee45ba"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b6fadedd-ad31-4939-9ff4-85cf26f2c1be"
        },
        {
            "id": "generic_latch",
            "instance": "31a9fd22-96ad-4432-a27a-917b823b22c2"
        },
        {
            "id": "generic_handle",
            "instance": "2a51ab73-c27f-4457-80e8-1ae5dbee45ba"
        },
        {
            "id": "dynamic_line",
            "instance": "e2afd7a1-e442-4319-b964-089ff967ec4b",
            "source": "04512c24-e432-4ac8-895f-530f812b640f",
            "target": "96927131-72e6-4477-b290-281a02205040",
            "handles": [
                "711438be-9768-4303-be41-1656ae471b7b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "04512c24-e432-4ac8-895f-530f812b640f"
        },
        {
            "id": "generic_latch",
            "instance": "96927131-72e6-4477-b290-281a02205040"
        },
        {
            "id": "generic_handle",
            "instance": "711438be-9768-4303-be41-1656ae471b7b"
        },
        {
            "id": "dynamic_line",
            "instance": "1059a2b7-c397-409c-bae0-ceac3f2f15ff",
            "source": "dc583961-0c90-48b7-a371-e116a25adfb4",
            "target": "be0c7da3-fd39-487d-982e-1d38a1fdb87b",
            "handles": [
                "c6790973-3ff2-4831-9367-0f31f94bf593"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "dc583961-0c90-48b7-a371-e116a25adfb4"
        },
        {
            "id": "generic_latch",
            "instance": "be0c7da3-fd39-487d-982e-1d38a1fdb87b"
        },
        {
            "id": "generic_handle",
            "instance": "c6790973-3ff2-4831-9367-0f31f94bf593"
        },
        {
            "id": "dynamic_line",
            "instance": "b5538a6e-3390-4e34-b83e-81bfcbf4578c",
            "source": "3348b23f-789f-43d7-aac1-0e9644924d58",
            "target": "32014236-3c07-45a3-ac91-b40c9780add2",
            "handles": [
                "231070da-8fd2-4815-a359-4319c3071c66"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "3348b23f-789f-43d7-aac1-0e9644924d58"
        },
        {
            "id": "generic_latch",
            "instance": "32014236-3c07-45a3-ac91-b40c9780add2"
        },
        {
            "id": "generic_handle",
            "instance": "231070da-8fd2-4815-a359-4319c3071c66"
        },
        {
            "id": "dynamic_line",
            "instance": "9b34c004-b1b7-4fb4-8e55-45474c4c1667",
            "source": "bff8d8f2-4269-4d82-b920-8b557b87f44c",
            "target": "691f4d4f-5981-4212-8be3-122c732020e5",
            "handles": [
                "769062b1-39dc-4cbc-9edc-f05039ff4c5b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "bff8d8f2-4269-4d82-b920-8b557b87f44c"
        },
        {
            "id": "generic_latch",
            "instance": "691f4d4f-5981-4212-8be3-122c732020e5"
        },
        {
            "id": "generic_handle",
            "instance": "769062b1-39dc-4cbc-9edc-f05039ff4c5b"
        },
        {
            "id": "dynamic_line",
            "instance": "c128b9ff-ff6f-4694-91fc-85608d3c0156",
            "source": "037c2534-1390-42a5-a206-0c5ac081800d",
            "target": "83ce3447-33f5-49a5-8c06-6da3ff65d40c",
            "handles": [
                "71d22241-04de-455b-a4e0-7014df8ff2a7"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "037c2534-1390-42a5-a206-0c5ac081800d"
        },
        {
            "id": "generic_latch",
            "instance": "83ce3447-33f5-49a5-8c06-6da3ff65d40c"
        },
        {
            "id": "generic_handle",
            "instance": "71d22241-04de-455b-a4e0-7014df8ff2a7"
        },
        {
            "id": "dynamic_line",
            "instance": "85001359-1af8-44fc-bbf5-d94c13a10c76",
            "source": "1b79acf9-7d17-46cc-ae63-ba16ae6447aa",
            "target": "61105b26-6b08-4194-bf04-3cb7a226df88",
            "handles": [
                "e126fa8a-ade2-4746-8648-a0f2e81c5e75"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1b79acf9-7d17-46cc-ae63-ba16ae6447aa"
        },
        {
            "id": "generic_latch",
            "instance": "61105b26-6b08-4194-bf04-3cb7a226df88"
        },
        {
            "id": "generic_handle",
            "instance": "e126fa8a-ade2-4746-8648-a0f2e81c5e75"
        },
        {
            "id": "dynamic_line",
            "instance": "a2e72f01-1d8a-4fb4-80bd-966b040c684d",
            "source": "1cedda8e-be23-4a97-bde4-adf477778b43",
            "target": "7d09f54d-9cce-4e0c-ab89-c6199d8a4466",
            "handles": [
                "71af88a1-9866-4bf0-9978-129bbaa2b5fb"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1cedda8e-be23-4a97-bde4-adf477778b43"
        },
        {
            "id": "generic_latch",
            "instance": "7d09f54d-9cce-4e0c-ab89-c6199d8a4466"
        },
        {
            "id": "generic_handle",
            "instance": "71af88a1-9866-4bf0-9978-129bbaa2b5fb"
        },
        {
            "id": "dynamic_line",
            "instance": "ff9df42a-98ce-416e-b026-d64d9babc03f",
            "source": "7a6679c4-d291-4c9f-b239-ef8436b6334c",
            "target": "5996d513-8418-4a17-88fd-03a50f357451",
            "handles": [
                "ad00d672-025d-4f00-ab95-91cb6f951326"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "7a6679c4-d291-4c9f-b239-ef8436b6334c"
        },
        {
            "id": "generic_latch",
            "instance": "5996d513-8418-4a17-88fd-03a50f357451"
        },
        {
            "id": "generic_handle",
            "instance": "ad00d672-025d-4f00-ab95-91cb6f951326"
        },
        {
            "id": "dynamic_line",
            "instance": "5ba16c5c-1110-4aa6-9aff-6a196b1b3108",
            "source": "0ce6363e-6c5b-4c17-8f76-27e77caebf13",
            "target": "8c388a35-af86-4928-b91d-c022906eda64",
            "handles": [
                "27ecbf55-c809-42a2-a6c6-77def706df54"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0ce6363e-6c5b-4c17-8f76-27e77caebf13"
        },
        {
            "id": "generic_latch",
            "instance": "8c388a35-af86-4928-b91d-c022906eda64"
        },
        {
            "id": "generic_handle",
            "instance": "27ecbf55-c809-42a2-a6c6-77def706df54"
        },
        {
            "id": "dynamic_line",
            "instance": "17ff54db-19c8-43a1-986d-34d9127f3111",
            "source": "a85868a4-8ce0-4f5b-acf5-eefdf0483a6f",
            "target": "722933dc-feb9-4e0a-a0c5-26fea673343f",
            "handles": [
                "25438d91-6306-48a8-9b06-3a4062044cef"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a85868a4-8ce0-4f5b-acf5-eefdf0483a6f"
        },
        {
            "id": "generic_latch",
            "instance": "722933dc-feb9-4e0a-a0c5-26fea673343f"
        },
        {
            "id": "generic_handle",
            "instance": "25438d91-6306-48a8-9b06-3a4062044cef"
        },
        {
            "id": "dynamic_line",
            "instance": "b0f2ad8b-0055-4b4d-adef-af0f630b8ed0",
            "source": "b2cc26b5-e501-4ad5-a769-9c6ee005426e",
            "target": "3aa0a569-9c64-4abe-9cf1-7299b3e48d4d",
            "handles": [
                "b18cf9f5-01a6-4bff-85de-fc739c0ca1d5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b2cc26b5-e501-4ad5-a769-9c6ee005426e"
        },
        {
            "id": "generic_latch",
            "instance": "3aa0a569-9c64-4abe-9cf1-7299b3e48d4d"
        },
        {
            "id": "generic_handle",
            "instance": "b18cf9f5-01a6-4bff-85de-fc739c0ca1d5"
        },
        {
            "id": "dynamic_line",
            "instance": "7f33f316-b7f7-4897-9976-cdc1946fe51e",
            "source": "86706050-b892-4804-84c4-74ae5fa478c2",
            "target": "3cc153c6-ad5b-4838-bf09-ffbd3ebcb776",
            "handles": [
                "0b5da409-0424-4707-87cd-d70feeacbdae"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "86706050-b892-4804-84c4-74ae5fa478c2"
        },
        {
            "id": "generic_latch",
            "instance": "3cc153c6-ad5b-4838-bf09-ffbd3ebcb776"
        },
        {
            "id": "generic_handle",
            "instance": "0b5da409-0424-4707-87cd-d70feeacbdae"
        },
        {
            "id": "dynamic_line",
            "instance": "60637009-a067-43a5-a99d-2943e57eb94d",
            "source": "0ba54f16-f1dd-40ac-bb32-581fdf95fcca",
            "target": "8311a57d-0270-4a91-906a-c70717e1ff99",
            "handles": [
                "a05d6aac-03f6-4d00-8815-e76379fe2145"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0ba54f16-f1dd-40ac-bb32-581fdf95fcca"
        },
        {
            "id": "generic_latch",
            "instance": "8311a57d-0270-4a91-906a-c70717e1ff99"
        },
        {
            "id": "generic_handle",
            "instance": "a05d6aac-03f6-4d00-8815-e76379fe2145"
        },
        {
            "id": "dynamic_line",
            "instance": "ed466bf8-02fb-446b-a025-4426ca5bf42d",
            "source": "0f267966-d18f-4410-ac0e-eb75e36e4ed4",
            "target": "11ae5ac6-7521-43f6-bb23-5cda4b865d83",
            "handles": [
                "28d1934c-a291-4513-8718-b92d880879a5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0f267966-d18f-4410-ac0e-eb75e36e4ed4"
        },
        {
            "id": "generic_latch",
            "instance": "11ae5ac6-7521-43f6-bb23-5cda4b865d83"
        },
        {
            "id": "generic_handle",
            "instance": "28d1934c-a291-4513-8718-b92d880879a5"
        },
        {
            "id": "dynamic_line",
            "instance": "87a04b97-e6d6-4fc2-88c1-22c8042302a7",
            "source": "b01d1a86-ef9a-4cf5-ad7a-823f4674578a",
            "target": "357f695d-455d-4e53-9815-880613075425",
            "handles": [
                "50634c82-d534-4aad-b05a-4b43ca5ceb06"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b01d1a86-ef9a-4cf5-ad7a-823f4674578a"
        },
        {
            "id": "generic_latch",
            "instance": "357f695d-455d-4e53-9815-880613075425"
        },
        {
            "id": "generic_handle",
            "instance": "50634c82-d534-4aad-b05a-4b43ca5ceb06"
        },
        {
            "id": "dynamic_line",
            "instance": "640ef9d0-f753-419e-9f7e-aaa55a4b8c93",
            "source": "e2675060-7254-4372-b961-71973d87a1c0",
            "target": "3161884b-1310-4f37-8272-72ca7321d778",
            "handles": [
                "9011ba02-9b69-45f0-b426-7cea2dfd244f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e2675060-7254-4372-b961-71973d87a1c0"
        },
        {
            "id": "generic_latch",
            "instance": "3161884b-1310-4f37-8272-72ca7321d778"
        },
        {
            "id": "generic_handle",
            "instance": "9011ba02-9b69-45f0-b426-7cea2dfd244f"
        },
        {
            "id": "dynamic_line",
            "instance": "58a3dd6f-0a46-41a6-b5c1-b8664c45fba5",
            "source": "19661bb7-f8e7-4505-bfd3-c05bdf57c277",
            "target": "dc5c01db-c9c7-4800-8509-657a293a0faf",
            "handles": [
                "e1cd30db-87bb-4798-af04-6d4401244522"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "19661bb7-f8e7-4505-bfd3-c05bdf57c277"
        },
        {
            "id": "generic_latch",
            "instance": "dc5c01db-c9c7-4800-8509-657a293a0faf"
        },
        {
            "id": "generic_handle",
            "instance": "e1cd30db-87bb-4798-af04-6d4401244522"
        },
        {
            "id": "dynamic_line",
            "instance": "9b423938-8a03-4bce-81d3-fc8a13cee73e",
            "source": "8ec770e1-6d64-423a-8d31-5970abd081b3",
            "target": "263b70f6-6d99-4efb-ba2d-4a62d15599bc",
            "handles": [
                "6af29953-4243-4e45-8f73-4c01967f9dc2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8ec770e1-6d64-423a-8d31-5970abd081b3"
        },
        {
            "id": "generic_latch",
            "instance": "263b70f6-6d99-4efb-ba2d-4a62d15599bc"
        },
        {
            "id": "generic_handle",
            "instance": "6af29953-4243-4e45-8f73-4c01967f9dc2"
        },
        {
            "id": "dynamic_line",
            "instance": "15379da5-b13e-4bbc-88df-f3f0111860ed",
            "source": "e220ba73-afa6-46e6-8277-ac5ab99b717d",
            "target": "aa7f6c0c-4628-4c62-b68f-44206b6535b0",
            "handles": [
                "08de10bd-3cb2-4548-b157-89d87632e05b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e220ba73-afa6-46e6-8277-ac5ab99b717d"
        },
        {
            "id": "generic_latch",
            "instance": "aa7f6c0c-4628-4c62-b68f-44206b6535b0"
        },
        {
            "id": "generic_handle",
            "instance": "08de10bd-3cb2-4548-b157-89d87632e05b"
        },
        {
            "id": "dynamic_line",
            "instance": "2d81bcff-0658-416c-a69a-9593608f35bb",
            "source": "519f9081-c7bc-44ae-a13e-f5f6b8308d07",
            "target": "798d85cc-74c5-42fd-812c-c76b318ffb98",
            "handles": [
                "c1d76eb5-403e-4095-8136-fcc086e4b9a3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "519f9081-c7bc-44ae-a13e-f5f6b8308d07"
        },
        {
            "id": "generic_latch",
            "instance": "798d85cc-74c5-42fd-812c-c76b318ffb98"
        },
        {
            "id": "generic_handle",
            "instance": "c1d76eb5-403e-4095-8136-fcc086e4b9a3"
        },
        {
            "id": "dynamic_line",
            "instance": "292f1605-5328-4a09-a1b2-a5e6ef7cc2f6",
            "source": "aebd99ac-d839-4fb4-9a63-4bd8475aa455",
            "target": "b405eaa2-9c90-41ab-8b14-1bd7496c5f6e",
            "handles": [
                "99d0d89e-60e4-453f-9a05-fe3b973ec367"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "aebd99ac-d839-4fb4-9a63-4bd8475aa455"
        },
        {
            "id": "generic_latch",
            "instance": "b405eaa2-9c90-41ab-8b14-1bd7496c5f6e"
        },
        {
            "id": "generic_handle",
            "instance": "99d0d89e-60e4-453f-9a05-fe3b973ec367"
        },
        {
            "id": "dynamic_line",
            "instance": "3bae9a99-3953-4314-a780-256b9bbf4b41",
            "source": "7970e842-543b-47f5-b0d7-436d80729587",
            "target": "3d262585-8c09-45d6-b09f-22de4fab9ea6",
            "handles": [
                "9be6a3db-dc19-42f6-8477-28e6e7440539"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "7970e842-543b-47f5-b0d7-436d80729587"
        },
        {
            "id": "generic_latch",
            "instance": "3d262585-8c09-45d6-b09f-22de4fab9ea6"
        },
        {
            "id": "generic_handle",
            "instance": "9be6a3db-dc19-42f6-8477-28e6e7440539"
        },
        {
            "id": "dynamic_line",
            "instance": "c5cf30b1-9f0f-4d35-8f78-eacb1e57d4d3",
            "source": "9cf87461-cccc-4b1d-85d9-9c49f5eb4265",
            "target": "3af6c4f2-862d-490d-9e6c-e1d6d3285dd5",
            "handles": [
                "2cf69e70-f8f9-4387-a489-e95440b5c24d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "9cf87461-cccc-4b1d-85d9-9c49f5eb4265"
        },
        {
            "id": "generic_latch",
            "instance": "3af6c4f2-862d-490d-9e6c-e1d6d3285dd5"
        },
        {
            "id": "generic_handle",
            "instance": "2cf69e70-f8f9-4387-a489-e95440b5c24d"
        },
        {
            "id": "dynamic_line",
            "instance": "f9ac23e2-21d7-4d08-8597-ac92543b956a",
            "source": "aa7fdb70-aa99-4ac6-8cd0-00b8d39fc229",
            "target": "c2a72fe4-527b-4fae-a1a6-38e20855d2d4",
            "handles": [
                "5f3cbf2a-5459-406a-b6f1-72836170356e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "aa7fdb70-aa99-4ac6-8cd0-00b8d39fc229"
        },
        {
            "id": "generic_latch",
            "instance": "c2a72fe4-527b-4fae-a1a6-38e20855d2d4"
        },
        {
            "id": "generic_handle",
            "instance": "5f3cbf2a-5459-406a-b6f1-72836170356e"
        },
        {
            "id": "dynamic_line",
            "instance": "be80dca1-f4ac-4789-9ca9-4f732698fb01",
            "source": "71561a58-b62c-444a-ba82-894a0b6ff11f",
            "target": "a40dbf9b-2934-484c-aa2a-3431e90e7ff9",
            "handles": [
                "5fdc0594-6fde-44c0-b45d-08d39807431f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "71561a58-b62c-444a-ba82-894a0b6ff11f"
        },
        {
            "id": "generic_latch",
            "instance": "a40dbf9b-2934-484c-aa2a-3431e90e7ff9"
        },
        {
            "id": "generic_handle",
            "instance": "5fdc0594-6fde-44c0-b45d-08d39807431f"
        },
        {
            "id": "dynamic_line",
            "instance": "51d7eecc-c49f-4c11-8435-5223333177ed",
            "source": "ce550f63-40a4-44c0-a949-2141a011aad9",
            "target": "e64b7f4d-0ae8-4a69-b802-3f98c7ee1ecc",
            "handles": [
                "b5b80902-9a93-4aa5-bd57-a6947461d439"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ce550f63-40a4-44c0-a949-2141a011aad9"
        },
        {
            "id": "generic_latch",
            "instance": "e64b7f4d-0ae8-4a69-b802-3f98c7ee1ecc"
        },
        {
            "id": "generic_handle",
            "instance": "b5b80902-9a93-4aa5-bd57-a6947461d439"
        },
        {
            "id": "dynamic_line",
            "instance": "3421620d-1bfe-4f15-8540-908c0c746b35",
            "source": "6beccf68-6e56-45c6-97dc-347b937003e1",
            "target": "dfe68874-3f62-4571-9647-912b2567dc65",
            "handles": [
                "e75ee20f-fb78-4608-8041-ee0bab9ede69"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6beccf68-6e56-45c6-97dc-347b937003e1"
        },
        {
            "id": "generic_latch",
            "instance": "dfe68874-3f62-4571-9647-912b2567dc65"
        },
        {
            "id": "generic_handle",
            "instance": "e75ee20f-fb78-4608-8041-ee0bab9ede69"
        },
        {
            "id": "dynamic_line",
            "instance": "646198fc-a266-4162-a9d7-411ebc6a5b8d",
            "source": "056aa581-f46f-463a-a2e2-ce8305f218ca",
            "target": "c79d9e3a-2984-437c-bf71-37ddacd8026e",
            "handles": [
                "7e61a144-a421-4332-902b-af9ca49cdfc5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "056aa581-f46f-463a-a2e2-ce8305f218ca"
        },
        {
            "id": "generic_latch",
            "instance": "c79d9e3a-2984-437c-bf71-37ddacd8026e"
        },
        {
            "id": "generic_handle",
            "instance": "7e61a144-a421-4332-902b-af9ca49cdfc5"
        },
        {
            "id": "dynamic_line",
            "instance": "81242f31-47bf-4365-9562-efc254a012ae",
            "source": "f7005300-8aa8-491b-b4b6-0d3dc8618d53",
            "target": "f8af5778-36e2-4bab-bfa9-93963d9e68d4",
            "handles": [
                "30a8ce9d-894c-48aa-8e10-9acb2e2982c6"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "f7005300-8aa8-491b-b4b6-0d3dc8618d53"
        },
        {
            "id": "generic_latch",
            "instance": "f8af5778-36e2-4bab-bfa9-93963d9e68d4"
        },
        {
            "id": "generic_handle",
            "instance": "30a8ce9d-894c-48aa-8e10-9acb2e2982c6"
        },
        {
            "id": "dynamic_line",
            "instance": "abe37913-3154-4b42-b003-a942daa49539",
            "source": "a14a0d0c-9901-41d0-8b9e-4c12b2d1a09b",
            "target": "7818fc9d-1913-4d2b-addd-bcb0500b94c5",
            "handles": [
                "fb39bc92-9626-4912-a2a9-827c29d4836d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a14a0d0c-9901-41d0-8b9e-4c12b2d1a09b"
        },
        {
            "id": "generic_latch",
            "instance": "7818fc9d-1913-4d2b-addd-bcb0500b94c5"
        },
        {
            "id": "generic_handle",
            "instance": "fb39bc92-9626-4912-a2a9-827c29d4836d"
        },
        {
            "id": "dynamic_line",
            "instance": "fac4c2d0-5e50-42ce-b469-ab2229654a2b",
            "source": "23a8996a-fe86-4764-b580-02153b9e6265",
            "target": "4bca8695-70f7-4f14-b69a-253cfcac0c01",
            "handles": [
                "de64d4e7-c8c7-42c9-bfc9-7f9478fc736d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "23a8996a-fe86-4764-b580-02153b9e6265"
        },
        {
            "id": "generic_latch",
            "instance": "4bca8695-70f7-4f14-b69a-253cfcac0c01"
        },
        {
            "id": "generic_handle",
            "instance": "de64d4e7-c8c7-42c9-bfc9-7f9478fc736d"
        },
        {
            "id": "dynamic_line",
            "instance": "c27a03f2-446e-4c7b-8c09-be6ccb56057f",
            "source": "7eecd9ad-17bb-44b8-861f-3768458df4c7",
            "target": "b64f9d96-4d28-4d34-a399-1a23bb877160",
            "handles": [
                "57e61ef0-0a5d-4488-8b07-1129b4ad5a98"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "7eecd9ad-17bb-44b8-861f-3768458df4c7"
        },
        {
            "id": "generic_latch",
            "instance": "b64f9d96-4d28-4d34-a399-1a23bb877160"
        },
        {
            "id": "generic_handle",
            "instance": "57e61ef0-0a5d-4488-8b07-1129b4ad5a98"
        },
        {
            "id": "dynamic_line",
            "instance": "e0fd0a55-fada-4f3f-bae4-71f7a831caa2",
            "source": "bfd5e55e-54ee-46bf-9ba6-a751b3685488",
            "target": "aa758216-9884-46bb-a17a-cfe2bf7076ed",
            "handles": [
                "586c85ed-b5b0-42fe-9606-8be0298651b0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "bfd5e55e-54ee-46bf-9ba6-a751b3685488"
        },
        {
            "id": "generic_latch",
            "instance": "aa758216-9884-46bb-a17a-cfe2bf7076ed"
        },
        {
            "id": "generic_handle",
            "instance": "586c85ed-b5b0-42fe-9606-8be0298651b0"
        },
        {
            "id": "dynamic_line",
            "instance": "5d100051-face-4840-a62a-d20d2461b76e",
            "source": "8b0fc84d-5c88-4bb9-a62a-e5e4997a9def",
            "target": "e8378b21-b44e-477e-939f-9c7d0812b02c",
            "handles": [
                "c3dce40a-82dc-40a8-84f6-747e49e8ee73"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8b0fc84d-5c88-4bb9-a62a-e5e4997a9def"
        },
        {
            "id": "generic_latch",
            "instance": "e8378b21-b44e-477e-939f-9c7d0812b02c"
        },
        {
            "id": "generic_handle",
            "instance": "c3dce40a-82dc-40a8-84f6-747e49e8ee73"
        },
        {
            "id": "dynamic_line",
            "instance": "cdcb494f-573c-4169-ab15-a883c329a472",
            "source": "9866ad5c-59e1-4749-ad53-0114ad1d7c0f",
            "target": "048dc396-e564-4e09-9d7a-f74a01f7e996",
            "handles": [
                "129eb047-46db-482d-b81f-83c601a029f7"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "9866ad5c-59e1-4749-ad53-0114ad1d7c0f"
        },
        {
            "id": "generic_latch",
            "instance": "048dc396-e564-4e09-9d7a-f74a01f7e996"
        },
        {
            "id": "generic_handle",
            "instance": "129eb047-46db-482d-b81f-83c601a029f7"
        },
        {
            "id": "dynamic_line",
            "instance": "d4bb90d8-c094-4436-94b9-78a51b9c389c",
            "source": "57b3e286-fbfa-4826-9bd2-84bbbd5c47f9",
            "target": "5e4439de-b066-43ac-b151-e80760297476",
            "handles": [
                "254f9912-1ddc-468f-97bc-65d972a33618"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "57b3e286-fbfa-4826-9bd2-84bbbd5c47f9"
        },
        {
            "id": "generic_latch",
            "instance": "5e4439de-b066-43ac-b151-e80760297476"
        },
        {
            "id": "generic_handle",
            "instance": "254f9912-1ddc-468f-97bc-65d972a33618"
        },
        {
            "id": "dynamic_line",
            "instance": "2f849122-a91a-40f1-abcf-76fda69c6112",
            "source": "af01dbc1-2bfe-4309-bc23-118d22edbe24",
            "target": "28427d2e-83b6-4d86-8224-022cfd08050d",
            "handles": [
                "7417c80d-e9a4-4b26-92e1-c931cd681a12"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "af01dbc1-2bfe-4309-bc23-118d22edbe24"
        },
        {
            "id": "generic_latch",
            "instance": "28427d2e-83b6-4d86-8224-022cfd08050d"
        },
        {
            "id": "generic_handle",
            "instance": "7417c80d-e9a4-4b26-92e1-c931cd681a12"
        },
        {
            "id": "dynamic_line",
            "instance": "268e07bf-12b0-4fd0-8821-d9945ebcefdf",
            "source": "741c7d7a-a14f-44d8-a3b4-ddc7ec7721df",
            "target": "f0c0b994-9c6c-4655-817e-7eda330893e0",
            "handles": [
                "82a86ac2-2cca-477b-bdfb-78e77080d3c3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "741c7d7a-a14f-44d8-a3b4-ddc7ec7721df"
        },
        {
            "id": "generic_latch",
            "instance": "f0c0b994-9c6c-4655-817e-7eda330893e0"
        },
        {
            "id": "generic_handle",
            "instance": "82a86ac2-2cca-477b-bdfb-78e77080d3c3"
        },
        {
            "id": "dynamic_line",
            "instance": "72849d6f-4b58-48da-b2c8-aefa44687ecd",
            "source": "1f31d67b-56cb-4d15-9633-ddc62ff66e42",
            "target": "34ca885b-13ac-4223-9831-0c8cbca3b391",
            "handles": [
                "5552e739-b64f-4004-9c4e-128b9ea8de7c"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1f31d67b-56cb-4d15-9633-ddc62ff66e42"
        },
        {
            "id": "generic_latch",
            "instance": "34ca885b-13ac-4223-9831-0c8cbca3b391"
        },
        {
            "id": "generic_handle",
            "instance": "5552e739-b64f-4004-9c4e-128b9ea8de7c"
        },
        {
            "id": "dynamic_line",
            "instance": "409fad56-f3e0-41b2-a8e8-0c666b664d46",
            "source": "cfc6fd21-cccb-49af-9b33-d0051689d318",
            "target": "9c1da37c-7e06-42b4-9595-11b193c51752",
            "handles": [
                "a631b7bd-fbfb-43c4-8ca8-7790a8f47e1c"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "cfc6fd21-cccb-49af-9b33-d0051689d318"
        },
        {
            "id": "generic_latch",
            "instance": "9c1da37c-7e06-42b4-9595-11b193c51752"
        },
        {
            "id": "generic_handle",
            "instance": "a631b7bd-fbfb-43c4-8ca8-7790a8f47e1c"
        },
        {
            "id": "dynamic_line",
            "instance": "62f31eff-a7b0-435f-847b-b3c77ba795dd",
            "source": "1d1e494f-6cb8-448b-a68b-b89e7585c281",
            "target": "412ce29b-a6e4-46ea-80b7-c88a2ed1f184",
            "handles": [
                "98d00084-0795-4569-9543-599058401dc0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1d1e494f-6cb8-448b-a68b-b89e7585c281"
        },
        {
            "id": "generic_latch",
            "instance": "412ce29b-a6e4-46ea-80b7-c88a2ed1f184"
        },
        {
            "id": "generic_handle",
            "instance": "98d00084-0795-4569-9543-599058401dc0"
        },
        {
            "id": "dynamic_line",
            "instance": "ea2a426e-6942-4271-a1a0-970c650d2dff",
            "source": "52e87d32-b1b4-4baa-aff4-5c2dbc214c2d",
            "target": "a7143654-e8ac-4946-8688-ea590499bac1",
            "handles": [
                "4850e83d-f264-474b-ba86-32ed94a5d022"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "52e87d32-b1b4-4baa-aff4-5c2dbc214c2d"
        },
        {
            "id": "generic_latch",
            "instance": "a7143654-e8ac-4946-8688-ea590499bac1"
        },
        {
            "id": "generic_handle",
            "instance": "4850e83d-f264-474b-ba86-32ed94a5d022"
        },
        {
            "id": "dynamic_line",
            "instance": "574dde15-0c26-4422-8aa5-58acb371acfd",
            "source": "82449e8e-0e79-496e-ae50-657aad374715",
            "target": "9ddc8960-1d33-4cc0-ad1a-6fb45bbde650",
            "handles": [
                "b6a12a07-7c0a-4e3b-b650-20541adf3dec"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "82449e8e-0e79-496e-ae50-657aad374715"
        },
        {
            "id": "generic_latch",
            "instance": "9ddc8960-1d33-4cc0-ad1a-6fb45bbde650"
        },
        {
            "id": "generic_handle",
            "instance": "b6a12a07-7c0a-4e3b-b650-20541adf3dec"
        },
        {
            "id": "dynamic_line",
            "instance": "88d7a441-e901-458d-b342-659e45179801",
            "source": "0646b1ec-ec87-434e-b6be-403345029dc6",
            "target": "90f627c6-57b2-409c-975f-806f815d1daa",
            "handles": [
                "2b39f8c6-b10e-4271-b781-ceef1d901051"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0646b1ec-ec87-434e-b6be-403345029dc6"
        },
        {
            "id": "generic_latch",
            "instance": "90f627c6-57b2-409c-975f-806f815d1daa"
        },
        {
            "id": "generic_handle",
            "instance": "2b39f8c6-b10e-4271-b781-ceef1d901051"
        },
        {
            "id": "dynamic_line",
            "instance": "bafcbabf-e3ea-4f37-97ea-1ac7dc03cdfb",
            "source": "4d0eb043-4d35-4d64-870f-9c6a90272d1f",
            "target": "a2b94a7e-3709-4415-8536-a38a0df48c00",
            "handles": [
                "c7df1ca6-a1fa-49b2-a673-a448b93d9667"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4d0eb043-4d35-4d64-870f-9c6a90272d1f"
        },
        {
            "id": "generic_latch",
            "instance": "a2b94a7e-3709-4415-8536-a38a0df48c00"
        },
        {
            "id": "generic_handle",
            "instance": "c7df1ca6-a1fa-49b2-a673-a448b93d9667"
        },
        {
            "id": "dynamic_line",
            "instance": "042497cb-081d-4435-aef4-447c50035fe3",
            "source": "d6aa5093-4253-41b5-bb89-1de41f033072",
            "target": "eaa8d91c-4d52-4a27-9e89-4e696829a38a",
            "handles": [
                "5ac53bf9-3284-4fa4-acf9-3b37c706cc60"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "d6aa5093-4253-41b5-bb89-1de41f033072"
        },
        {
            "id": "generic_latch",
            "instance": "eaa8d91c-4d52-4a27-9e89-4e696829a38a"
        },
        {
            "id": "generic_handle",
            "instance": "5ac53bf9-3284-4fa4-acf9-3b37c706cc60"
        },
        {
            "id": "dynamic_line",
            "instance": "05407eed-39a7-4b54-be86-50988d34ae62",
            "source": "d8dc27a5-14fe-4eab-bb06-4165fa0a8e9d",
            "target": "f7973f12-36cb-47f3-b345-bb6e5e7b3076",
            "handles": [
                "d41a1a3e-950f-47fb-b279-b0d5bbc6554c"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "d8dc27a5-14fe-4eab-bb06-4165fa0a8e9d"
        },
        {
            "id": "generic_latch",
            "instance": "f7973f12-36cb-47f3-b345-bb6e5e7b3076"
        },
        {
            "id": "generic_handle",
            "instance": "d41a1a3e-950f-47fb-b279-b0d5bbc6554c"
        },
        {
            "id": "dynamic_line",
            "instance": "3df76537-e1b0-48f3-b9df-7fc2b1c245df",
            "source": "9d5b3f8e-0830-462b-be14-3625d3d5bcb3",
            "target": "d0743f57-4fb3-40bc-8d56-d38480350ca1",
            "handles": [
                "14eb44bb-f98c-494a-b595-f389326e7748"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "9d5b3f8e-0830-462b-be14-3625d3d5bcb3"
        },
        {
            "id": "generic_latch",
            "instance": "d0743f57-4fb3-40bc-8d56-d38480350ca1"
        },
        {
            "id": "generic_handle",
            "instance": "14eb44bb-f98c-494a-b595-f389326e7748"
        },
        {
            "id": "dynamic_line",
            "instance": "e16fc8b1-a542-474c-a533-ea04a8bb5745",
            "source": "6cea0f97-68a0-49ac-bd48-6acefe96a761",
            "target": "01922a83-3e95-49d4-bcc3-b2b59fe66205",
            "handles": [
                "f7a35bf9-c9ba-4081-af27-1d0c90761df9"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6cea0f97-68a0-49ac-bd48-6acefe96a761"
        },
        {
            "id": "generic_latch",
            "instance": "01922a83-3e95-49d4-bcc3-b2b59fe66205"
        },
        {
            "id": "generic_handle",
            "instance": "f7a35bf9-c9ba-4081-af27-1d0c90761df9"
        },
        {
            "id": "dynamic_line",
            "instance": "be27dd06-3241-44a9-be22-ad70bbb6cc40",
            "source": "4e1a7c60-8adc-4e87-9b7a-3067a16085dc",
            "target": "1aeeacc5-648e-4393-b42e-0f828a093a54",
            "handles": [
                "6bb70bf2-e643-48b0-b282-19518406322d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4e1a7c60-8adc-4e87-9b7a-3067a16085dc"
        },
        {
            "id": "generic_latch",
            "instance": "1aeeacc5-648e-4393-b42e-0f828a093a54"
        },
        {
            "id": "generic_handle",
            "instance": "6bb70bf2-e643-48b0-b282-19518406322d"
        },
        {
            "id": "dynamic_line",
            "instance": "7723a87e-8ab1-46c0-bae0-a98e3ce7beeb",
            "source": "48214284-5c23-41d5-b9b2-3cb1b238abe3",
            "target": "e69ea71c-db05-4ff6-bac4-f91c9dcd9a18",
            "handles": [
                "8db37b69-8b1f-47b0-8e1c-6addcf10f64d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "48214284-5c23-41d5-b9b2-3cb1b238abe3"
        },
        {
            "id": "generic_latch",
            "instance": "e69ea71c-db05-4ff6-bac4-f91c9dcd9a18"
        },
        {
            "id": "generic_handle",
            "instance": "8db37b69-8b1f-47b0-8e1c-6addcf10f64d"
        },
        {
            "id": "dynamic_line",
            "instance": "0d3729d7-966b-49a4-8313-b86123ca8c1d",
            "source": "e68041c4-9b15-45df-ae6b-18a89611cacb",
            "target": "e759fd35-248b-4f20-ae92-48a933524c54",
            "handles": [
                "e421e348-ae3c-4d32-8896-0df3bed462ce"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e68041c4-9b15-45df-ae6b-18a89611cacb"
        },
        {
            "id": "generic_latch",
            "instance": "e759fd35-248b-4f20-ae92-48a933524c54"
        },
        {
            "id": "generic_handle",
            "instance": "e421e348-ae3c-4d32-8896-0df3bed462ce"
        },
        {
            "id": "dynamic_line",
            "instance": "81fca328-26f8-45a1-acd9-5789317ad8bc",
            "source": "05eb45d1-68ee-4631-9236-f8279d8ff78a",
            "target": "39ef87d4-a7f6-4b66-8030-0f22486c1bfc",
            "handles": [
                "bf68db11-5bf5-4b85-93b6-2cac16f74216"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "05eb45d1-68ee-4631-9236-f8279d8ff78a"
        },
        {
            "id": "generic_latch",
            "instance": "39ef87d4-a7f6-4b66-8030-0f22486c1bfc"
        },
        {
            "id": "generic_handle",
            "instance": "bf68db11-5bf5-4b85-93b6-2cac16f74216"
        },
        {
            "id": "dynamic_line",
            "instance": "21f52ceb-b046-466b-8278-47f4d76a67f7",
            "source": "ac2dad04-87e4-44bb-bb98-b30030daa547",
            "target": "a56f351e-4d1d-433b-9d04-f88d2a9015c3",
            "handles": [
                "cb72902d-4c06-485b-81d9-d528a872e735"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ac2dad04-87e4-44bb-bb98-b30030daa547"
        },
        {
            "id": "generic_latch",
            "instance": "a56f351e-4d1d-433b-9d04-f88d2a9015c3"
        },
        {
            "id": "generic_handle",
            "instance": "cb72902d-4c06-485b-81d9-d528a872e735"
        },
        {
            "id": "dynamic_line",
            "instance": "3e35aa75-ada7-4a88-895e-e714273bdb1d",
            "source": "e716cdb6-ffc6-4467-83bb-a9e84cd3f692",
            "target": "c4e8e26c-4f0f-46cb-a85b-8b01318ffbac",
            "handles": [
                "ccc82569-a27f-4135-b607-84e5996d945a"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e716cdb6-ffc6-4467-83bb-a9e84cd3f692"
        },
        {
            "id": "generic_latch",
            "instance": "c4e8e26c-4f0f-46cb-a85b-8b01318ffbac"
        },
        {
            "id": "generic_handle",
            "instance": "ccc82569-a27f-4135-b607-84e5996d945a"
        },
        {
            "id": "dynamic_line",
            "instance": "7f188d68-1fc8-4697-9eb1-6343c9191a8e",
            "source": "e0c494ec-e748-40f6-9779-434c58014f08",
            "target": "f87ca05c-9d98-4990-bee1-81431545b494",
            "handles": [
                "22b5995b-eff6-4b6f-81c8-c8678a5b0af2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e0c494ec-e748-40f6-9779-434c58014f08"
        },
        {
            "id": "generic_latch",
            "instance": "f87ca05c-9d98-4990-bee1-81431545b494"
        },
        {
            "id": "generic_handle",
            "instance": "22b5995b-eff6-4b6f-81c8-c8678a5b0af2"
        },
        {
            "id": "dynamic_line",
            "instance": "60e8cf86-c5f9-433f-bac7-727aa9708e85",
            "source": "c97de860-7247-441e-81b3-15d0cff7cce6",
            "target": "40681add-6a01-47d4-99f8-3655d9a99dca",
            "handles": [
                "c2c676be-5069-4360-83f9-571504604e12"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "c97de860-7247-441e-81b3-15d0cff7cce6"
        },
        {
            "id": "generic_latch",
            "instance": "40681add-6a01-47d4-99f8-3655d9a99dca"
        },
        {
            "id": "generic_handle",
            "instance": "c2c676be-5069-4360-83f9-571504604e12"
        },
        {
            "id": "dynamic_line",
            "instance": "da52712e-9768-4972-bf29-fb1883ab7c65",
            "source": "aec16ba2-68e9-4668-98c2-f0b4da58026d",
            "target": "e5ed4ce7-c97d-4145-9af5-13591dc90028",
            "handles": [
                "04b56f31-7c13-4d99-a745-a80e915ad690"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "aec16ba2-68e9-4668-98c2-f0b4da58026d"
        },
        {
            "id": "generic_latch",
            "instance": "e5ed4ce7-c97d-4145-9af5-13591dc90028"
        },
        {
            "id": "generic_handle",
            "instance": "04b56f31-7c13-4d99-a745-a80e915ad690"
        },
        {
            "id": "dynamic_line",
            "instance": "42805bce-4477-40f0-ad1a-c59e9a0a5951",
            "source": "85fe602b-ced3-443f-905e-a408feb6a17a",
            "target": "49c352db-7c8a-45e1-8767-9521dbfe2eba",
            "handles": [
                "4ed0c32d-a26f-4b54-9260-3f923320fd6b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "85fe602b-ced3-443f-905e-a408feb6a17a"
        },
        {
            "id": "generic_latch",
            "instance": "49c352db-7c8a-45e1-8767-9521dbfe2eba"
        },
        {
            "id": "generic_handle",
            "instance": "4ed0c32d-a26f-4b54-9260-3f923320fd6b"
        },
        {
            "id": "dynamic_line",
            "instance": "e9a0ff23-31e1-48ea-896e-e607ef52551e",
            "source": "507a7010-7eba-4867-94a4-a34149de437f",
            "target": "76a00f4a-5275-4af5-afbe-957ae1ea15b5",
            "handles": [
                "34a6f52c-83bd-46af-b96b-ce5f7b289abd"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "507a7010-7eba-4867-94a4-a34149de437f"
        },
        {
            "id": "generic_latch",
            "instance": "76a00f4a-5275-4af5-afbe-957ae1ea15b5"
        },
        {
            "id": "generic_handle",
            "instance": "34a6f52c-83bd-46af-b96b-ce5f7b289abd"
        },
        {
            "id": "dynamic_line",
            "instance": "a655976a-b511-4d66-8f37-d0dcc8b65655",
            "source": "4bd31491-5e67-4bd1-8084-17dca5f88589",
            "target": "f1bb6f4a-1604-4ecc-8ea2-8d4afc01e990",
            "handles": [
                "625e454c-ffae-462c-98b2-363931a23460"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4bd31491-5e67-4bd1-8084-17dca5f88589"
        },
        {
            "id": "generic_latch",
            "instance": "f1bb6f4a-1604-4ecc-8ea2-8d4afc01e990"
        },
        {
            "id": "generic_handle",
            "instance": "625e454c-ffae-462c-98b2-363931a23460"
        },
        {
            "id": "dynamic_line",
            "instance": "5dd2ebc2-737f-4157-8016-51f6c2187f61",
            "source": "67b15c23-3148-451f-9033-b1c0cd4e8142",
            "target": "416eeeaa-ed38-44bb-a817-7d65925bcebd",
            "handles": [
                "e2c34c1a-c3e2-4d98-bf19-46f702b0a002"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "67b15c23-3148-451f-9033-b1c0cd4e8142"
        },
        {
            "id": "generic_latch",
            "instance": "416eeeaa-ed38-44bb-a817-7d65925bcebd"
        },
        {
            "id": "generic_handle",
            "instance": "e2c34c1a-c3e2-4d98-bf19-46f702b0a002"
        },
        {
            "id": "dynamic_line",
            "instance": "c4e2725b-3b61-42b6-b6b1-c3ff2715a4d2",
            "source": "980e5247-019a-4865-8997-ac7c0a612495",
            "target": "fa6d86f9-2436-494f-9ce0-7dfe5f6e4132",
            "handles": [
                "a50a99d6-133c-4da1-87c9-79d5ddf05aa3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "980e5247-019a-4865-8997-ac7c0a612495"
        },
        {
            "id": "generic_latch",
            "instance": "fa6d86f9-2436-494f-9ce0-7dfe5f6e4132"
        },
        {
            "id": "generic_handle",
            "instance": "a50a99d6-133c-4da1-87c9-79d5ddf05aa3"
        },
        {
            "id": "dynamic_line",
            "instance": "c59b4c90-112b-4992-ab6c-a83c552e0a01",
            "source": "14528369-4fb0-4186-b56a-b216f1cc140a",
            "target": "6d87fccb-3f74-48e6-b86a-ab180886bf90",
            "handles": [
                "484cb11c-5ee1-402d-9b3d-27a4f81ec641"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "14528369-4fb0-4186-b56a-b216f1cc140a"
        },
        {
            "id": "generic_latch",
            "instance": "6d87fccb-3f74-48e6-b86a-ab180886bf90"
        },
        {
            "id": "generic_handle",
            "instance": "484cb11c-5ee1-402d-9b3d-27a4f81ec641"
        },
        {
            "id": "dynamic_line",
            "instance": "510252e0-f143-4955-89ef-bf782fdd31f5",
            "source": "ac02ce69-9a62-430f-81f2-bf181667c5bb",
            "target": "1fc1de62-9c33-488b-a5df-11de954f42a5",
            "handles": [
                "0e8ee4f3-6784-4bd9-a5c9-6bbc848b949e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "ac02ce69-9a62-430f-81f2-bf181667c5bb"
        },
        {
            "id": "generic_latch",
            "instance": "1fc1de62-9c33-488b-a5df-11de954f42a5"
        },
        {
            "id": "generic_handle",
            "instance": "0e8ee4f3-6784-4bd9-a5c9-6bbc848b949e"
        },
        {
            "id": "dynamic_line",
            "instance": "7f98b93d-373a-4133-906b-1d99c546bc7b",
            "source": "c31ccd49-2b7b-4559-8798-90ffb6a3f5db",
            "target": "fd039b52-4e66-4511-b601-09a330275b91",
            "handles": [
                "ceaa4c24-1909-4e07-a3d3-bfb047c00378"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "c31ccd49-2b7b-4559-8798-90ffb6a3f5db"
        },
        {
            "id": "generic_latch",
            "instance": "fd039b52-4e66-4511-b601-09a330275b91"
        },
        {
            "id": "generic_handle",
            "instance": "ceaa4c24-1909-4e07-a3d3-bfb047c00378"
        },
        {
            "id": "dynamic_line",
            "instance": "bcb9ac6c-9512-434e-aa21-6688cd1e858c",
            "source": "a336a191-13bf-4cf0-bd0a-a6511ca0141b",
            "target": "9dfc7a20-144c-498b-badc-3ffc5464e138",
            "handles": [
                "23dbc168-33c6-43d0-8e5b-c9639a9eec6a"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a336a191-13bf-4cf0-bd0a-a6511ca0141b"
        },
        {
            "id": "generic_latch",
            "instance": "9dfc7a20-144c-498b-badc-3ffc5464e138"
        },
        {
            "id": "generic_handle",
            "instance": "23dbc168-33c6-43d0-8e5b-c9639a9eec6a"
        },
        {
            "id": "dynamic_line",
            "instance": "25531aa1-3f88-4b82-ae73-b3b897b161a2",
            "source": "cf714220-8586-4a01-8eeb-d9776a1d20c5",
            "target": "0ff9b1c7-01e2-44cf-ac63-2515a35e56f4",
            "handles": [
                "4782fa03-d533-47fa-a2df-c483fd1f92b4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "cf714220-8586-4a01-8eeb-d9776a1d20c5"
        },
        {
            "id": "generic_latch",
            "instance": "0ff9b1c7-01e2-44cf-ac63-2515a35e56f4"
        },
        {
            "id": "generic_handle",
            "instance": "4782fa03-d533-47fa-a2df-c483fd1f92b4"
        },
        {
            "id": "dynamic_line",
            "instance": "b3e5cea9-e892-407e-a9d1-8a338cac2afc",
            "source": "4a891399-126a-4212-95b6-fb4da15aa179",
            "target": "2c095f2d-529f-48f0-8620-2abf5dbd1dcb",
            "handles": [
                "c3fdb641-475e-4e9a-a27f-137565231156"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "4a891399-126a-4212-95b6-fb4da15aa179"
        },
        {
            "id": "generic_latch",
            "instance": "2c095f2d-529f-48f0-8620-2abf5dbd1dcb"
        },
        {
            "id": "generic_handle",
            "instance": "c3fdb641-475e-4e9a-a27f-137565231156"
        },
        {
            "id": "dynamic_line",
            "instance": "85725af9-4e4c-4c39-a364-de552d56562f",
            "source": "0994f6fa-02fa-4c99-8427-5ad4f50ce3ac",
            "target": "b0dd97c7-28c6-4d86-a750-092941865913",
            "handles": [
                "3137028c-1aea-4c92-9fef-1b20c470d5ac"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0994f6fa-02fa-4c99-8427-5ad4f50ce3ac"
        },
        {
            "id": "generic_latch",
            "instance": "b0dd97c7-28c6-4d86-a750-092941865913"
        },
        {
            "id": "generic_handle",
            "instance": "3137028c-1aea-4c92-9fef-1b20c470d5ac"
        },
        {
            "id": "dynamic_line",
            "instance": "32eb64e9-c138-441d-9b0a-22c9737ece8d",
            "source": "b2235121-e7fd-4c57-a6b1-c0ef28cd4e20",
            "target": "cc195c8d-effd-460f-a877-cdabfd6323e1",
            "handles": [
                "2ca4ced2-fd49-47d7-801d-07ad7bab4256"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b2235121-e7fd-4c57-a6b1-c0ef28cd4e20"
        },
        {
            "id": "generic_latch",
            "instance": "cc195c8d-effd-460f-a877-cdabfd6323e1"
        },
        {
            "id": "generic_handle",
            "instance": "2ca4ced2-fd49-47d7-801d-07ad7bab4256"
        },
        {
            "id": "dynamic_line",
            "instance": "cd1b1612-4c35-4db6-b6c0-f93807c2d0ae",
            "source": "c3386bb7-1ecf-4391-b0ec-eebb42e32fe8",
            "target": "9f63eae1-de5b-47b8-887b-7b0120092ccb",
            "handles": [
                "3631d18c-eeed-414e-90d2-864a800ce3e5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "c3386bb7-1ecf-4391-b0ec-eebb42e32fe8"
        },
        {
            "id": "generic_latch",
            "instance": "9f63eae1-de5b-47b8-887b-7b0120092ccb"
        },
        {
            "id": "generic_handle",
            "instance": "3631d18c-eeed-414e-90d2-864a800ce3e5"
        },
        {
            "id": "dynamic_line",
            "instance": "574054d4-d7b4-4a57-b625-da316ad8c044",
            "source": "a33b8590-9722-4dcc-8e96-64d49881b8f6",
            "target": "a7641f6a-5b7c-45e5-9e49-4034f5ec8c79",
            "handles": [
                "d7dc388c-bf54-42f3-a328-4ab520e6ead5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a33b8590-9722-4dcc-8e96-64d49881b8f6"
        },
        {
            "id": "generic_latch",
            "instance": "a7641f6a-5b7c-45e5-9e49-4034f5ec8c79"
        },
        {
            "id": "generic_handle",
            "instance": "d7dc388c-bf54-42f3-a328-4ab520e6ead5"
        },
        {
            "id": "dynamic_line",
            "instance": "daaed13b-7faf-4524-97cb-6c6e2ab8044d",
            "source": "f890a411-a0fa-433b-9f0d-0b44062a002b",
            "target": "4a62884a-284e-4185-9d60-50f0b02f8df0",
            "handles": [
                "6b5fa5c7-03a4-408d-994e-895244914c81"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "f890a411-a0fa-433b-9f0d-0b44062a002b"
        },
        {
            "id": "generic_latch",
            "instance": "4a62884a-284e-4185-9d60-50f0b02f8df0"
        },
        {
            "id": "generic_handle",
            "instance": "6b5fa5c7-03a4-408d-994e-895244914c81"
        },
        {
            "id": "dynamic_line",
            "instance": "a8217c02-6125-4fd8-ba08-530fbce8930e",
            "source": "92cb84fc-49b2-4c60-b111-4252892968a6",
            "target": "28b38a3e-63c5-4c17-8cba-743a25e8da01",
            "handles": [
                "51d9f072-cc36-4a5d-866a-487173c4de04"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "92cb84fc-49b2-4c60-b111-4252892968a6"
        },
        {
            "id": "generic_latch",
            "instance": "28b38a3e-63c5-4c17-8cba-743a25e8da01"
        },
        {
            "id": "generic_handle",
            "instance": "51d9f072-cc36-4a5d-866a-487173c4de04"
        },
        {
            "id": "dynamic_line",
            "instance": "d30103ef-f631-405e-afd6-b64c06893a6a",
            "source": "2d01ead2-29c2-4068-a138-31a7b864f785",
            "target": "a6885a20-4332-4cf2-9748-cdd22b623900",
            "handles": [
                "1c407b53-5b17-4c62-b8dd-149c9539958d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "2d01ead2-29c2-4068-a138-31a7b864f785"
        },
        {
            "id": "generic_latch",
            "instance": "a6885a20-4332-4cf2-9748-cdd22b623900"
        },
        {
            "id": "generic_handle",
            "instance": "1c407b53-5b17-4c62-b8dd-149c9539958d"
        },
        {
            "id": "dynamic_line",
            "instance": "560e02d6-873c-4075-857e-c60e7074be70",
            "source": "14bbfb05-4f21-4c3a-baaa-2fb147b2afed",
            "target": "3ba0c80a-3dec-4581-8dbf-9eb7c59a31b8",
            "handles": [
                "4b66b6ce-b9e7-489d-9e68-7004aa7d83b4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "14bbfb05-4f21-4c3a-baaa-2fb147b2afed"
        },
        {
            "id": "generic_latch",
            "instance": "3ba0c80a-3dec-4581-8dbf-9eb7c59a31b8"
        },
        {
            "id": "generic_handle",
            "instance": "4b66b6ce-b9e7-489d-9e68-7004aa7d83b4"
        },
        {
            "id": "dynamic_line",
            "instance": "bfbe47ed-4e00-408c-9475-f98490c9e91f",
            "source": "0e71058b-88c4-4aac-831e-9b6d2565d58e",
            "target": "9959d592-7396-4df6-8375-98ba75110494",
            "handles": [
                "7cd85e53-b866-46b7-8453-f94e35cd151a"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "0e71058b-88c4-4aac-831e-9b6d2565d58e"
        },
        {
            "id": "generic_latch",
            "instance": "9959d592-7396-4df6-8375-98ba75110494"
        },
        {
            "id": "generic_handle",
            "instance": "7cd85e53-b866-46b7-8453-f94e35cd151a"
        },
        {
            "id": "dynamic_line",
            "instance": "14ca6263-2df8-4d42-b9ee-c80ab54e8dc4",
            "source": "497655aa-cde5-4cb3-b550-e4471b6433e3",
            "target": "b676e638-b8d1-424c-b26a-899bca68f67d",
            "handles": [
                "709753a3-d379-4b16-9f7f-fb61893b0a94"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "497655aa-cde5-4cb3-b550-e4471b6433e3"
        },
        {
            "id": "generic_latch",
            "instance": "b676e638-b8d1-424c-b26a-899bca68f67d"
        },
        {
            "id": "generic_handle",
            "instance": "709753a3-d379-4b16-9f7f-fb61893b0a94"
        },
        {
            "id": "dynamic_line",
            "instance": "2638875d-c059-4614-b1d6-8ea2a8aa1e96",
            "source": "8131a6c8-8257-431e-86a0-ca16b2eae989",
            "target": "806a66ac-1708-4364-beda-0d440c2fcc4b",
            "handles": [
                "38f08be3-fbaf-4198-804e-973d344a63a7"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8131a6c8-8257-431e-86a0-ca16b2eae989"
        },
        {
            "id": "generic_latch",
            "instance": "806a66ac-1708-4364-beda-0d440c2fcc4b"
        },
        {
            "id": "generic_handle",
            "instance": "38f08be3-fbaf-4198-804e-973d344a63a7"
        },
        {
            "id": "dynamic_line",
            "instance": "9d85472b-7c58-478b-adee-ae1c54cf7eb9",
            "source": "3d0d941a-0382-4067-bc60-07474fa57782",
            "target": "aef1d77e-e582-4e35-ad90-5660209e7674",
            "handles": [
                "8f705f30-2215-4e0d-8704-d26fe226fcd0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "3d0d941a-0382-4067-bc60-07474fa57782"
        },
        {
            "id": "generic_latch",
            "instance": "aef1d77e-e582-4e35-ad90-5660209e7674"
        },
        {
            "id": "generic_handle",
            "instance": "8f705f30-2215-4e0d-8704-d26fe226fcd0"
        },
        {
            "id": "dynamic_line",
            "instance": "7a43f9f1-8196-4354-9f0c-f7df6d88c3af",
            "source": "13ee0976-d72d-47b2-a44b-a19b593ce7b6",
            "target": "432110c4-3da9-42ed-a9f2-f7aa027be0b4",
            "handles": [
                "5cb79386-bee5-449c-a27c-cf8e2ca21ec3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "13ee0976-d72d-47b2-a44b-a19b593ce7b6"
        },
        {
            "id": "generic_latch",
            "instance": "432110c4-3da9-42ed-a9f2-f7aa027be0b4"
        },
        {
            "id": "generic_handle",
            "instance": "5cb79386-bee5-449c-a27c-cf8e2ca21ec3"
        },
        {
            "id": "dynamic_line",
            "instance": "30bd4a9e-100e-4b92-805e-31200d8b82e9",
            "source": "1fe35aa2-2c82-4522-ad65-5a0b68cb0e43",
            "target": "2bdf57df-b2fe-4ff0-92e5-9e98b8664d41",
            "handles": [
                "5d60bbf7-73ca-4a06-9993-051df6abdc87"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1fe35aa2-2c82-4522-ad65-5a0b68cb0e43"
        },
        {
            "id": "generic_latch",
            "instance": "2bdf57df-b2fe-4ff0-92e5-9e98b8664d41"
        },
        {
            "id": "generic_handle",
            "instance": "5d60bbf7-73ca-4a06-9993-051df6abdc87"
        },
        {
            "id": "dynamic_line",
            "instance": "7aee190e-ce35-4fa1-9078-5b859feee10e",
            "source": "e66979fe-5eba-4d61-93c7-3d7cd8e5ee54",
            "target": "749bb519-b158-46f3-a48e-e6366b676088",
            "handles": [
                "ce701713-71ce-44d9-8c94-77c739ad2277"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e66979fe-5eba-4d61-93c7-3d7cd8e5ee54"
        },
        {
            "id": "generic_latch",
            "instance": "749bb519-b158-46f3-a48e-e6366b676088"
        },
        {
            "id": "generic_handle",
            "instance": "ce701713-71ce-44d9-8c94-77c739ad2277"
        },
        {
            "id": "dynamic_line",
            "instance": "77782ce5-8500-44f5-9c8c-eac62a640a45",
            "source": "42fa7cad-6acb-49de-86e7-df0b5c93357c",
            "target": "01b9ad89-5021-4d8d-b1b3-dcf0a3695443",
            "handles": [
                "b6eff7a0-8379-41e5-bd0a-3ce546fa46dc"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "42fa7cad-6acb-49de-86e7-df0b5c93357c"
        },
        {
            "id": "generic_latch",
            "instance": "01b9ad89-5021-4d8d-b1b3-dcf0a3695443"
        },
        {
            "id": "generic_handle",
            "instance": "b6eff7a0-8379-41e5-bd0a-3ce546fa46dc"
        },
        {
            "id": "dynamic_line",
            "instance": "d7ae3b0f-69ee-4a79-a377-29eb640b3967",
            "source": "1d42b885-eeb6-4477-82d4-32457831ac05",
            "target": "8b41de9d-99c4-4a17-9d0a-a3ffdb43e648",
            "handles": [
                "102118e4-d675-41cd-ab49-6899ac89a0f2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1d42b885-eeb6-4477-82d4-32457831ac05"
        },
        {
            "id": "generic_latch",
            "instance": "8b41de9d-99c4-4a17-9d0a-a3ffdb43e648"
        },
        {
            "id": "generic_handle",
            "instance": "102118e4-d675-41cd-ab49-6899ac89a0f2"
        },
        {
            "id": "dynamic_line",
            "instance": "ac128898-e3d9-4dfd-be7e-f7389daf996a",
            "source": "5b8c1b16-29b6-495c-9562-766268676219",
            "target": "e4ad2014-c30e-4bce-9730-6b6e6fddae21",
            "handles": [
                "e788e120-8ac9-49e9-953e-2c4c80102cd7"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "5b8c1b16-29b6-495c-9562-766268676219"
        },
        {
            "id": "generic_latch",
            "instance": "e4ad2014-c30e-4bce-9730-6b6e6fddae21"
        },
        {
            "id": "generic_handle",
            "instance": "e788e120-8ac9-49e9-953e-2c4c80102cd7"
        },
        {
            "id": "dynamic_line",
            "instance": "bb026450-be53-4e9b-a9a4-8fe4430f5361",
            "source": "bddebe1c-ac15-40ba-9121-6b2849d759c2",
            "target": "0f736779-bf95-480d-b27a-033a6d48db3f",
            "handles": [
                "cb1782d7-0857-4f65-90f5-fa67bd95b7eb"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "bddebe1c-ac15-40ba-9121-6b2849d759c2"
        },
        {
            "id": "generic_latch",
            "instance": "0f736779-bf95-480d-b27a-033a6d48db3f"
        },
        {
            "id": "generic_handle",
            "instance": "cb1782d7-0857-4f65-90f5-fa67bd95b7eb"
        },
        {
            "id": "dynamic_line",
            "instance": "f40aac7a-9c7a-4093-ad5a-29ef958ee7a2",
            "source": "919b5953-80dd-42fb-9790-760d3a217fcc",
            "target": "64e55356-d21b-41fd-a30d-f1cee0883121",
            "handles": [
                "3ebb0f9f-60cc-4c60-b81b-c752d342b9d0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "919b5953-80dd-42fb-9790-760d3a217fcc"
        },
        {
            "id": "generic_latch",
            "instance": "64e55356-d21b-41fd-a30d-f1cee0883121"
        },
        {
            "id": "generic_handle",
            "instance": "3ebb0f9f-60cc-4c60-b81b-c752d342b9d0"
        },
        {
            "id": "dynamic_line",
            "instance": "50d111f6-54be-4096-abeb-a4712d3acf0e",
            "source": "1da82f4a-cfe1-47a4-a07b-7dcb39335108",
            "target": "808bfa11-6d4a-4e0a-bbdf-82ab4f6a8603",
            "handles": [
                "4084735b-85b6-49ed-bbe3-6aa128be1ecc"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1da82f4a-cfe1-47a4-a07b-7dcb39335108"
        },
        {
            "id": "generic_latch",
            "instance": "808bfa11-6d4a-4e0a-bbdf-82ab4f6a8603"
        },
        {
            "id": "generic_handle",
            "instance": "4084735b-85b6-49ed-bbe3-6aa128be1ecc"
        },
        {
            "id": "dynamic_line",
            "instance": "5dd04db0-bcbd-4b89-a24d-557cdcb7b98a",
            "source": "37a8dfe8-2019-40e1-9dd0-e4750e28c0e1",
            "target": "a707bfa7-7e58-4513-9ef8-0c4f09820d89",
            "handles": [
                "14a9b9f8-7a93-4b11-836b-1702fc2099e4"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "37a8dfe8-2019-40e1-9dd0-e4750e28c0e1"
        },
        {
            "id": "generic_latch",
            "instance": "a707bfa7-7e58-4513-9ef8-0c4f09820d89"
        },
        {
            "id": "generic_handle",
            "instance": "14a9b9f8-7a93-4b11-836b-1702fc2099e4"
        },
        {
            "id": "dynamic_line",
            "instance": "a3ba5351-9428-4a55-bf78-e9c89e29b050",
            "source": "a6bc2b5c-844a-4bc3-85fc-846bc7d93d9d",
            "target": "28e549c8-cff7-4bbd-bc7a-34e53aa7f332",
            "handles": [
                "4001784d-2d10-4bea-9721-905ae03d79a0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a6bc2b5c-844a-4bc3-85fc-846bc7d93d9d"
        },
        {
            "id": "generic_latch",
            "instance": "28e549c8-cff7-4bbd-bc7a-34e53aa7f332"
        },
        {
            "id": "generic_handle",
            "instance": "4001784d-2d10-4bea-9721-905ae03d79a0"
        },
        {
            "id": "dynamic_line",
            "instance": "e5f65f06-5799-4ed3-bb50-9fdfac567a3f",
            "source": "351ab945-fe60-4ca4-bdec-fb54c879f93c",
            "target": "904c4056-af02-4bd3-95b4-53b947d6af92",
            "handles": [
                "f05535ec-1214-4fac-84ac-ce3e233b1a50"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "351ab945-fe60-4ca4-bdec-fb54c879f93c"
        },
        {
            "id": "generic_latch",
            "instance": "904c4056-af02-4bd3-95b4-53b947d6af92"
        },
        {
            "id": "generic_handle",
            "instance": "f05535ec-1214-4fac-84ac-ce3e233b1a50"
        },
        {
            "id": "dynamic_line",
            "instance": "2f32d747-f0f6-446c-bf93-d544ce4c892c",
            "source": "8e329478-ea2e-4b71-a0ee-d16899bf3a47",
            "target": "d251d854-3857-44d5-8d19-ec437fc9a229",
            "handles": [
                "e60a1d24-a5e5-4834-8bf4-d520963bc635"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8e329478-ea2e-4b71-a0ee-d16899bf3a47"
        },
        {
            "id": "generic_latch",
            "instance": "d251d854-3857-44d5-8d19-ec437fc9a229"
        },
        {
            "id": "generic_handle",
            "instance": "e60a1d24-a5e5-4834-8bf4-d520963bc635"
        },
        {
            "id": "dynamic_line",
            "instance": "36d2f694-2399-421b-8edb-c0b23a420206",
            "source": "a0ac9132-c4d8-46c5-9bfd-39c1a36b4aa2",
            "target": "e69a0766-3ecf-449a-988f-60e9dce41f41",
            "handles": [
                "4ae960e6-1965-45b2-9624-cd4d21d13279"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a0ac9132-c4d8-46c5-9bfd-39c1a36b4aa2"
        },
        {
            "id": "generic_latch",
            "instance": "e69a0766-3ecf-449a-988f-60e9dce41f41"
        },
        {
            "id": "generic_handle",
            "instance": "4ae960e6-1965-45b2-9624-cd4d21d13279"
        },
        {
            "id": "dynamic_line",
            "instance": "ff662bac-b43e-4609-b653-2b1e964c452f",
            "source": "65835389-1e70-4076-ad47-a3283fdd3b29",
            "target": "aceba2ef-205d-4198-9ef2-fd3c0a2ab9b4",
            "handles": [
                "f1d13905-3c24-4547-b08c-593077c99707"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "65835389-1e70-4076-ad47-a3283fdd3b29"
        },
        {
            "id": "generic_latch",
            "instance": "aceba2ef-205d-4198-9ef2-fd3c0a2ab9b4"
        },
        {
            "id": "generic_handle",
            "instance": "f1d13905-3c24-4547-b08c-593077c99707"
        },
        {
            "id": "dynamic_line",
            "instance": "60a21f79-8e29-4f2e-b7d7-8811a3d1003a",
            "source": "8f02e345-d365-4192-822a-20dd838eb409",
            "target": "34d9f271-7249-4400-984f-700129f9c370",
            "handles": [
                "d06ba100-8766-44e7-9046-5fb38beb8770"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8f02e345-d365-4192-822a-20dd838eb409"
        },
        {
            "id": "generic_latch",
            "instance": "34d9f271-7249-4400-984f-700129f9c370"
        },
        {
            "id": "generic_handle",
            "instance": "d06ba100-8766-44e7-9046-5fb38beb8770"
        },
        {
            "id": "dynamic_line",
            "instance": "cf6bd88c-c57c-462d-b091-4ef14d7988fe",
            "source": "a94ef12d-26db-4164-bdb6-ffc71a0dd463",
            "target": "abf3cb24-0b64-4614-9e7b-9aeec4eb62b2",
            "handles": [
                "f32ee47d-fa7d-45a0-967f-0c7e44e52ee1"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a94ef12d-26db-4164-bdb6-ffc71a0dd463"
        },
        {
            "id": "generic_latch",
            "instance": "abf3cb24-0b64-4614-9e7b-9aeec4eb62b2"
        },
        {
            "id": "generic_handle",
            "instance": "f32ee47d-fa7d-45a0-967f-0c7e44e52ee1"
        },
        {
            "id": "dynamic_line",
            "instance": "21aa4ee0-ebe4-49c5-9ee4-1f20c4dec599",
            "source": "2a4f12de-4ec1-47f7-a922-36df09d53f2d",
            "target": "906100a8-55c5-427f-85ff-341095b0386c",
            "handles": [
                "cc0d577d-f6df-4f5f-81d4-5947ea793e52"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "2a4f12de-4ec1-47f7-a922-36df09d53f2d"
        },
        {
            "id": "generic_latch",
            "instance": "906100a8-55c5-427f-85ff-341095b0386c"
        },
        {
            "id": "generic_handle",
            "instance": "cc0d577d-f6df-4f5f-81d4-5947ea793e52"
        },
        {
            "id": "dynamic_line",
            "instance": "73915270-8b18-408d-9b87-615007b95137",
            "source": "a0505e83-6dd0-4ef1-a53a-26d07dd77699",
            "target": "4c57c1e3-302a-4b2c-8a6c-769ee62afedc",
            "handles": [
                "83d429bf-266e-4b0a-b896-e6e260bcf2a5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a0505e83-6dd0-4ef1-a53a-26d07dd77699"
        },
        {
            "id": "generic_latch",
            "instance": "4c57c1e3-302a-4b2c-8a6c-769ee62afedc"
        },
        {
            "id": "generic_handle",
            "instance": "83d429bf-266e-4b0a-b896-e6e260bcf2a5"
        },
        {
            "id": "dynamic_line",
            "instance": "aacca38f-fabc-4e3f-946e-24489602968a",
            "source": "628ff7cc-23b6-49ca-aacf-cff00d3371c3",
            "target": "df309418-040a-4a9f-9ace-248bfec403d5",
            "handles": [
                "b2232b90-b5c0-4b9e-822e-e2a88acd79c2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "628ff7cc-23b6-49ca-aacf-cff00d3371c3"
        },
        {
            "id": "generic_latch",
            "instance": "df309418-040a-4a9f-9ace-248bfec403d5"
        },
        {
            "id": "generic_handle",
            "instance": "b2232b90-b5c0-4b9e-822e-e2a88acd79c2"
        },
        {
            "id": "dynamic_line",
            "instance": "792259a5-1220-4fe0-a5d2-03ce48cebab4",
            "source": "aba26cb9-43d1-49d3-88c2-a8bae2dc61a5",
            "target": "07b727b5-03e7-4dee-a58c-048a45c8d9d6",
            "handles": [
                "812a53cf-fb4d-43ed-8369-b05bd9b7a1d2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "aba26cb9-43d1-49d3-88c2-a8bae2dc61a5"
        },
        {
            "id": "generic_latch",
            "instance": "07b727b5-03e7-4dee-a58c-048a45c8d9d6"
        },
        {
            "id": "generic_handle",
            "instance": "812a53cf-fb4d-43ed-8369-b05bd9b7a1d2"
        },
        {
            "id": "dynamic_line",
            "instance": "65a6720b-548b-40f9-adbd-100362efb3c4",
            "source": "bbebd20e-04e8-4a04-9fab-7ef80421e029",
            "target": "a3ba8ccd-5049-40c5-bc48-879b5f3e94e9",
            "handles": [
                "e3a388f9-8c72-4b02-b60d-ea93009ad15e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "bbebd20e-04e8-4a04-9fab-7ef80421e029"
        },
        {
            "id": "generic_latch",
            "instance": "a3ba8ccd-5049-40c5-bc48-879b5f3e94e9"
        },
        {
            "id": "generic_handle",
            "instance": "e3a388f9-8c72-4b02-b60d-ea93009ad15e"
        },
        {
            "id": "dynamic_line",
            "instance": "d12bfefa-b40b-4064-b5d6-f92c0a2a4966",
            "source": "e67d7a4f-9746-4082-a62f-1e6b01ce7926",
            "target": "2e1b76c2-d67b-45df-ad44-e2f0e0192954",
            "handles": [
                "b210de54-309f-484f-9c5a-04db3b93ef3b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e67d7a4f-9746-4082-a62f-1e6b01ce7926"
        },
        {
            "id": "generic_latch",
            "instance": "2e1b76c2-d67b-45df-ad44-e2f0e0192954"
        },
        {
            "id": "generic_handle",
            "instance": "b210de54-309f-484f-9c5a-04db3b93ef3b"
        },
        {
            "id": "dynamic_line",
            "instance": "c6f31286-ee7f-4d2c-91de-09f8e450bcd2",
            "source": "cf2d106f-0a13-4a2e-a481-32836939c6fd",
            "target": "b1f04d14-0cb2-448a-a696-35898401ab54",
            "handles": [
                "b104634a-7423-446b-b449-c864fbab756f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "cf2d106f-0a13-4a2e-a481-32836939c6fd"
        },
        {
            "id": "generic_latch",
            "instance": "b1f04d14-0cb2-448a-a696-35898401ab54"
        },
        {
            "id": "generic_handle",
            "instance": "b104634a-7423-446b-b449-c864fbab756f"
        },
        {
            "id": "dynamic_line",
            "instance": "3c496d33-ef3e-478f-ab5f-c139ada1acd3",
            "source": "27cd8873-ffe8-47e5-80ba-c2874d76b598",
            "target": "4e776370-c517-4223-bfd8-7d8fc4c96f19",
            "handles": [
                "5d5047e1-b08d-47eb-ae9c-792279dcbea2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "27cd8873-ffe8-47e5-80ba-c2874d76b598"
        },
        {
            "id": "generic_latch",
            "instance": "4e776370-c517-4223-bfd8-7d8fc4c96f19"
        },
        {
            "id": "generic_handle",
            "instance": "5d5047e1-b08d-47eb-ae9c-792279dcbea2"
        },
        {
            "id": "dynamic_line",
            "instance": "4376c6b1-f534-45db-a81c-1cdb3b2a5b51",
            "source": "8dbb865f-cf98-47a0-83ee-8522b03b8016",
            "target": "f7b94422-dd44-478a-96fd-7f44dad5783b",
            "handles": [
                "c6981b39-307b-47bf-8b99-f139669e34e5"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "8dbb865f-cf98-47a0-83ee-8522b03b8016"
        },
        {
            "id": "generic_latch",
            "instance": "f7b94422-dd44-478a-96fd-7f44dad5783b"
        },
        {
            "id": "generic_handle",
            "instance": "c6981b39-307b-47bf-8b99-f139669e34e5"
        },
        {
            "id": "dynamic_line",
            "instance": "f9a57570-5f1c-4eb4-a543-45ba2364291f",
            "source": "07253906-a51c-4915-98a4-0abd9c5367ce",
            "target": "b18d4c5d-31dc-4699-b098-7752de852b5f",
            "handles": [
                "9954b0fa-325e-4b6a-b24e-eb3e5f706c0a"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "07253906-a51c-4915-98a4-0abd9c5367ce"
        },
        {
            "id": "generic_latch",
            "instance": "b18d4c5d-31dc-4699-b098-7752de852b5f"
        },
        {
            "id": "generic_handle",
            "instance": "9954b0fa-325e-4b6a-b24e-eb3e5f706c0a"
        },
        {
            "id": "dynamic_line",
            "instance": "607e503f-3915-4186-9487-2986be87075b",
            "source": "a5f2e48f-f303-4cf4-b5bc-48b8a0855d86",
            "target": "c573a9a4-9709-40ef-b1f8-acb08f9b839b",
            "handles": [
                "2c54d6e3-faf7-4fec-98ec-0aaff115dbd1"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a5f2e48f-f303-4cf4-b5bc-48b8a0855d86"
        },
        {
            "id": "generic_latch",
            "instance": "c573a9a4-9709-40ef-b1f8-acb08f9b839b"
        },
        {
            "id": "generic_handle",
            "instance": "2c54d6e3-faf7-4fec-98ec-0aaff115dbd1"
        },
        {
            "id": "dynamic_line",
            "instance": "2c17b552-1c3f-4251-b40d-84eaf0b84d42",
            "source": "aa5e7a25-9f0a-4d94-ab0a-aaa490e22735",
            "target": "3bc32f83-d99a-4243-bfa8-6776cf9fb232",
            "handles": [
                "83605d23-52f3-4159-bef0-fadb867d3256"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "aa5e7a25-9f0a-4d94-ab0a-aaa490e22735"
        },
        {
            "id": "generic_latch",
            "instance": "3bc32f83-d99a-4243-bfa8-6776cf9fb232"
        },
        {
            "id": "generic_handle",
            "instance": "83605d23-52f3-4159-bef0-fadb867d3256"
        },
        {
            "id": "dynamic_line",
            "instance": "5fd887ca-b7aa-4e04-807f-5dbd2091bf02",
            "source": "a8dfd907-e8e9-43df-a521-4718aebd87b4",
            "target": "df6edf6c-cce6-4dea-8cf0-56da3893fc58",
            "handles": [
                "eaf309c9-8834-4c9f-a494-b4b7c2588962"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a8dfd907-e8e9-43df-a521-4718aebd87b4"
        },
        {
            "id": "generic_latch",
            "instance": "df6edf6c-cce6-4dea-8cf0-56da3893fc58"
        },
        {
            "id": "generic_handle",
            "instance": "eaf309c9-8834-4c9f-a494-b4b7c2588962"
        },
        {
            "id": "dynamic_line",
            "instance": "6d8bf22e-013a-4980-87da-f1f708727c38",
            "source": "d5ec3be0-07fd-44e9-9cb1-cc8d02a8a241",
            "target": "13e0efd5-f751-45e6-b5b9-1173fa341e0e",
            "handles": [
                "024916b1-3e3e-4baf-9d01-6f3a164c61f0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "d5ec3be0-07fd-44e9-9cb1-cc8d02a8a241"
        },
        {
            "id": "generic_latch",
            "instance": "13e0efd5-f751-45e6-b5b9-1173fa341e0e"
        },
        {
            "id": "generic_handle",
            "instance": "024916b1-3e3e-4baf-9d01-6f3a164c61f0"
        },
        {
            "id": "dynamic_line",
            "instance": "aa64b720-ae2c-4d16-8084-37026bfae881",
            "source": "1e583ee1-98fd-4bbe-a0ef-98133735fac2",
            "target": "5d4aac7a-eedf-4ae1-a61f-6108ac06f6a1",
            "handles": [
                "b52be264-1d75-46b4-9a59-3ab6d0f3125b"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "1e583ee1-98fd-4bbe-a0ef-98133735fac2"
        },
        {
            "id": "generic_latch",
            "instance": "5d4aac7a-eedf-4ae1-a61f-6108ac06f6a1"
        },
        {
            "id": "generic_handle",
            "instance": "b52be264-1d75-46b4-9a59-3ab6d0f3125b"
        },
        {
            "id": "dynamic_line",
            "instance": "e4c50b95-3680-4997-9209-1ee68ec54ef0",
            "source": "6552763e-7f30-4103-8b3d-82a739b29758",
            "target": "5f95c5de-a362-49f9-97f7-69b74d6641e6",
            "handles": [
                "c5da468f-15b8-4e2a-98c2-dfa2e761a660"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6552763e-7f30-4103-8b3d-82a739b29758"
        },
        {
            "id": "generic_latch",
            "instance": "5f95c5de-a362-49f9-97f7-69b74d6641e6"
        },
        {
            "id": "generic_handle",
            "instance": "c5da468f-15b8-4e2a-98c2-dfa2e761a660"
        },
        {
            "id": "dynamic_line",
            "instance": "ad60185f-e172-40ba-a418-7df9a765a201",
            "source": "c4ff4180-1cf0-42ec-ba25-0fc9dbb0837c",
            "target": "f4cd1509-12d0-48ea-9aea-57d3bfb5a6a8",
            "handles": [
                "93ca2c9c-d47b-495f-9490-26fb82c54ad0"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "c4ff4180-1cf0-42ec-ba25-0fc9dbb0837c"
        },
        {
            "id": "generic_latch",
            "instance": "f4cd1509-12d0-48ea-9aea-57d3bfb5a6a8"
        },
        {
            "id": "generic_handle",
            "instance": "93ca2c9c-d47b-495f-9490-26fb82c54ad0"
        },
        {
            "id": "dynamic_line",
            "instance": "355be087-e0af-40f2-b0ed-7b27f9e06403",
            "source": "63e9174d-75a4-4ef7-acce-96dc592dd33c",
            "target": "b9d99ad4-7e99-45c2-90f0-b6e8bec30d59",
            "handles": [
                "ffe87ced-421a-4552-9d4c-709ed34adf66"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "63e9174d-75a4-4ef7-acce-96dc592dd33c"
        },
        {
            "id": "generic_latch",
            "instance": "b9d99ad4-7e99-45c2-90f0-b6e8bec30d59"
        },
        {
            "id": "generic_handle",
            "instance": "ffe87ced-421a-4552-9d4c-709ed34adf66"
        },
        {
            "id": "dynamic_line",
            "instance": "663c67b4-2c55-473c-9093-ae1526a53033",
            "source": "b361eeb1-b90f-41db-b152-a68839a407f3",
            "target": "5170a536-46f3-4b8c-823a-78e5000b9092",
            "handles": [
                "1807a38c-dcca-4446-8d1a-bf327123d351"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b361eeb1-b90f-41db-b152-a68839a407f3"
        },
        {
            "id": "generic_latch",
            "instance": "5170a536-46f3-4b8c-823a-78e5000b9092"
        },
        {
            "id": "generic_handle",
            "instance": "1807a38c-dcca-4446-8d1a-bf327123d351"
        },
        {
            "id": "dynamic_line",
            "instance": "d3afef2e-2346-457e-9c1b-5c7230419f14",
            "source": "6d24563e-d20d-4db1-808e-5466ba45bff1",
            "target": "55c81ccb-c005-481e-acbd-0a9ac8d0c1cd",
            "handles": [
                "39bcdaa8-e444-4b2d-b2e4-c8c054f1d708"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6d24563e-d20d-4db1-808e-5466ba45bff1"
        },
        {
            "id": "generic_latch",
            "instance": "55c81ccb-c005-481e-acbd-0a9ac8d0c1cd"
        },
        {
            "id": "generic_handle",
            "instance": "39bcdaa8-e444-4b2d-b2e4-c8c054f1d708"
        },
        {
            "id": "dynamic_line",
            "instance": "ce2ab8f1-4d5c-478a-88b6-83d17f2185fc",
            "source": "27f777db-146d-4b0e-b90c-7b4272fd8cfe",
            "target": "e58ec0fb-d5cb-484b-8207-f81d68906190",
            "handles": [
                "a580e16b-3fa7-49e2-89d4-977239fea33a"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "27f777db-146d-4b0e-b90c-7b4272fd8cfe"
        },
        {
            "id": "generic_latch",
            "instance": "e58ec0fb-d5cb-484b-8207-f81d68906190"
        },
        {
            "id": "generic_handle",
            "instance": "a580e16b-3fa7-49e2-89d4-977239fea33a"
        },
        {
            "id": "dynamic_line",
            "instance": "15c41dc2-53c0-4ca9-89ed-9e76cdd474b4",
            "source": "b21ca736-57c9-4c4a-bf3c-1f903da6f7da",
            "target": "42906e52-aed6-4cb7-b7b2-12b8caf473b4",
            "handles": [
                "9cc8a684-d8f9-4748-b2e5-ed397d9eb3c3"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "b21ca736-57c9-4c4a-bf3c-1f903da6f7da"
        },
        {
            "id": "generic_latch",
            "instance": "42906e52-aed6-4cb7-b7b2-12b8caf473b4"
        },
        {
            "id": "generic_handle",
            "instance": "9cc8a684-d8f9-4748-b2e5-ed397d9eb3c3"
        },
        {
            "id": "dynamic_line",
            "instance": "8cdbbb67-f921-4ada-9eb4-8baf758d505b",
            "source": "dc6b9c3e-73c9-4d3a-a6cb-772caf4cf226",
            "target": "6195ae62-82bf-4575-8eef-e4009d9dc5af",
            "handles": [
                "256b1a45-1c42-47d4-9372-bd7668ab6b76"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "dc6b9c3e-73c9-4d3a-a6cb-772caf4cf226"
        },
        {
            "id": "generic_latch",
            "instance": "6195ae62-82bf-4575-8eef-e4009d9dc5af"
        },
        {
            "id": "generic_handle",
            "instance": "256b1a45-1c42-47d4-9372-bd7668ab6b76"
        },
        {
            "id": "dynamic_line",
            "instance": "6c0b2c3a-54da-45cc-a26e-b8558eaa14f9",
            "source": "5bda15bf-aee7-4148-89a9-eb4c91236ea8",
            "target": "671b7255-f769-4546-b34f-cd94614922da",
            "handles": [
                "b3e29c7b-cf58-4308-8b40-dfe99b11e8f2"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "5bda15bf-aee7-4148-89a9-eb4c91236ea8"
        },
        {
            "id": "generic_latch",
            "instance": "671b7255-f769-4546-b34f-cd94614922da"
        },
        {
            "id": "generic_handle",
            "instance": "b3e29c7b-cf58-4308-8b40-dfe99b11e8f2"
        },
        {
            "id": "dynamic_line",
            "instance": "d0bca837-851f-4a85-adbf-eea74ccdd361",
            "source": "2b848ea5-637d-474e-9187-862fa4db49be",
            "target": "c984630e-10c3-46a8-abdf-0b69a8636eeb",
            "handles": [
                "74dd9dc1-1f0e-4d06-a71f-81ec4142fe6e"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "2b848ea5-637d-474e-9187-862fa4db49be"
        },
        {
            "id": "generic_latch",
            "instance": "c984630e-10c3-46a8-abdf-0b69a8636eeb"
        },
        {
            "id": "generic_handle",
            "instance": "74dd9dc1-1f0e-4d06-a71f-81ec4142fe6e"
        },
        {
            "id": "dynamic_line",
            "instance": "37f9f394-315a-45df-b852-ee3fc5014cbc",
            "source": "7bb6471e-914b-4c99-a67f-74ced4af566c",
            "target": "b7a7d952-81b1-4273-890f-5d8beb49ccf5",
            "handles": [
                "abe61f4a-c7b0-4cbb-85bc-bcb400be1793"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "7bb6471e-914b-4c99-a67f-74ced4af566c"
        },
        {
            "id": "generic_latch",
            "instance": "b7a7d952-81b1-4273-890f-5d8beb49ccf5"
        },
        {
            "id": "generic_handle",
            "instance": "abe61f4a-c7b0-4cbb-85bc-bcb400be1793"
        },
        {
            "id": "dynamic_line",
            "instance": "650a57a8-96e8-4e7c-aaf0-6a5e4ca5c29f",
            "source": "6ac467b9-d20e-4dfe-b453-a9fc3b36984e",
            "target": "73f54f94-a0ec-465d-a72b-c770e782e641",
            "handles": [
                "726dab0d-b9d7-488d-a24a-bc30b51ee23c"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6ac467b9-d20e-4dfe-b453-a9fc3b36984e"
        },
        {
            "id": "generic_latch",
            "instance": "73f54f94-a0ec-465d-a72b-c770e782e641"
        },
        {
            "id": "generic_handle",
            "instance": "726dab0d-b9d7-488d-a24a-bc30b51ee23c"
        },
        {
            "id": "dynamic_line",
            "instance": "8ebebcc6-6f5e-4039-bc90-37427dc8fd73",
            "source": "a0cc1967-2640-4aa0-8d99-5dac2cff190e",
            "target": "e353bb99-6d5c-4c43-99df-03a94ebbaaec",
            "handles": [
                "452e4aaa-2554-4a72-bc64-3fbc58f6e7dd"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "a0cc1967-2640-4aa0-8d99-5dac2cff190e"
        },
        {
            "id": "generic_latch",
            "instance": "e353bb99-6d5c-4c43-99df-03a94ebbaaec"
        },
        {
            "id": "generic_handle",
            "instance": "452e4aaa-2554-4a72-bc64-3fbc58f6e7dd"
        },
        {
            "id": "dynamic_line",
            "instance": "478f8209-aff3-48a2-97a8-f3d50b2502de",
            "source": "d64d306b-17e8-4cc5-9df9-f174b4d826a2",
            "target": "a76291df-3f14-4d1a-b3e1-5f9e26b1d86e",
            "handles": [
                "318e1aee-e90a-4f45-b2b8-36adbc936004"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "d64d306b-17e8-4cc5-9df9-f174b4d826a2"
        },
        {
            "id": "generic_latch",
            "instance": "a76291df-3f14-4d1a-b3e1-5f9e26b1d86e"
        },
        {
            "id": "generic_handle",
            "instance": "318e1aee-e90a-4f45-b2b8-36adbc936004"
        },
        {
            "id": "dynamic_line",
            "instance": "eda86f23-3b3c-466b-9176-46957ad673cb",
            "source": "3ff902da-5bef-47af-9433-73eeed3dfd94",
            "target": "b07aee79-6eab-4b45-a3eb-f07032b413a5",
            "handles": [
                "b948db6d-a2c2-48bc-a93d-f552d4830f54"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "3ff902da-5bef-47af-9433-73eeed3dfd94"
        },
        {
            "id": "generic_latch",
            "instance": "b07aee79-6eab-4b45-a3eb-f07032b413a5"
        },
        {
            "id": "generic_handle",
            "instance": "b948db6d-a2c2-48bc-a93d-f552d4830f54"
        },
        {
            "id": "dynamic_line",
            "instance": "9fba1e4f-9899-48e3-bd61-e8205b4e769e",
            "source": "dd9d5021-1c39-4b53-b074-c18ddf60d9d9",
            "target": "4efc74e4-2330-4944-b3ca-689e179f5166",
            "handles": [
                "f397a37e-93ea-4abf-8ca2-ac356ae8f9e7"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "dd9d5021-1c39-4b53-b074-c18ddf60d9d9"
        },
        {
            "id": "generic_latch",
            "instance": "4efc74e4-2330-4944-b3ca-689e179f5166"
        },
        {
            "id": "generic_handle",
            "instance": "f397a37e-93ea-4abf-8ca2-ac356ae8f9e7"
        },
        {
            "id": "dynamic_line",
            "instance": "d91e49f8-5fae-499a-a14f-027ffec5d321",
            "source": "05e6ea31-4d93-4f74-b0cc-5289017fcec2",
            "target": "152913d7-175f-451e-9e68-a1439c0d0f52",
            "handles": [
                "806aa69f-fcdb-4253-b5be-8de9c1f5e5bf"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "05e6ea31-4d93-4f74-b0cc-5289017fcec2"
        },
        {
            "id": "generic_latch",
            "instance": "152913d7-175f-451e-9e68-a1439c0d0f52"
        },
        {
            "id": "generic_handle",
            "instance": "806aa69f-fcdb-4253-b5be-8de9c1f5e5bf"
        },
        {
            "id": "dynamic_line",
            "instance": "3e309154-ec98-4067-8c92-e90672f5869f",
            "source": "d31473b5-be93-46e2-9db5-656b26cff261",
            "target": "29bd7096-a9bf-42a0-9b3a-c31884cdd904",
            "handles": [
                "f69ae699-a664-4d5d-9943-a64a05be3b93"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "d31473b5-be93-46e2-9db5-656b26cff261"
        },
        {
            "id": "generic_latch",
            "instance": "29bd7096-a9bf-42a0-9b3a-c31884cdd904"
        },
        {
            "id": "generic_handle",
            "instance": "f69ae699-a664-4d5d-9943-a64a05be3b93"
        },
        {
            "id": "dynamic_line",
            "instance": "92afc379-dfb0-4dc2-8737-1114bf72253b",
            "source": "687e45dd-43a5-46aa-8ad0-be4a3ff496f2",
            "target": "77557476-817b-48e2-b7b3-2167dc28ac05",
            "handles": [
                "b627e24c-2c7c-496f-ae92-3d35936f91cd"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "687e45dd-43a5-46aa-8ad0-be4a3ff496f2"
        },
        {
            "id": "generic_latch",
            "instance": "77557476-817b-48e2-b7b3-2167dc28ac05"
        },
        {
            "id": "generic_handle",
            "instance": "b627e24c-2c7c-496f-ae92-3d35936f91cd"
        },
        {
            "id": "dynamic_line",
            "instance": "d5f45a5e-6064-439b-8c92-887a7464511f",
            "source": "6879a7c7-bc63-4ccf-b39a-16da0700abc7",
            "target": "3ce2a35e-fbf6-4d90-af6c-e159ea459814",
            "handles": [
                "a97a1bb1-f06a-4fd6-b444-d79fc5727ea1"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "6879a7c7-bc63-4ccf-b39a-16da0700abc7"
        },
        {
            "id": "generic_latch",
            "instance": "3ce2a35e-fbf6-4d90-af6c-e159ea459814"
        },
        {
            "id": "generic_handle",
            "instance": "a97a1bb1-f06a-4fd6-b444-d79fc5727ea1"
        },
        {
            "id": "dynamic_line",
            "instance": "1dfd8170-80b3-422c-9204-4d6b44cd05e3",
            "source": "01fb4ce7-f569-4903-a6be-a713a386d5e9",
            "target": "9638e9d5-ae3a-43bf-bfc4-41ac765c8016",
            "handles": [
                "82974ed2-ba6e-44a0-8074-dcd9d9c07acb"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "01fb4ce7-f569-4903-a6be-a713a386d5e9"
        },
        {
            "id": "generic_latch",
            "instance": "9638e9d5-ae3a-43bf-bfc4-41ac765c8016"
        },
        {
            "id": "generic_handle",
            "instance": "82974ed2-ba6e-44a0-8074-dcd9d9c07acb"
        },
        {
            "id": "dynamic_line",
            "instance": "9dd1611c-604a-4484-8432-3e450079712a",
            "source": "211ade04-e027-406a-8ce5-019735b0e393",
            "target": "7fdced2d-fca7-43a5-bca6-2bfe89339cad",
            "handles": [
                "18027cdc-03f4-40a2-8441-089fb763e682"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "211ade04-e027-406a-8ce5-019735b0e393"
        },
        {
            "id": "generic_latch",
            "instance": "7fdced2d-fca7-43a5-bca6-2bfe89339cad"
        },
        {
            "id": "generic_handle",
            "instance": "18027cdc-03f4-40a2-8441-089fb763e682"
        },
        {
            "id": "dynamic_line",
            "instance": "faf3f714-0a5f-4931-977c-494478b97294",
            "source": "5d2c69af-9341-4825-b5ca-6b404ac28626",
            "target": "5b1f116f-3977-49d5-abe9-ddaabddfa9ba",
            "handles": [
                "38923667-5a4d-4248-9ab5-c43529bf1bb1"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "5d2c69af-9341-4825-b5ca-6b404ac28626"
        },
        {
            "id": "generic_latch",
            "instance": "5b1f116f-3977-49d5-abe9-ddaabddfa9ba"
        },
        {
            "id": "generic_handle",
            "instance": "38923667-5a4d-4248-9ab5-c43529bf1bb1"
        },
        {
            "id": "dynamic_line",
            "instance": "dcbbe87c-7021-4858-a558-dffb4b847914",
            "source": "f0a3cb06-9bcd-4951-af3f-18076f08d720",
            "target": "cd1ba344-3ac7-4fe1-a97f-0860b455c774",
            "handles": [
                "6b43bae9-edba-41b1-baa3-2b9bfe34796d"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "f0a3cb06-9bcd-4951-af3f-18076f08d720"
        },
        {
            "id": "generic_latch",
            "instance": "cd1ba344-3ac7-4fe1-a97f-0860b455c774"
        },
        {
            "id": "generic_handle",
            "instance": "6b43bae9-edba-41b1-baa3-2b9bfe34796d"
        },
        {
            "id": "dynamic_line",
            "instance": "eb928e27-7eed-455f-8b0b-916a88a303e0",
            "source": "e5159617-9698-4262-8116-3aa62c0547e4",
            "target": "246b95bf-27f8-4570-bff4-31b0f1424fa2",
            "handles": [
                "cbcad38c-e1be-40b8-bd27-591b0e8b406f"
            ]
        },
        {
            "id": "generic_latch",
            "instance": "e5159617-9698-4262-8116-3aa62c0547e4"
        },
        {
            "id": "generic_latch",
            "instance": "246b95bf-27f8-4570-bff4-31b0f1424fa2"
        },
        {
            "id": "generic_handle",
            "instance": "cbcad38c-e1be-40b8-bd27-591b0e8b406f"
        },
        {
            "id": "action",
            "instance": "0e541791-394b-4162-be03-9f9278f7e1d5",
            "properties": [
                [
                    "name",
                    "Spearphishing Link"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0001"
                        ],
                        [
                            "technique",
                            "T1566.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "In our scenario, an email containing the spearphishing link was pre-positioned in the target user's inbox."
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "3d84b749-0272-405b-bd39-a75c367ff235",
                "30": "3c741df4-2c52-485d-ae71-4fbd152266c3",
                "60": "a4f36577-d96a-4f58-85bd-c705db45dbf5",
                "90": "698000f8-7d3d-455c-83af-caa736584fd3",
                "120": "c690d587-e165-437e-8cae-e0ce0be5f015",
                "150": "0caf21f0-4bf3-42bf-8059-8423a8a4921e",
                "180": "8f6b25c7-9d16-452e-a5fd-bcc2955b1f34",
                "210": "c9014785-a330-4e38-96d8-515ca4f9c484",
                "240": "970b0b9e-f47c-4911-a746-d3ee455cadf8",
                "270": "cb274bb3-b7ce-4f75-ba90-c3363253e4a2",
                "300": "ea9b4e86-0de0-46f0-a589-a9f3f345289a",
                "330": "8ca63ce5-3f54-4898-aa73-91c08803c3dd"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "3d84b749-0272-405b-bd39-a75c367ff235",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3c741df4-2c52-485d-ae71-4fbd152266c3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a4f36577-d96a-4f58-85bd-c705db45dbf5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "698000f8-7d3d-455c-83af-caa736584fd3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c690d587-e165-437e-8cae-e0ce0be5f015",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0caf21f0-4bf3-42bf-8059-8423a8a4921e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8f6b25c7-9d16-452e-a5fd-bcc2955b1f34",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c9014785-a330-4e38-96d8-515ca4f9c484",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "970b0b9e-f47c-4911-a746-d3ee455cadf8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cb274bb3-b7ce-4f75-ba90-c3363253e4a2",
            "latches": [
                "0f233bd8-2374-480f-a7db-db61df8fe4d3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ea9b4e86-0de0-46f0-a589-a9f3f345289a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8ca63ce5-3f54-4898-aa73-91c08803c3dd",
            "latches": []
        },
        {
            "id": "action",
            "instance": "8316a0b4-66de-499a-8a42-d9065d3c4ba7",
            "properties": [
                [
                    "name",
                    "Malicious File"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0002"
                        ],
                        [
                            "technique",
                            "T1204.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "User clicks on the downloaded executable"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "9103de00-0aba-4d86-ae58-3b754fe38e42",
                "30": "206a9ea4-2d09-4c09-a65f-9642e62468da",
                "60": "801bad32-cbf3-4963-bd75-ff557ac7913c",
                "90": "ff7eb4e8-efe3-4ff7-8855-d35cb4156ab4",
                "120": "4310954f-8451-4962-bc65-e9f626e3e6e1",
                "150": "a40c2a4a-e957-44b5-9598-2c8fbc186f50",
                "180": "8929ff36-4555-4ab2-81a6-395ed1e7fd79",
                "210": "205fdfb5-1cea-4d54-80fd-82cc003bfe52",
                "240": "351ac7e0-76c3-4831-8b6c-f6e1e2baba14",
                "270": "fa9cceb4-27e0-4f75-a032-2cdce63e7e60",
                "300": "747361bc-2983-4657-90ba-f30bde332209",
                "330": "850818ab-1f27-47fa-a31f-e4b590dfb8ca"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "9103de00-0aba-4d86-ae58-3b754fe38e42",
            "latches": [
                "e220ba73-afa6-46e6-8277-ac5ab99b717d"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "206a9ea4-2d09-4c09-a65f-9642e62468da",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "801bad32-cbf3-4963-bd75-ff557ac7913c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ff7eb4e8-efe3-4ff7-8855-d35cb4156ab4",
            "latches": [
                "a72a1b41-4d31-425b-929d-8fc65ac411d5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4310954f-8451-4962-bc65-e9f626e3e6e1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a40c2a4a-e957-44b5-9598-2c8fbc186f50",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8929ff36-4555-4ab2-81a6-395ed1e7fd79",
            "latches": [
                "7ec6215b-b47d-4875-8a42-fe8441212443"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "205fdfb5-1cea-4d54-80fd-82cc003bfe52",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "351ac7e0-76c3-4831-8b6c-f6e1e2baba14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fa9cceb4-27e0-4f75-a032-2cdce63e7e60",
            "latches": [
                "56f53c31-8da4-46f6-91b0-f7b1e67154f5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "747361bc-2983-4657-90ba-f30bde332209",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "850818ab-1f27-47fa-a31f-e4b590dfb8ca",
            "latches": []
        },
        {
            "id": "action",
            "instance": "cf2612ab-902d-4fd2-a7b5-8e7b244af462",
            "properties": [
                [
                    "name",
                    "Embedded Payloads"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1027.009"
                        ]
                    ]
                ],
                [
                    "description",
                    "An additional executable is embedded inside NTFVersion.exe via the Resource section"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "2b765bdc-22b1-48b3-a1c2-b78d77ce1e57",
                "30": "7fa9f6e4-13fe-4af3-ac6c-0bacf54a4582",
                "60": "5cd4a4b5-831b-4af9-9dc7-e018eb9380f3",
                "90": "5f90e9b6-87e3-44a9-b225-5d3d2230ad5f",
                "120": "6036a1c1-5bc3-49d8-a310-d34b6387b863",
                "150": "259736ec-9c11-43fc-8292-779cb4cc70ef",
                "180": "09e2405d-1fc9-47c8-9cb7-c28d0b9ccd7d",
                "210": "d3091cd7-7a48-4dc5-9d52-42a2d26f5940",
                "240": "8ceacef6-7ee8-435c-a900-ef899e592a5d",
                "270": "706c5d50-72c5-4019-afa5-8e7f3afedbae",
                "300": "7c6759c8-bd02-43ef-ba1a-f1d920bff194",
                "330": "a235aeb1-1f9e-4420-9923-a7b8689c0f6d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2b765bdc-22b1-48b3-a1c2-b78d77ce1e57",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7fa9f6e4-13fe-4af3-ac6c-0bacf54a4582",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5cd4a4b5-831b-4af9-9dc7-e018eb9380f3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5f90e9b6-87e3-44a9-b225-5d3d2230ad5f",
            "latches": [
                "cdf6d8f2-29b4-44ae-bef0-b2be3b412c38"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6036a1c1-5bc3-49d8-a310-d34b6387b863",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "259736ec-9c11-43fc-8292-779cb4cc70ef",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "09e2405d-1fc9-47c8-9cb7-c28d0b9ccd7d",
            "latches": [
                "fad77d31-4838-4bb3-9516-b0a1fb505fee"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "d3091cd7-7a48-4dc5-9d52-42a2d26f5940",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8ceacef6-7ee8-435c-a900-ef899e592a5d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "706c5d50-72c5-4019-afa5-8e7f3afedbae",
            "latches": [
                "4e590e32-0812-47c2-8565-f660f6d17869",
                "a336a191-13bf-4cf0-bd0a-a6511ca0141b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "7c6759c8-bd02-43ef-ba1a-f1d920bff194",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a235aeb1-1f9e-4420-9923-a7b8689c0f6d",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "5162318e-a7a9-4698-ab0a-48c88a29d8fc",
            "properties": [
                [
                    "description",
                    "User clicks on the spearphishing link and a fake update executable is downloaded"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "6ee79524-6cc1-47f1-b2ba-75e799d4715c",
                "30": "ecdc8007-9ad9-46b2-981d-b975465628f4",
                "60": "d4f49666-3ff1-41fe-b84a-57def04c65dc",
                "90": "aa4b54d8-a0d6-43cf-afc8-da45fbb11546",
                "120": "58c4a714-1fb2-4e50-82cf-3b1a676b3dac",
                "150": "813315b9-9210-43ef-948f-043ea756e327",
                "180": "f197fbca-c17e-4b91-ad53-e14cb26ad51b",
                "210": "4a60ce77-e39c-47bd-9332-ee43672fc6f5",
                "330": "cd747a11-d810-4c3f-b4fb-34b2e7b39c8c",
                "branch:True": "f0c9ae08-5610-4470-a5a5-07ba901998f1",
                "branch:False": "54f9ddd6-a718-44c5-96dc-b262ebaf51db"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6ee79524-6cc1-47f1-b2ba-75e799d4715c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ecdc8007-9ad9-46b2-981d-b975465628f4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d4f49666-3ff1-41fe-b84a-57def04c65dc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "aa4b54d8-a0d6-43cf-afc8-da45fbb11546",
            "latches": [
                "5657020c-8378-4e37-83ed-eeeb44224bc9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "58c4a714-1fb2-4e50-82cf-3b1a676b3dac",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "813315b9-9210-43ef-948f-043ea756e327",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f197fbca-c17e-4b91-ad53-e14cb26ad51b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4a60ce77-e39c-47bd-9332-ee43672fc6f5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cd747a11-d810-4c3f-b4fb-34b2e7b39c8c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f0c9ae08-5610-4470-a5a5-07ba901998f1",
            "latches": [
                "ebcf4fad-d8ef-4465-9d77-d74c2e101885"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "54f9ddd6-a718-44c5-96dc-b262ebaf51db",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "8f81b5c7-c419-4703-a4e4-e51a6ba22b97",
            "properties": [
                [
                    "name",
                    "NTFVersion.exe"
                ],
                [
                    "description",
                    "EPIC dropper - Fake updater file that drops an embedded binary and modifies the registry for persistence"
                ],
                [
                    "malware_types",
                    [
                        [
                            "a4d970699e109c3a5c3a6611dbd7b65b",
                            "dropper"
                        ],
                        [
                            "54b30cee303d092c79b97978919914a2",
                            "trojan"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "df96fe1805632bf50174d6f1fb02cda9",
                            "installs-other-components"
                        ],
                        [
                            "5d6376a98201e8842d5619c4306b5256",
                            "modifies-registry"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "71b540c4-8022-4e4c-90a3-4ec6a7dafa33",
                "30": "3fcd3d79-d7a3-4559-9f73-1ec5ccf3fdf2",
                "60": "cb2981ea-e796-4315-8432-eb64f88c47a6",
                "90": "2b7724f2-6b82-4a9a-8242-6a2aa50fbe15",
                "120": "18ce5072-f3ab-482e-b086-1f8cfba40f13",
                "150": "c69bab9b-d5c0-4b4a-8bd0-77e7883904e8",
                "180": "8b1df43b-7166-45a6-8ddf-d849d75fad4b",
                "210": "f073bc01-abb3-4cff-af6f-d840a6e4f852",
                "240": "1807fc56-27af-4cd6-8429-d678369664f7",
                "270": "b24b5911-8e17-4132-98cd-2aea611f39e5",
                "300": "a4e77796-1d52-405a-bcd9-45940d8187dc",
                "330": "dadd8b14-ac16-4dac-884d-8cb4685f7444"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "71b540c4-8022-4e4c-90a3-4ec6a7dafa33",
            "latches": [
                "6bdf9433-4368-47de-98c0-618f4824b95c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fcd3d79-d7a3-4559-9f73-1ec5ccf3fdf2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cb2981ea-e796-4315-8432-eb64f88c47a6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2b7724f2-6b82-4a9a-8242-6a2aa50fbe15",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "18ce5072-f3ab-482e-b086-1f8cfba40f13",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c69bab9b-d5c0-4b4a-8bd0-77e7883904e8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8b1df43b-7166-45a6-8ddf-d849d75fad4b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f073bc01-abb3-4cff-af6f-d840a6e4f852",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1807fc56-27af-4cd6-8429-d678369664f7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b24b5911-8e17-4132-98cd-2aea611f39e5",
            "latches": [
                "18af9c38-8e70-45e7-9dc1-789112f8d1cd"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a4e77796-1d52-405a-bcd9-45940d8187dc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "dadd8b14-ac16-4dac-884d-8cb4685f7444",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "48d3c8fb-6780-4a10-a3e6-fcd1cc1c1b32",
            "properties": [
                [
                    "name",
                    "mxs_installer.exe"
                ],
                [
                    "description",
                    "EPIC Injector - embedded inside in the Resources section of the EPIC dropper; It loads Guard DLL (embedded in its Resource section) and injects it into svchost.exe or explorer.exe depending on privilege level"
                ],
                [
                    "malware_types",
                    [
                        [
                            "4563e24398b6c9d14206371585c71129",
                            "injector"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "4a786e750f7671f903353e43b30dc601",
                            "injects-into-other-processes"
                        ],
                        [
                            "9ec729e8dc44450bc4fc9610fd228999",
                            "persists-after-system-reboot"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "79ce8719-18f1-4d94-992e-e35f637b4d0c",
                "30": "71025b2c-476d-40f3-84b5-8034a9a10cfa",
                "60": "5382dee9-c1bc-4261-ae89-625ea707e441",
                "90": "d75ac749-c072-4c3a-bc8f-a7736f40a530",
                "120": "b0b8accd-636f-4584-89f0-73a38704befd",
                "150": "9fbfd821-fd68-4108-9996-d7d56a7bf31f",
                "180": "afc38a01-4620-4e45-a705-b7ab17e1bc84",
                "210": "2ddda5f9-27e4-4fe8-a924-549109e676c6",
                "240": "86838ce9-8af0-47ae-b21d-a341dbbd41e4",
                "270": "433682e0-2a69-44cd-8324-c7f8a97c1797",
                "300": "7c0ffb14-db4b-40c7-9932-23e8bd65032e",
                "330": "a4e83017-ce20-41d5-b8d9-a8137cdb51c3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "79ce8719-18f1-4d94-992e-e35f637b4d0c",
            "latches": [
                "c94f3906-4b8d-46c2-be69-244db1764399"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "71025b2c-476d-40f3-84b5-8034a9a10cfa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5382dee9-c1bc-4261-ae89-625ea707e441",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d75ac749-c072-4c3a-bc8f-a7736f40a530",
            "latches": [
                "84280d79-2dfe-4bdc-b5e8-6ea4caee39f9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b0b8accd-636f-4584-89f0-73a38704befd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9fbfd821-fd68-4108-9996-d7d56a7bf31f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "afc38a01-4620-4e45-a705-b7ab17e1bc84",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2ddda5f9-27e4-4fe8-a924-549109e676c6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "86838ce9-8af0-47ae-b21d-a341dbbd41e4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "433682e0-2a69-44cd-8324-c7f8a97c1797",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7c0ffb14-db4b-40c7-9932-23e8bd65032e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a4e83017-ce20-41d5-b8d9-a8137cdb51c3",
            "latches": []
        },
        {
            "id": "action",
            "instance": "bf51d484-632c-4317-b8ab-021acafe0b05",
            "properties": [
                [
                    "name",
                    "Process Injection"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1055"
                        ]
                    ]
                ],
                [
                    "description",
                    "NTFVersion.exe writes the EPIC Injector to the user's path (indicated by the %TEMP% environment variable) as mxs_installer.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ea652be5-1b61-4892-ad9c-cbd931b87ce7",
                "30": "00480b63-96ff-4f9f-bd50-2da55225790a",
                "60": "c0cd531c-183e-4b83-a4ca-c6ddc473154b",
                "90": "848f3cc3-8ee7-4c3a-b5b6-ad77799261c0",
                "120": "380cb9c7-7d95-41e4-8aac-b4b080c4167c",
                "150": "6afce1be-a56b-4ebe-b9ca-be3fe7fed1b5",
                "180": "eb8f00e2-0c0e-4bc9-b854-71b2e6e8903e",
                "210": "c3408d89-db62-4e6a-89de-3cbbc607a91c",
                "240": "1686e3ab-6cff-45b5-9316-cce1d0564290",
                "270": "2373ead7-fc1e-4892-bad3-4874b02376f1",
                "300": "1b85b747-cf60-4697-baa4-ad909c617288",
                "330": "fcd2322b-dc32-46f4-a676-f914ce1557ad"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ea652be5-1b61-4892-ad9c-cbd931b87ce7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "00480b63-96ff-4f9f-bd50-2da55225790a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c0cd531c-183e-4b83-a4ca-c6ddc473154b",
            "latches": [
                "e812c5c9-eaf7-4339-adb5-2b52bfe2a9a5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "848f3cc3-8ee7-4c3a-b5b6-ad77799261c0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "380cb9c7-7d95-41e4-8aac-b4b080c4167c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6afce1be-a56b-4ebe-b9ca-be3fe7fed1b5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb8f00e2-0c0e-4bc9-b854-71b2e6e8903e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c3408d89-db62-4e6a-89de-3cbbc607a91c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1686e3ab-6cff-45b5-9316-cce1d0564290",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2373ead7-fc1e-4892-bad3-4874b02376f1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1b85b747-cf60-4697-baa4-ad909c617288",
            "latches": [
                "ac02ce69-9a62-430f-81f2-bf181667c5bb"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "fcd2322b-dc32-46f4-a676-f914ce1557ad",
            "latches": []
        },
        {
            "id": "action",
            "instance": "077ec5e3-8e89-4ac3-8a01-d0d057a4d24d",
            "properties": [
                [
                    "name",
                    "Winlogon Helper DLL"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1547.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "NTFVersion.exe modifies the registry key HKCU\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon to add a Shell key value for persistence"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "efea41f1-4c88-46f3-b007-e6a7938eb003",
                "30": "46b24f11-b9e5-4abe-8c9c-6286a959aaa9",
                "60": "db13544a-f96c-426d-8e6f-71cb30112da5",
                "90": "06134061-863e-49fd-b149-15d8d28b2cba",
                "120": "0320e2c8-dc88-439b-a397-7fef20544958",
                "150": "a2c24452-ea02-4f4b-993e-9d9fe01b28a9",
                "180": "f58ad336-e59e-4040-834e-fca8b3946dbc",
                "210": "09fd1461-80a7-41c8-8665-e82264f80158",
                "240": "296b3f8e-bd6e-479e-8692-e94dfead7da5",
                "270": "f0e0c43b-bf51-4cc2-854a-ca00edeb597e",
                "300": "04ae14d7-8e23-4b3e-afcd-ed37ac36e266",
                "330": "72735e7f-45b4-4579-8ac0-d011ee1499a8"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "efea41f1-4c88-46f3-b007-e6a7938eb003",
            "latches": [
                "d6aa5093-4253-41b5-bb89-1de41f033072"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "46b24f11-b9e5-4abe-8c9c-6286a959aaa9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "db13544a-f96c-426d-8e6f-71cb30112da5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "06134061-863e-49fd-b149-15d8d28b2cba",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0320e2c8-dc88-439b-a397-7fef20544958",
            "latches": [
                "9dfc7a20-144c-498b-badc-3ffc5464e138"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a2c24452-ea02-4f4b-993e-9d9fe01b28a9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f58ad336-e59e-4040-834e-fca8b3946dbc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "09fd1461-80a7-41c8-8665-e82264f80158",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "296b3f8e-bd6e-479e-8692-e94dfead7da5",
            "latches": [
                "c31ccd49-2b7b-4559-8798-90ffb6a3f5db"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f0e0c43b-bf51-4cc2-854a-ca00edeb597e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "04ae14d7-8e23-4b3e-afcd-ed37ac36e266",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "72735e7f-45b4-4579-8ac0-d011ee1499a8",
            "latches": []
        },
        {
            "id": "action",
            "instance": "a5584fbf-3d2c-4d39-8543-dbef40f285d3",
            "properties": [
                [
                    "name",
                    "Obfuscated Files or Information"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1027"
                        ]
                    ]
                ],
                [
                    "description",
                    "EPIC's guard DLL is embedded inside the resource section of mxs_installer.exe "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "3ea712af-9161-4a54-92dd-adae94255cb5",
                "30": "2e18fac9-b1d1-421e-b914-50ec81cabb39",
                "60": "7518fe36-3567-401a-abae-b5688eb060dd",
                "90": "e2569ce5-a32b-4c0d-8364-b82d0ba58f4a",
                "120": "c0b3c410-f5de-4a6d-8c73-0b7adaadbae5",
                "150": "eb9f996e-37e3-4dee-ae17-54c08af0bfcf",
                "180": "ca5d9d93-5ad0-4700-8263-9214a82861e9",
                "210": "95ce9fb8-bfa9-4c3e-8bb8-2d2bd6076116",
                "240": "f1fe6f19-619c-486a-bdbd-100b4bb5acf9",
                "270": "671625a0-69c1-4135-b574-9d9c0d1bbeb6",
                "300": "a1c23f71-e4aa-444b-abca-21ffce83991e",
                "330": "e2adc212-3b90-45c1-b1c2-50749e228925"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "3ea712af-9161-4a54-92dd-adae94255cb5",
            "latches": [
                "ee6755d5-18e6-4284-a732-37733fc15d8c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "2e18fac9-b1d1-421e-b914-50ec81cabb39",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7518fe36-3567-401a-abae-b5688eb060dd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e2569ce5-a32b-4c0d-8364-b82d0ba58f4a",
            "latches": [
                "a9f2f079-b5c2-418c-9a01-336c7796e75a"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c0b3c410-f5de-4a6d-8c73-0b7adaadbae5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb9f996e-37e3-4dee-ae17-54c08af0bfcf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ca5d9d93-5ad0-4700-8263-9214a82861e9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "95ce9fb8-bfa9-4c3e-8bb8-2d2bd6076116",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f1fe6f19-619c-486a-bdbd-100b4bb5acf9",
            "latches": [
                "05e6ea31-4d93-4f74-b0cc-5289017fcec2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "671625a0-69c1-4135-b574-9d9c0d1bbeb6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a1c23f71-e4aa-444b-abca-21ffce83991e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e2adc212-3b90-45c1-b1c2-50749e228925",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "77373e64-f955-49d3-842d-28e0dfd6d087",
            "properties": [
                [
                    "description",
                    "User logs off and back in to the system, executing the persistence mechanism"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "1db5a9d4-5a22-46d2-8afb-12644b80ad04",
                "30": "bec88d08-ef51-45a1-a1ee-fbef18afb63d",
                "60": "bf4739d3-ad10-48f1-bcfd-cbb393272683",
                "90": "10b1e689-381c-461d-948d-1484afc63c14",
                "120": "1eae4c5f-4efb-419d-a9e0-be05f5bb0844",
                "150": "cec68dec-6746-498a-b21c-1122ab42b86c",
                "180": "6585785b-bfb9-46e3-b34d-e778749da61b",
                "210": "dce48d87-4695-46ea-87ba-61780ca6544f",
                "330": "d33a0233-9341-440e-b5e4-b40793a7e78e",
                "branch:True": "e1e6895d-c7e8-4847-90d8-42030fc1a7eb",
                "branch:False": "b7ac36de-c92e-449e-be77-2c65d81c2917"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1db5a9d4-5a22-46d2-8afb-12644b80ad04",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bec88d08-ef51-45a1-a1ee-fbef18afb63d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bf4739d3-ad10-48f1-bcfd-cbb393272683",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "10b1e689-381c-461d-948d-1484afc63c14",
            "latches": [
                "0ff9b1c7-01e2-44cf-ac63-2515a35e56f4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "1eae4c5f-4efb-419d-a9e0-be05f5bb0844",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cec68dec-6746-498a-b21c-1122ab42b86c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6585785b-bfb9-46e3-b34d-e778749da61b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "dce48d87-4695-46ea-87ba-61780ca6544f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d33a0233-9341-440e-b5e4-b40793a7e78e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e1e6895d-c7e8-4847-90d8-42030fc1a7eb",
            "latches": [
                "8ee69551-bddb-4741-9272-d96c2ce1299c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b7ac36de-c92e-449e-be77-2c65d81c2917",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ce56fffa-e517-4459-b7b8-6ff58a77a6ad",
            "properties": [
                [
                    "name",
                    "Dynamic-link Library Injection"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1055.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "mxs_installer.exe injects EPIC's Guard DLL into explorer.exe via CreateRemoteThread API"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "80959d5e-fc02-4b03-b4ab-4ee94f0411b0",
                "30": "9a7b98d5-63f8-4a95-9e3a-1909faccf060",
                "60": "29013052-4af4-4b3f-8bc4-317edded020b",
                "90": "bdb731ea-5191-40f9-a4a0-185a3d9e6ddd",
                "120": "88610cae-8a06-474e-ac66-93eac382af56",
                "150": "a5ecdd42-c05d-413c-8868-fb67f54eb0f7",
                "180": "16849013-3d97-470d-a782-c2dc6392addb",
                "210": "62c7d7a0-58cb-400c-bd57-87e65c310a27",
                "240": "e18837de-5dd4-484f-8a28-766f2e48d0fd",
                "270": "11c74eb4-65dc-4e7d-8607-9e6e0159e18b",
                "300": "86985236-0c84-4441-bbc4-78a54740e3f8",
                "330": "e7d32ebc-e1f1-4ebb-bf02-113ae8325ac7"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "80959d5e-fc02-4b03-b4ab-4ee94f0411b0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9a7b98d5-63f8-4a95-9e3a-1909faccf060",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "29013052-4af4-4b3f-8bc4-317edded020b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bdb731ea-5191-40f9-a4a0-185a3d9e6ddd",
            "latches": [
                "29bd7096-a9bf-42a0-9b3a-c31884cdd904"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "88610cae-8a06-474e-ac66-93eac382af56",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a5ecdd42-c05d-413c-8868-fb67f54eb0f7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "16849013-3d97-470d-a782-c2dc6392addb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "62c7d7a0-58cb-400c-bd57-87e65c310a27",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e18837de-5dd4-484f-8a28-766f2e48d0fd",
            "latches": [
                "6879a7c7-bc63-4ccf-b39a-16da0700abc7"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "11c74eb4-65dc-4e7d-8607-9e6e0159e18b",
            "latches": [
                "4a891399-126a-4212-95b6-fb4da15aa179"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "86985236-0c84-4441-bbc4-78a54740e3f8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e7d32ebc-e1f1-4ebb-bf02-113ae8325ac7",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "893ab53f-f8d5-417a-868e-4532bdb94b06",
            "properties": [
                [
                    "name",
                    "EPIC Guard"
                ],
                [
                    "description",
                    "2nd stage malware; Guard DLL for the EPIC implant; embedded into the Resource section of the EPIC Injector. At the user level, it searches for an internet-enabled process. Then, it loads an embedded 3rd stage payload from its Resources section and injects it into the process"
                ],
                [
                    "malware_types",
                    [
                        [
                            "ae2476fa09585cda63e4a535f4aec485",
                            "injector"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "6d9fcaefe0fd90bdc3e880bafcc485ed",
                            "injects-into-other-processes"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "52d2d653-f9db-4473-bc37-0d44954d9767",
                "30": "b7163eb0-4458-4fb5-876b-09b9ed421e1c",
                "60": "3316fc8b-5ab6-47f4-b233-1bf3c236d2bb",
                "90": "12b84509-3080-41ee-bc7c-072e45a623a0",
                "120": "23644fe5-9836-4c3e-b00b-219cf969a9b7",
                "150": "15390ac0-b06e-41e1-bfd3-67a76a9c7cf5",
                "180": "a9fc1226-d19b-4f76-85ad-c4d70d912844",
                "210": "ec76bcd2-203e-4dfd-a69c-51ebf5f5fdea",
                "240": "ffeb1813-be70-4475-b687-317e4e3dc601",
                "270": "9a546944-1b91-4160-8318-2b3287ae9756",
                "300": "0a0fb5fb-8683-453d-b5b1-fb2619e55cf5",
                "330": "245c7c2a-1b22-446c-8c15-20e849fd8c01"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "52d2d653-f9db-4473-bc37-0d44954d9767",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b7163eb0-4458-4fb5-876b-09b9ed421e1c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3316fc8b-5ab6-47f4-b233-1bf3c236d2bb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "12b84509-3080-41ee-bc7c-072e45a623a0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "23644fe5-9836-4c3e-b00b-219cf969a9b7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "15390ac0-b06e-41e1-bfd3-67a76a9c7cf5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a9fc1226-d19b-4f76-85ad-c4d70d912844",
            "latches": [
                "619851a6-3726-464d-9f50-a7b6baead4c4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec76bcd2-203e-4dfd-a69c-51ebf5f5fdea",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ffeb1813-be70-4475-b687-317e4e3dc601",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9a546944-1b91-4160-8318-2b3287ae9756",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0a0fb5fb-8683-453d-b5b1-fb2619e55cf5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "245c7c2a-1b22-446c-8c15-20e849fd8c01",
            "latches": []
        },
        {
            "id": "action",
            "instance": "582da220-1362-4c1b-ac1e-8edac4e3a7ca",
            "properties": [
                [
                    "name",
                    "Process Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1057"
                        ]
                    ]
                ],
                [
                    "description",
                    "explorer.exe enumerates processes looking for internet-enabled processes via CreateToolhelp32Snapshot API"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "1caf1ddc-0b24-4851-b55d-88d211fb87c6",
                "30": "50938f21-0966-4e31-887c-dedad965d131",
                "60": "5fac7c93-fc78-4f76-8412-6c3b111c741d",
                "90": "fee6e592-8ff0-44ac-81b5-54e930368043",
                "120": "b2e24668-cde1-485e-b5ff-3df6d1395726",
                "150": "83126b0e-7c76-4523-9f66-ebf8e241a5df",
                "180": "aaa145ee-28c6-4c3a-9fc3-39fe11e60073",
                "210": "764f94b7-b4af-4615-8833-7dbf1042b546",
                "240": "a79d415a-e5f9-44e6-aea6-9e7f45c7e9e0",
                "270": "438981e7-91ec-4cf7-ae7f-9d9b308e4c1f",
                "300": "c85517a9-abe3-4b18-bd40-547ef4ba9507",
                "330": "0439d082-305a-4c17-b176-964c2823b96c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1caf1ddc-0b24-4851-b55d-88d211fb87c6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "50938f21-0966-4e31-887c-dedad965d131",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5fac7c93-fc78-4f76-8412-6c3b111c741d",
            "latches": [
                "3ce2a35e-fbf6-4d90-af6c-e159ea459814"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "fee6e592-8ff0-44ac-81b5-54e930368043",
            "latches": [
                "77557476-817b-48e2-b7b3-2167dc28ac05"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b2e24668-cde1-485e-b5ff-3df6d1395726",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "83126b0e-7c76-4523-9f66-ebf8e241a5df",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "aaa145ee-28c6-4c3a-9fc3-39fe11e60073",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "764f94b7-b4af-4615-8833-7dbf1042b546",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a79d415a-e5f9-44e6-aea6-9e7f45c7e9e0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "438981e7-91ec-4cf7-ae7f-9d9b308e4c1f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c85517a9-abe3-4b18-bd40-547ef4ba9507",
            "latches": [
                "0994f6fa-02fa-4c99-8427-5ad4f50ce3ac"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "0439d082-305a-4c17-b176-964c2823b96c",
            "latches": []
        },
        {
            "id": "action",
            "instance": "87584b53-b48f-44dd-8d01-e317a9e62c87",
            "properties": [
                [
                    "name",
                    "Embedded Payloads"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1027.009"
                        ]
                    ]
                ],
                [
                    "description",
                    "the EPIC worker DLL (the EPIC payload) is embedded in the resource section of the explorer.exe's Guard DLL"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "370c2ba7-40f0-492f-84be-49d999ead083",
                "30": "7881ca38-32dc-466a-8e03-190827df088b",
                "60": "179f145f-8aa3-45d1-94d6-8da06c01e48f",
                "90": "fce385c9-4375-49a6-9fdb-517b04616cbe",
                "120": "d3719fb6-a62b-4349-9c75-44ee654abf61",
                "150": "5fe258e3-d7b3-481a-9731-4ec88eba73df",
                "180": "1160d153-1232-4a12-a752-4147e5bf8168",
                "210": "e321c359-8c09-4cc2-9027-2dc6e1a285a0",
                "240": "f4691c09-5852-4c15-990c-3dc903cfc310",
                "270": "873a0dac-403a-4272-8160-6351d8dfc9d8",
                "300": "3a46cff7-769e-41fe-b877-990850d21905",
                "330": "4dc652cf-faba-4f66-9621-3fd4e315debc"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "370c2ba7-40f0-492f-84be-49d999ead083",
            "latches": [
                "c7b4e0c4-5140-45df-b19b-3dfa27bc024a"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7881ca38-32dc-466a-8e03-190827df088b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "179f145f-8aa3-45d1-94d6-8da06c01e48f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fce385c9-4375-49a6-9fdb-517b04616cbe",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d3719fb6-a62b-4349-9c75-44ee654abf61",
            "latches": [
                "2c095f2d-529f-48f0-8620-2abf5dbd1dcb"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "5fe258e3-d7b3-481a-9731-4ec88eba73df",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1160d153-1232-4a12-a752-4147e5bf8168",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e321c359-8c09-4cc2-9027-2dc6e1a285a0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f4691c09-5852-4c15-990c-3dc903cfc310",
            "latches": [
                "b2235121-e7fd-4c57-a6b1-c0ef28cd4e20"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "873a0dac-403a-4272-8160-6351d8dfc9d8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3a46cff7-769e-41fe-b877-990850d21905",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4dc652cf-faba-4f66-9621-3fd4e315debc",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "899b222b-c41c-4463-85b5-a337d7476660",
            "properties": [
                [
                    "name",
                    "EPIC worker DLL"
                ],
                [
                    "description",
                    "3rd stage malware; EPIC payload; It performs various discovery commands, stores the command outputs, obfuscates this information, and sends it to the C2 server via HTTP POST requests."
                ],
                [
                    "malware_types",
                    [
                        [
                            "57f7027b358d3ea30806d711760a9ceb",
                            "backdoor"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "5fcf77f934ea02b96f08899c038d0260",
                            "communicates-with-c2"
                        ],
                        [
                            "8f7fc18b7bde334e73480fcfa40f0d03",
                            "exfiltrates-data"
                        ],
                        [
                            "8aaf62b1690c7873d2d046c926cc5191",
                            "fingerprints-host"
                        ],
                        [
                            "45acd05543e5fae53b7f171d97176de1",
                            "determines-c2-server"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "21852770-00e8-46e0-927a-5c7e7bec4e52",
                "30": "32837293-25b3-4174-ba80-3910dddca131",
                "60": "9adc41cd-8529-435b-a9c2-f6b4b81f37e7",
                "90": "0a95284a-d593-4e7c-ab27-26ca197f6eb3",
                "120": "5aa15877-c79b-454a-a9fc-8b3d46d2e13b",
                "150": "7cdcb653-24d7-40c3-ad77-1c90bb876e99",
                "180": "b19b248c-953e-4aee-976d-9245d1f627cf",
                "210": "102ac6e1-8d57-4b14-8865-1f2d816b40a9",
                "240": "e167a6a5-2ff6-46ee-b73e-34022494a98f",
                "270": "bfa4aef3-5330-429e-92e8-17e0d2453a90",
                "300": "ba030da2-a6bc-45e2-bb92-5432e2b2adb0",
                "330": "184180f1-a564-4fbe-892a-65ff560913f3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "21852770-00e8-46e0-927a-5c7e7bec4e52",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "32837293-25b3-4174-ba80-3910dddca131",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9adc41cd-8529-435b-a9c2-f6b4b81f37e7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0a95284a-d593-4e7c-ab27-26ca197f6eb3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5aa15877-c79b-454a-a9fc-8b3d46d2e13b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7cdcb653-24d7-40c3-ad77-1c90bb876e99",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b19b248c-953e-4aee-976d-9245d1f627cf",
            "latches": [
                "8a707901-190a-42e2-81f5-0c57e7310b1e"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "102ac6e1-8d57-4b14-8865-1f2d816b40a9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e167a6a5-2ff6-46ee-b73e-34022494a98f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bfa4aef3-5330-429e-92e8-17e0d2453a90",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ba030da2-a6bc-45e2-bb92-5432e2b2adb0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "184180f1-a564-4fbe-892a-65ff560913f3",
            "latches": []
        },
        {
            "id": "action",
            "instance": "0d577233-2b2e-4e32-8e78-cf20e4d129d3",
            "properties": [
                [
                    "name",
                    "Dynamic-link Library Injection"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1055.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "explorer.exe injects EPIC's worker DLL into msedge.exe via CreateRemoteThread API"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "c6b59193-d596-4372-a062-cb5c8b014726",
                "30": "2e853839-cfdd-4f6e-88f9-2b76e9139665",
                "60": "bd4e1a6a-e2cd-4a34-8669-9560d721d9d6",
                "90": "6cf372b0-2b95-44b4-9cf8-cb7030a11730",
                "120": "f61b7944-9f7f-4ab4-8bbd-0d30b41f78a7",
                "150": "33fc3b46-bf57-4db7-a40c-4bbd6c066fb2",
                "180": "753e6574-0020-40a9-80aa-eb963808f420",
                "210": "bbe56a5c-7c44-4ac3-9fee-225c09f900be",
                "240": "120a9939-cd21-4689-bb3e-214db90b4467",
                "270": "1036324c-e68d-4f02-9e35-8460a9e3d8a6",
                "300": "fce89e5b-059c-48b2-9966-35db2938385d",
                "330": "696dcd87-cb69-467d-b83a-e351ed7fedae"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c6b59193-d596-4372-a062-cb5c8b014726",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2e853839-cfdd-4f6e-88f9-2b76e9139665",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bd4e1a6a-e2cd-4a34-8669-9560d721d9d6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6cf372b0-2b95-44b4-9cf8-cb7030a11730",
            "latches": [
                "9f63eae1-de5b-47b8-887b-7b0120092ccb"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f61b7944-9f7f-4ab4-8bbd-0d30b41f78a7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "33fc3b46-bf57-4db7-a40c-4bbd6c066fb2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "753e6574-0020-40a9-80aa-eb963808f420",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bbe56a5c-7c44-4ac3-9fee-225c09f900be",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "120a9939-cd21-4689-bb3e-214db90b4467",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1036324c-e68d-4f02-9e35-8460a9e3d8a6",
            "latches": [
                "438bc93a-235a-4c37-8dad-73538a4c18b5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "fce89e5b-059c-48b2-9966-35db2938385d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "696dcd87-cb69-467d-b83a-e351ed7fedae",
            "latches": []
        },
        {
            "id": "action",
            "instance": "c357365c-fe30-49dd-8da6-de60ccb7724e",
            "properties": [
                [
                    "name",
                    "Local Account"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1087.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe enumerates all users on the local machine via NetUserEnum API"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "2d850142-989c-42d5-b34e-035eaa917e59",
                "30": "1ea06a7e-1c65-4501-98ae-65e2e383b8a7",
                "60": "6d93108f-e0d9-4dbb-ba9b-60fac4068824",
                "90": "ca951fa5-4a60-416e-80fa-9cca3a9ee7cd",
                "120": "f6b4fcff-83f0-41ee-ae9c-79837ead0c03",
                "150": "6a9ff080-19dc-4fb9-a78d-0e8eaa94cb8c",
                "180": "cb51538b-0693-4389-a2eb-47cc0ea03987",
                "210": "5d800987-3955-42c6-b414-bbe7d83fb60a",
                "240": "c132811a-719f-4a84-b978-072d67b39cb2",
                "270": "ca9009d0-db20-45ce-999d-0f0dc9e10aa7",
                "300": "cc1393dd-f7e5-4107-92e6-4afba7ed9797",
                "330": "5cfa153b-c9e4-4b4a-84d1-84b6e183992b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2d850142-989c-42d5-b34e-035eaa917e59",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1ea06a7e-1c65-4501-98ae-65e2e383b8a7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6d93108f-e0d9-4dbb-ba9b-60fac4068824",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ca951fa5-4a60-416e-80fa-9cca3a9ee7cd",
            "latches": [
                "84b694ce-d3ff-4020-b943-df1d20293fc9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f6b4fcff-83f0-41ee-ae9c-79837ead0c03",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6a9ff080-19dc-4fb9-a78d-0e8eaa94cb8c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cb51538b-0693-4389-a2eb-47cc0ea03987",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5d800987-3955-42c6-b414-bbe7d83fb60a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c132811a-719f-4a84-b978-072d67b39cb2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ca9009d0-db20-45ce-999d-0f0dc9e10aa7",
            "latches": [
                "1dcd1f57-f0b7-4246-a990-c161e376160e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cc1393dd-f7e5-4107-92e6-4afba7ed9797",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5cfa153b-c9e4-4b4a-84d1-84b6e183992b",
            "latches": []
        },
        {
            "id": "action",
            "instance": "40e9b8d4-100b-4aa3-9123-82392dba9232",
            "properties": [
                [
                    "name",
                    "File and Directory Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1083"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe enumerates users' files via FindFirstFile and FindNextFile APIs"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ee7e4d90-c818-45e5-b884-b34f560d9b28",
                "30": "ad4f4252-45e6-48bc-8127-197886e5d99c",
                "60": "f0ad6f69-a611-4f7d-8e8f-b28a348bf3d5",
                "90": "526f8375-9f2e-4fa1-a64f-477392f4fc47",
                "120": "d71d6513-354b-408d-b243-3c26b0f1f111",
                "150": "be51aba1-45ca-474e-9468-1bb198d0a0d8",
                "180": "3387869c-c82f-4928-b12f-042d9ff32b41",
                "210": "e57652ff-4510-4667-a74c-0a3b9fa582f7",
                "240": "29ae2d13-54b5-4fd0-a66e-d4d4a4abd774",
                "270": "b9cdd437-0331-43a3-8027-4fb5e3949310",
                "300": "70e1093b-1472-4d07-af0a-524a0d814f12",
                "330": "ad6c9bc3-fa6d-4bcc-914d-574c41a6846b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ee7e4d90-c818-45e5-b884-b34f560d9b28",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ad4f4252-45e6-48bc-8127-197886e5d99c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f0ad6f69-a611-4f7d-8e8f-b28a348bf3d5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "526f8375-9f2e-4fa1-a64f-477392f4fc47",
            "latches": [
                "6f1676b7-d26d-40b6-9ec7-286ceb12f866"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "d71d6513-354b-408d-b243-3c26b0f1f111",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "be51aba1-45ca-474e-9468-1bb198d0a0d8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3387869c-c82f-4928-b12f-042d9ff32b41",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e57652ff-4510-4667-a74c-0a3b9fa582f7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "29ae2d13-54b5-4fd0-a66e-d4d4a4abd774",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b9cdd437-0331-43a3-8027-4fb5e3949310",
            "latches": [
                "068cb330-b895-4919-8773-78a7cf5c7002"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "70e1093b-1472-4d07-af0a-524a0d814f12",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ad6c9bc3-fa6d-4bcc-914d-574c41a6846b",
            "latches": []
        },
        {
            "id": "action",
            "instance": "405ecdfd-6a8e-46cd-b514-2293b790636f",
            "properties": [
                [
                    "name",
                    "Archive via Library"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0009"
                        ],
                        [
                            "technique",
                            "T1560.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe bzip2 compresses the output of its discovery commands in memory"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "9de321bb-f6f0-4314-9883-4013c1d4bf35",
                "30": "9166a5b0-bb88-46b4-a1ab-a99abb58f9c9",
                "60": "e0edfae0-27d6-42ce-88d5-b6ddd3594c63",
                "90": "a20a1385-8395-4eed-a11a-a3e51cf4e00e",
                "120": "16cb4df9-9251-4453-92cb-9b4a1762161e",
                "150": "171652ed-50af-4e32-86cc-edb8095d37bb",
                "180": "478d216f-8da3-40bb-9414-9abb201e1f18",
                "210": "2f76b316-caca-4623-b242-9511dc951d20",
                "240": "d4d77a14-0119-46e7-abe3-9a1171a7e043",
                "270": "b8429372-2bdb-40be-95cd-14a960e801c3",
                "300": "80fecf24-298c-450b-91ee-4bb0666e849e",
                "330": "7bc5f3d9-7804-44ce-9845-084855163e92"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "9de321bb-f6f0-4314-9883-4013c1d4bf35",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9166a5b0-bb88-46b4-a1ab-a99abb58f9c9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e0edfae0-27d6-42ce-88d5-b6ddd3594c63",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a20a1385-8395-4eed-a11a-a3e51cf4e00e",
            "latches": [
                "f7973f12-36cb-47f3-b345-bb6e5e7b3076"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "16cb4df9-9251-4453-92cb-9b4a1762161e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "171652ed-50af-4e32-86cc-edb8095d37bb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "478d216f-8da3-40bb-9414-9abb201e1f18",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2f76b316-caca-4623-b242-9511dc951d20",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d4d77a14-0119-46e7-abe3-9a1171a7e043",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b8429372-2bdb-40be-95cd-14a960e801c3",
            "latches": [
                "9be8b428-09c5-4708-b474-6c5c9e1576d4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "80fecf24-298c-450b-91ee-4bb0666e849e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7bc5f3d9-7804-44ce-9845-084855163e92",
            "latches": []
        },
        {
            "id": "action",
            "instance": "c3d7f29b-68f2-4089-bf41-6e3d94bffcd2",
            "properties": [
                [
                    "name",
                    "Standard Encoding"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1132.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe base64 encodes the bzip2 compressed data in memory"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "cc57815a-c861-4309-8ba5-d374beb7c3d3",
                "30": "0ffeaf0c-a546-4f76-9d43-d42f099b0f10",
                "60": "0e819af3-ed23-4839-8dec-5125dfe2249a",
                "90": "94376536-0604-414a-9203-0660951e410a",
                "120": "895b1b87-bb32-4b71-83ed-1c957ec3c10e",
                "150": "ec9ad72e-1aaf-4652-a1fb-beaa15473f33",
                "180": "c25509a6-447f-4597-8a40-7323c44eb692",
                "210": "b7175057-7f85-4322-b091-40fcbdfb589c",
                "240": "0dd89666-e4ee-4ce9-9732-54a2aca0d97b",
                "270": "ca918667-7c09-4f8e-a5ef-d9d73fa79f67",
                "300": "335e7ae4-49f6-4859-8cb9-ea6c47eb1bd4",
                "330": "fffd5034-ec31-456d-86c2-89cdd643031c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "cc57815a-c861-4309-8ba5-d374beb7c3d3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0ffeaf0c-a546-4f76-9d43-d42f099b0f10",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0e819af3-ed23-4839-8dec-5125dfe2249a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "94376536-0604-414a-9203-0660951e410a",
            "latches": [
                "81ea0351-f66b-408d-b1ab-ac700064cc49"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "895b1b87-bb32-4b71-83ed-1c957ec3c10e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec9ad72e-1aaf-4652-a1fb-beaa15473f33",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c25509a6-447f-4597-8a40-7323c44eb692",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b7175057-7f85-4322-b091-40fcbdfb589c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0dd89666-e4ee-4ce9-9732-54a2aca0d97b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ca918667-7c09-4f8e-a5ef-d9d73fa79f67",
            "latches": [
                "230089bc-eaae-473a-b20a-f9e1decf1684"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "335e7ae4-49f6-4859-8cb9-ea6c47eb1bd4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fffd5034-ec31-456d-86c2-89cdd643031c",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d1046ea8-e7db-4fcf-bef9-77c585d92f35",
            "properties": [
                [
                    "name",
                    "External Proxy"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1090.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe connects to shoppingbeach.org via a POST request"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "381dcd01-dacf-4bb0-b6d6-51335ee58465",
                "30": "a76959f9-b272-420c-9dae-ee98bb66415c",
                "60": "6254e2b6-f907-41bf-81cf-84b3e8fb9a14",
                "90": "904a8254-a159-4aa2-8aa9-0523273f8cb6",
                "120": "5a63c943-9462-4342-8ce9-196105100285",
                "150": "903f7039-de52-4d90-8ff8-c6d4ea0fe620",
                "180": "4c86c357-75a5-43d1-8e59-ce3b2214d438",
                "210": "81a2dbda-1fee-43d3-89bd-bae8df3fd19c",
                "240": "62135adf-afb4-4939-9389-6887a44d1e7a",
                "270": "3d926a6e-ddc3-48f6-9e7a-6368f897ba83",
                "300": "46ad1f93-1a81-45d4-b740-083c54d808bc",
                "330": "4f66eccb-e3fb-4334-8613-4d9aa6900476"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "381dcd01-dacf-4bb0-b6d6-51335ee58465",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a76959f9-b272-420c-9dae-ee98bb66415c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6254e2b6-f907-41bf-81cf-84b3e8fb9a14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "904a8254-a159-4aa2-8aa9-0523273f8cb6",
            "latches": [
                "64f1b77d-15f2-4d3b-b5c2-540e462612b9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5a63c943-9462-4342-8ce9-196105100285",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "903f7039-de52-4d90-8ff8-c6d4ea0fe620",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4c86c357-75a5-43d1-8e59-ce3b2214d438",
            "latches": [
                "7970e842-543b-47f5-b0d7-436d80729587"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "81a2dbda-1fee-43d3-89bd-bae8df3fd19c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "62135adf-afb4-4939-9389-6887a44d1e7a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3d926a6e-ddc3-48f6-9e7a-6368f897ba83",
            "latches": [
                "19661bb7-f8e7-4505-bfd3-c05bdf57c277"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "46ad1f93-1a81-45d4-b740-083c54d808bc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4f66eccb-e3fb-4334-8613-4d9aa6900476",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "6fb1e1b0-2388-4bea-954c-858549a0fb2b",
            "properties": [
                [
                    "value",
                    "91.52.62.64"
                ]
            ],
            "anchors": {
                "0": "d9608f8a-44ee-4631-afbb-6fdf9577a539",
                "30": "e8612194-c683-4d84-8d8a-2cbdb68e7616",
                "60": "d423e591-df75-4b90-8a70-e16c11cbee0b",
                "90": "bf4f9991-219b-4e08-bf66-ca6b08bf0a85",
                "120": "1f90c2ee-0f45-451f-9fce-66aea75fdeb8",
                "150": "bbe28df8-e4da-40b3-b005-ab7a43275f68",
                "180": "83dcd6e2-01ad-4b24-bee2-cd490bb73b72",
                "210": "0d9c1e3e-2401-418b-bea7-5330cbb17e7c",
                "240": "d6c5b180-f332-4c76-8cc4-4d24cb95b97b",
                "270": "04c0fffd-8a5e-4d69-b3df-af5ffd1a768a",
                "300": "7d55e0ca-6e4e-46a6-9287-32ba0c1452bf",
                "330": "816d9dff-7ec4-4b9e-9c4e-77a4dcc097c5"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d9608f8a-44ee-4631-afbb-6fdf9577a539",
            "latches": [
                "c2a72fe4-527b-4fae-a1a6-38e20855d2d4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "e8612194-c683-4d84-8d8a-2cbdb68e7616",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d423e591-df75-4b90-8a70-e16c11cbee0b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bf4f9991-219b-4e08-bf66-ca6b08bf0a85",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1f90c2ee-0f45-451f-9fce-66aea75fdeb8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bbe28df8-e4da-40b3-b005-ab7a43275f68",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "83dcd6e2-01ad-4b24-bee2-cd490bb73b72",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0d9c1e3e-2401-418b-bea7-5330cbb17e7c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d6c5b180-f332-4c76-8cc4-4d24cb95b97b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "04c0fffd-8a5e-4d69-b3df-af5ffd1a768a",
            "latches": [
                "af01dbc1-2bfe-4309-bc23-118d22edbe24"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "7d55e0ca-6e4e-46a6-9287-32ba0c1452bf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "816d9dff-7ec4-4b9e-9c4e-77a4dcc097c5",
            "latches": []
        },
        {
            "id": "url",
            "instance": "6b067335-70fd-474d-9394-4ca443039fbb",
            "properties": [
                [
                    "value",
                    "shoppingbeach.org"
                ]
            ],
            "anchors": {
                "0": "d3859a2d-d286-4e51-b0d7-45c7aed1ca28",
                "30": "3f5f3d5e-ecf6-4887-b1d8-5c116633c8c2",
                "60": "8c54e171-8a6e-4ef9-89ee-3d4e073dc005",
                "90": "83387f4f-8e9a-4d89-8482-5927fc82ac64",
                "120": "d20e91fe-ab13-44fa-bb1b-8dadef9050a7",
                "150": "e4370a29-4dbb-446e-88af-80cd693bd7b8",
                "180": "b52dd5f6-c264-4738-b4a9-1d08c50129e2",
                "210": "07ae1aa5-9d9d-4755-a6f4-619cc10c5e4a",
                "240": "ba3eeb01-47ba-4dca-ab7e-f74ed31d9a29",
                "270": "aafc6117-fade-46d8-9669-29122dab03c0",
                "300": "8fde527c-06b7-4f58-9c2c-d71e5af993a4",
                "330": "5d561fa3-6a57-46eb-8582-8db1041cd058"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d3859a2d-d286-4e51-b0d7-45c7aed1ca28",
            "latches": [
                "3af6c4f2-862d-490d-9e6c-e1d6d3285dd5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3f5f3d5e-ecf6-4887-b1d8-5c116633c8c2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8c54e171-8a6e-4ef9-89ee-3d4e073dc005",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "83387f4f-8e9a-4d89-8482-5927fc82ac64",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d20e91fe-ab13-44fa-bb1b-8dadef9050a7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e4370a29-4dbb-446e-88af-80cd693bd7b8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b52dd5f6-c264-4738-b4a9-1d08c50129e2",
            "latches": [
                "aa7fdb70-aa99-4ac6-8cd0-00b8d39fc229"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "07ae1aa5-9d9d-4755-a6f4-619cc10c5e4a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ba3eeb01-47ba-4dca-ab7e-f74ed31d9a29",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "aafc6117-fade-46d8-9669-29122dab03c0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8fde527c-06b7-4f58-9c2c-d71e5af993a4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5d561fa3-6a57-46eb-8582-8db1041cd058",
            "latches": []
        },
        {
            "id": "network_traffic",
            "instance": "29ef7edf-5438-415f-a10f-27d79cb39bac",
            "properties": [
                [
                    "start",
                    null
                ],
                [
                    "end",
                    null
                ],
                [
                    "is_active",
                    null
                ],
                [
                    "src_port",
                    null
                ],
                [
                    "dst_port",
                    80
                ],
                [
                    "protocols",
                    [
                        [
                            "1c5a0d01db4885bbd1cce67eab11c343",
                            "HTTP"
                        ]
                    ]
                ],
                [
                    "src_byte_count",
                    null
                ],
                [
                    "dst_byte_count",
                    null
                ],
                [
                    "src_packets",
                    null
                ],
                [
                    "dst_packets",
                    null
                ],
                [
                    "ipfix",
                    null
                ]
            ],
            "anchors": {
                "0": "322728f7-bcc0-4aca-9818-f8960597f668",
                "30": "68a5fe57-1209-491b-879c-769674e213cc",
                "60": "bc6b267d-2cb8-4241-87ca-406cca1f731f",
                "90": "ffa2d1a3-1215-4677-962e-7d0fbec78f1d",
                "120": "05fc67db-f9cc-488e-8be5-87e1ed69057e",
                "150": "d8f931fa-a665-4adf-9839-3775a9593ec7",
                "180": "30d738f0-ca2f-41da-8454-dbe533c4a69f",
                "210": "ebc844c2-0662-4199-ab3a-747ff16a0b93",
                "240": "5ff2b33b-0234-43e0-aca0-4dbcfef03801",
                "270": "3d992edc-e767-43b5-a9b7-ab1327e14e4e",
                "300": "cfc10d0e-f260-48c0-9973-7fc5acb12e0e",
                "330": "0eee6c7e-20e9-41f5-b201-66a98a5668ac"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "322728f7-bcc0-4aca-9818-f8960597f668",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "68a5fe57-1209-491b-879c-769674e213cc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bc6b267d-2cb8-4241-87ca-406cca1f731f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ffa2d1a3-1215-4677-962e-7d0fbec78f1d",
            "latches": [
                "28427d2e-83b6-4d86-8224-022cfd08050d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "05fc67db-f9cc-488e-8be5-87e1ed69057e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d8f931fa-a665-4adf-9839-3775a9593ec7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "30d738f0-ca2f-41da-8454-dbe533c4a69f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ebc844c2-0662-4199-ab3a-747ff16a0b93",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5ff2b33b-0234-43e0-aca0-4dbcfef03801",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3d992edc-e767-43b5-a9b7-ab1327e14e4e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cfc10d0e-f260-48c0-9973-7fc5acb12e0e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0eee6c7e-20e9-41f5-b201-66a98a5668ac",
            "latches": []
        },
        {
            "id": "action",
            "instance": "7e0bfe12-467b-481c-a190-bc2f2b81ebe9",
            "properties": [
                [
                    "name",
                    "Local Data Staging"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0009"
                        ],
                        [
                            "technique",
                            "T1074.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "The output of the file enumeration is stored in a local log file"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "1404f753-d475-4e99-9b81-84a1b9ce16bf",
                "30": "badccbde-0e30-44d8-b4c7-ebf8a6397eda",
                "60": "0a6cee11-885e-4c33-a770-33a054d43c9b",
                "90": "9610e00a-4214-4456-b01c-1a8c2758d6e4",
                "120": "dd194023-52f4-4620-aae8-c2e93d5a0a44",
                "150": "98c38819-8c8c-4955-9a70-3b94ef1ff83d",
                "180": "1d7ab2e2-5c9f-445d-b700-3317fa7a7e42",
                "210": "cacdcaf6-e570-4034-8726-528df7d36db1",
                "240": "0ddfa6fa-0d35-4093-b034-84c857e16e4e",
                "270": "3b3b6678-5cc7-4a08-964c-47eb36b2a6e5",
                "300": "a95ee85c-cffa-4859-bfc1-83cc47ef8383",
                "330": "dfb1faa0-dd16-4f21-ae3b-06d021f79c97"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1404f753-d475-4e99-9b81-84a1b9ce16bf",
            "latches": [
                "945cdb9e-a097-4ead-a411-538e844040bc"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "badccbde-0e30-44d8-b4c7-ebf8a6397eda",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0a6cee11-885e-4c33-a770-33a054d43c9b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9610e00a-4214-4456-b01c-1a8c2758d6e4",
            "latches": [
                "849fe377-eca2-4424-b6e4-29ae12d69903"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "dd194023-52f4-4620-aae8-c2e93d5a0a44",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "98c38819-8c8c-4955-9a70-3b94ef1ff83d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1d7ab2e2-5c9f-445d-b700-3317fa7a7e42",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cacdcaf6-e570-4034-8726-528df7d36db1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0ddfa6fa-0d35-4093-b034-84c857e16e4e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3b3b6678-5cc7-4a08-964c-47eb36b2a6e5",
            "latches": [
                "d8dc27a5-14fe-4eab-bb06-4165fa0a8e9d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a95ee85c-cffa-4859-bfc1-83cc47ef8383",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "dfb1faa0-dd16-4f21-ae3b-06d021f79c97",
            "latches": []
        },
        {
            "id": "file",
            "instance": "76634d34-e225-4ac5-a1a1-707cde424e46",
            "properties": [
                [
                    "name",
                    "%TEMP%\\~D723574.tmp"
                ],
                [
                    "name_enc",
                    null
                ],
                [
                    "size",
                    null
                ],
                [
                    "hashes",
                    []
                ],
                [
                    "magic_number_hex",
                    null
                ],
                [
                    "mime_type",
                    null
                ],
                [
                    "ctime",
                    null
                ],
                [
                    "mtime",
                    null
                ],
                [
                    "atime",
                    null
                ]
            ],
            "anchors": {
                "0": "c0c85181-459d-41fd-8226-cb6c48973cc7",
                "30": "09b8f0c2-eec1-4e64-b7dd-950aedf829d0",
                "60": "26992f8e-f743-410a-9bfc-f66df69bc113",
                "90": "ce0216ce-9a8d-4d2c-9878-4bc1a40514e0",
                "120": "b70f0573-b2aa-4928-b1f7-bf9796c5e072",
                "150": "71f921ea-a69b-4eae-bd33-e2ed864404f6",
                "180": "116d0ba6-ee2c-4d24-bf90-92d78e03551a",
                "210": "a740040f-bfbc-4818-9b1d-3cee143fe1e4",
                "240": "0332630a-03f2-4d05-a0f4-c7faf3b44151",
                "270": "2b21c535-74d0-4f2a-bece-c10d7ef97a63",
                "300": "b1923ebc-5f60-4137-aac5-2039705d8c67",
                "330": "9ff1f6f2-74eb-4f6c-932b-eb871df8013f"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c0c85181-459d-41fd-8226-cb6c48973cc7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "09b8f0c2-eec1-4e64-b7dd-950aedf829d0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "26992f8e-f743-410a-9bfc-f66df69bc113",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ce0216ce-9a8d-4d2c-9878-4bc1a40514e0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b70f0573-b2aa-4928-b1f7-bf9796c5e072",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "71f921ea-a69b-4eae-bd33-e2ed864404f6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "116d0ba6-ee2c-4d24-bf90-92d78e03551a",
            "latches": [
                "b5b86821-f1df-46f5-aa22-37bde638dfe7"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a740040f-bfbc-4818-9b1d-3cee143fe1e4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0332630a-03f2-4d05-a0f4-c7faf3b44151",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2b21c535-74d0-4f2a-bece-c10d7ef97a63",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b1923ebc-5f60-4137-aac5-2039705d8c67",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9ff1f6f2-74eb-4f6c-932b-eb871df8013f",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d19d7718-a9cd-4c88-8930-c25ac023a994",
            "properties": [
                [
                    "name",
                    "Permission Groups Discovery: Domain Groups"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1069.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "Various net group commands are executed on the local machine to find domain admins, domain computers, and domain controllers"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "44fcad59-c50b-4d48-914d-57e7f4ecb3b3",
                "30": "94bab46e-31dd-4665-bd4c-6743e698d12a",
                "60": "f6f28a26-5b85-402c-a2f0-c76fe6e21603",
                "90": "9087148f-4949-4bbf-b51b-737e70cbe692",
                "120": "069d0872-9515-438b-bd6b-be5708aefed4",
                "150": "8ff1ec61-6319-4eb8-a71d-5f0eea6fca26",
                "180": "0b6fbad9-52c0-4cd9-bf7d-e2205a12c3c7",
                "210": "a9f02c37-5aca-49dc-8de7-9e00cacec9d6",
                "240": "c550b777-4189-4bb6-8f5c-e042865d79d4",
                "270": "c4a49d10-70e0-4a99-92be-c558aee5255c",
                "300": "5cabf48e-3ffe-4642-8a33-653961458f51",
                "330": "95277e85-65e3-4f9d-ba95-ea91b02f8bdd"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "44fcad59-c50b-4d48-914d-57e7f4ecb3b3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "94bab46e-31dd-4665-bd4c-6743e698d12a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f6f28a26-5b85-402c-a2f0-c76fe6e21603",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9087148f-4949-4bbf-b51b-737e70cbe692",
            "latches": [
                "263b70f6-6d99-4efb-ba2d-4a62d15599bc"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "069d0872-9515-438b-bd6b-be5708aefed4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8ff1ec61-6319-4eb8-a71d-5f0eea6fca26",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0b6fbad9-52c0-4cd9-bf7d-e2205a12c3c7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a9f02c37-5aca-49dc-8de7-9e00cacec9d6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c550b777-4189-4bb6-8f5c-e042865d79d4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c4a49d10-70e0-4a99-92be-c558aee5255c",
            "latches": [
                "4e1a7c60-8adc-4e87-9b7a-3067a16085dc"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5cabf48e-3ffe-4642-8a33-653961458f51",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "95277e85-65e3-4f9d-ba95-ea91b02f8bdd",
            "latches": []
        },
        {
            "id": "action",
            "instance": "3c0ec891-3e2e-4b65-a968-6ea52b554b13",
            "properties": [
                [
                    "name",
                    "System Service Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1007"
                        ]
                    ]
                ],
                [
                    "description",
                    "tasklist is used to enumerate services hosted in each running process"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "0efd0b33-1114-4ad1-9625-8bb43889f897",
                "30": "733fffed-e12a-4b35-a902-e66ab8920103",
                "60": "697720cd-6696-45b9-95ef-90c7bec95759",
                "90": "f90e93bc-384b-4463-b1a2-0ad0d88751b1",
                "120": "d0051db1-a002-451f-ae83-b72bc497f322",
                "150": "b1b99a7c-2886-4b31-b245-718e6b491cdd",
                "180": "4d2cf576-7a61-421b-a688-2e3d9583b185",
                "210": "4112016b-777b-4422-9d0e-5773df190988",
                "240": "07f992cc-eb44-41d0-ad55-e0b19e01f819",
                "270": "c9cbbe33-6176-4ff4-b313-13eb87d24594",
                "300": "572e8ac4-4b9b-4c03-aa73-595b23e62c9c",
                "330": "5866dc6a-f41b-4c93-821d-4910cba50518"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0efd0b33-1114-4ad1-9625-8bb43889f897",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "733fffed-e12a-4b35-a902-e66ab8920103",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "697720cd-6696-45b9-95ef-90c7bec95759",
            "latches": [
                "e69ea71c-db05-4ff6-bac4-f91c9dcd9a18"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f90e93bc-384b-4463-b1a2-0ad0d88751b1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d0051db1-a002-451f-ae83-b72bc497f322",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b1b99a7c-2886-4b31-b245-718e6b491cdd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4d2cf576-7a61-421b-a688-2e3d9583b185",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4112016b-777b-4422-9d0e-5773df190988",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "07f992cc-eb44-41d0-ad55-e0b19e01f819",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c9cbbe33-6176-4ff4-b313-13eb87d24594",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "572e8ac4-4b9b-4c03-aa73-595b23e62c9c",
            "latches": [
                "92cb84fc-49b2-4c60-b111-4252892968a6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "5866dc6a-f41b-4c93-821d-4910cba50518",
            "latches": []
        },
        {
            "id": "action",
            "instance": "c50397e5-bbb5-433d-8123-2f466680a675",
            "properties": [
                [
                    "name",
                    "Symmetric Cryptography"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1573.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe uses a temporary AES key to encrypt the discovery output in memory, then sends the data to the C2 server"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "46f205d0-7343-4b61-9901-ca4870e0422d",
                "30": "77a2d855-a20b-4489-8dd4-acb3e19fd0ff",
                "60": "27f2bcef-ef1c-4541-b5e2-a0a19c3843cb",
                "90": "c0bf97f7-588d-4ce7-bb31-560209758d17",
                "120": "e8b38e73-a87b-4cd5-8759-ebbd469afca6",
                "150": "48cb7bad-6254-42ec-83ae-5c50e5213afb",
                "180": "61df089c-5b7b-4d83-b6e2-bddcc48976e3",
                "210": "61224844-4a1e-4973-b0d4-439294d1a921",
                "240": "1511c963-2b7a-4ff4-99af-7735859cf1de",
                "270": "75b6cbbd-9618-489a-84a9-5114e5255ce0",
                "300": "aac29073-e128-4551-b3a7-1788db32278b",
                "330": "e9f41441-a8bb-4ec2-ba80-1dcae86045f5"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "46f205d0-7343-4b61-9901-ca4870e0422d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "77a2d855-a20b-4489-8dd4-acb3e19fd0ff",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "27f2bcef-ef1c-4541-b5e2-a0a19c3843cb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c0bf97f7-588d-4ce7-bb31-560209758d17",
            "latches": [
                "d0743f57-4fb3-40bc-8d56-d38480350ca1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "e8b38e73-a87b-4cd5-8759-ebbd469afca6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "48cb7bad-6254-42ec-83ae-5c50e5213afb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "61df089c-5b7b-4d83-b6e2-bddcc48976e3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "61224844-4a1e-4973-b0d4-439294d1a921",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1511c963-2b7a-4ff4-99af-7735859cf1de",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "75b6cbbd-9618-489a-84a9-5114e5255ce0",
            "latches": [
                "6cea0f97-68a0-49ac-bd48-6acefe96a761"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "aac29073-e128-4551-b3a7-1788db32278b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e9f41441-a8bb-4ec2-ba80-1dcae86045f5",
            "latches": []
        },
        {
            "id": "action",
            "instance": "22d2c2e4-0e4d-4b4c-868b-8056fe634d32",
            "properties": [
                [
                    "name",
                    "Asymmetric Cryptography"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1573.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "The AES key, generated by msedge.exe, is RSA encrypted "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "a6d37043-bbd5-4bcc-a99a-55414bb7e59b",
                "30": "36e8af2c-9f03-43ef-8ef8-65bc24d35296",
                "60": "79008726-a88b-4c5d-9172-3652ab5ab174",
                "90": "6ef354c3-f822-4c9a-8d33-efee25644620",
                "120": "30f0062f-6980-4e33-8d77-03f77f3c8f87",
                "150": "7f3c9062-ea0f-4c82-aa56-38eb87152590",
                "180": "1da8ec85-2381-474c-a08f-a2b7d289eb4d",
                "210": "ecc768df-2ba8-480e-8001-5f15f595658c",
                "240": "d8e5c771-396a-400e-8149-93a7de42cc5d",
                "270": "51bd4754-1865-41d3-a8c9-a16c0bc6f09d",
                "300": "c1c38a88-df7f-4fee-8779-8d1739ef6618",
                "330": "343a4b2f-667f-469d-88a7-72ed7b458bfa"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "a6d37043-bbd5-4bcc-a99a-55414bb7e59b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "36e8af2c-9f03-43ef-8ef8-65bc24d35296",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "79008726-a88b-4c5d-9172-3652ab5ab174",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6ef354c3-f822-4c9a-8d33-efee25644620",
            "latches": [
                "01922a83-3e95-49d4-bcc3-b2b59fe66205"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "30f0062f-6980-4e33-8d77-03f77f3c8f87",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7f3c9062-ea0f-4c82-aa56-38eb87152590",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1da8ec85-2381-474c-a08f-a2b7d289eb4d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ecc768df-2ba8-480e-8001-5f15f595658c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d8e5c771-396a-400e-8149-93a7de42cc5d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "51bd4754-1865-41d3-a8c9-a16c0bc6f09d",
            "latches": [
                "8ec770e1-6d64-423a-8d31-5970abd081b3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c1c38a88-df7f-4fee-8779-8d1739ef6618",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "343a4b2f-667f-469d-88a7-72ed7b458bfa",
            "latches": []
        },
        {
            "id": "action",
            "instance": "703e7750-2856-464f-9040-c9c25574db64",
            "properties": [
                [
                    "name",
                    "Query Registry"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1012"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe reg queries ViperVPNSvc"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "dc24cb64-5b4d-43eb-a7f3-a3263c6f778a",
                "30": "536bf510-57ea-402c-9eee-27ab376e806a",
                "60": "e62e2a34-09e1-4ecc-90fa-a0baba064711",
                "90": "885c9c4d-9d03-4dd8-ba91-707c3d9cd2e9",
                "120": "d19509ff-2711-40fb-b086-86a5fa768d69",
                "150": "7add201f-b90f-4855-bf72-7ae728960cfb",
                "180": "4eec8978-6f84-4017-96e0-073b97e11220",
                "210": "800a23fd-75ad-4c0a-b84e-84c48955f94a",
                "240": "f8bd5d2b-9a4d-4a47-a7d4-c67704085f40",
                "270": "5b7dcca1-ae71-485e-9607-43f8e0359bac",
                "300": "4dc5b281-03c0-485a-b11a-71b1e512938f",
                "330": "6e436f89-4ae4-404c-bcb8-76ee38c43420"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "dc24cb64-5b4d-43eb-a7f3-a3263c6f778a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "536bf510-57ea-402c-9eee-27ab376e806a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e62e2a34-09e1-4ecc-90fa-a0baba064711",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "885c9c4d-9d03-4dd8-ba91-707c3d9cd2e9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d19509ff-2711-40fb-b086-86a5fa768d69",
            "latches": [
                "a7641f6a-5b7c-45e5-9e49-4034f5ec8c79"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7add201f-b90f-4855-bf72-7ae728960cfb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4eec8978-6f84-4017-96e0-073b97e11220",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "800a23fd-75ad-4c0a-b84e-84c48955f94a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f8bd5d2b-9a4d-4a47-a7d4-c67704085f40",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5b7dcca1-ae71-485e-9607-43f8e0359bac",
            "latches": [
                "f890a411-a0fa-433b-9f0d-0b44062a002b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4dc5b281-03c0-485a-b11a-71b1e512938f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6e436f89-4ae4-404c-bcb8-76ee38c43420",
            "latches": []
        },
        {
            "id": "action",
            "instance": "b1749e1b-dc2c-4c19-a5e3-70cd794c9b8c",
            "properties": [
                [
                    "name",
                    "PowerShell"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0002"
                        ],
                        [
                            "technique",
                            "T1059.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "PowerShell is used to verify which users can access the ViperVPNSvc service"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "0ce17f31-5c17-4c57-95ca-03160ef1b08a",
                "30": "0c6a2464-50e5-46cc-bd86-819c4c2c8ecd",
                "60": "210faacd-2381-449f-b96c-c1626477b810",
                "90": "4d2bd1ab-f94b-4dc8-b166-8c0b61e49fc0",
                "120": "f7e00dd5-e7c1-4ff0-9f6a-27e476b3f002",
                "150": "aae27ae3-4136-42f1-ab17-d01b22b8f622",
                "180": "e9e5b899-2ff1-40fd-bc22-977411004638",
                "210": "f7a9b628-fc5f-44aa-992a-15179c0eb2b5",
                "240": "d3ce0cfc-9312-4ac9-ac42-94e178d87e3a",
                "270": "00261e8b-33f7-4b3d-9410-bba7869e33d4",
                "300": "a31ab3e3-c533-40bd-b5a4-1f2c5e6600da",
                "330": "33f33040-3312-4697-a0f2-f2ebcbf597b7"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0ce17f31-5c17-4c57-95ca-03160ef1b08a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0c6a2464-50e5-46cc-bd86-819c4c2c8ecd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "210faacd-2381-449f-b96c-c1626477b810",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4d2bd1ab-f94b-4dc8-b166-8c0b61e49fc0",
            "latches": [
                "4a62884a-284e-4185-9d60-50f0b02f8df0"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f7e00dd5-e7c1-4ff0-9f6a-27e476b3f002",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "aae27ae3-4136-42f1-ab17-d01b22b8f622",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e9e5b899-2ff1-40fd-bc22-977411004638",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f7a9b628-fc5f-44aa-992a-15179c0eb2b5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d3ce0cfc-9312-4ac9-ac42-94e178d87e3a",
            "latches": [
                "2d01ead2-29c2-4068-a138-31a7b864f785"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "00261e8b-33f7-4b3d-9410-bba7869e33d4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a31ab3e3-c533-40bd-b5a4-1f2c5e6600da",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "33f33040-3312-4697-a0f2-f2ebcbf597b7",
            "latches": []
        },
        {
            "id": "action",
            "instance": "152d7662-47d4-46cf-9819-72c430757abb",
            "properties": [
                [
                    "name",
                    "Services Registry Permissions Weakness"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1574.011"
                        ]
                    ]
                ],
                [
                    "description",
                    "the ViperVPNSvc service registry key is modified for privilege escalation"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "dced933a-2746-4fde-af56-090c981846bf",
                "30": "646e731e-cc8e-4a9b-abbf-9e2a341a4983",
                "60": "96cbf086-6b34-4f1c-8c09-5e3eda761e3e",
                "90": "be0a38c9-cf27-4e5a-85b3-c7ad63f52c1f",
                "120": "b71dc7df-a2ba-4177-95fc-1fd11d42dfbf",
                "150": "5225d2ab-4fdd-4abe-9459-f4ebefb58f94",
                "180": "f27120de-b13d-4a30-acee-22d23cbfb788",
                "210": "6c7e1f7a-7f23-4b44-a37f-14d1d56060da",
                "240": "ad45d34c-818e-4036-9264-112d02325a23",
                "270": "706b8475-07ec-411c-b02b-8e4b3dc3a924",
                "300": "c8f160ec-46ea-48e9-8cd4-1cc43f921a6a",
                "330": "5c739128-761a-4ca5-97e4-222ac10b5397"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "dced933a-2746-4fde-af56-090c981846bf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "646e731e-cc8e-4a9b-abbf-9e2a341a4983",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "96cbf086-6b34-4f1c-8c09-5e3eda761e3e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "be0a38c9-cf27-4e5a-85b3-c7ad63f52c1f",
            "latches": [
                "9959d592-7396-4df6-8375-98ba75110494"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b71dc7df-a2ba-4177-95fc-1fd11d42dfbf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5225d2ab-4fdd-4abe-9459-f4ebefb58f94",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f27120de-b13d-4a30-acee-22d23cbfb788",
            "latches": [
                "14528369-4fb0-4186-b56a-b216f1cc140a"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "6c7e1f7a-7f23-4b44-a37f-14d1d56060da",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ad45d34c-818e-4036-9264-112d02325a23",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "706b8475-07ec-411c-b02b-8e4b3dc3a924",
            "latches": [
                "497655aa-cde5-4cb3-b550-e4471b6433e3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c8f160ec-46ea-48e9-8cd4-1cc43f921a6a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5c739128-761a-4ca5-97e4-222ac10b5397",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "5eb36921-dd1b-4de5-96b0-9d0ef2058749",
            "properties": [
                [
                    "description",
                    "The service is restarted, executing the EPIC Injector (mxs_installer.exe) with SYSTEM level privileges. Using SYSTEM level privileges, EPIC injects into svchost.exe processes. "
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "1362a596-fd34-4f4c-84a3-e92aa5de499a",
                "30": "47ee5c11-4107-4ab0-bc32-53616d3fe870",
                "60": "88c1a674-62ac-4cb9-936a-c71063796954",
                "90": "acda112b-21f3-43a8-8929-5c0b9da1dd3c",
                "120": "02d127ab-ba68-4c9a-b891-9d640f4e3db2",
                "150": "080f4e93-5fee-46d2-b98b-916ce60e234c",
                "180": "c065c154-1b62-4b4e-ab0c-11fef3a4a729",
                "210": "25c03d9e-4e52-4f13-b3ce-0193cf8c2aeb",
                "330": "d691f1ec-8e95-4fcf-8003-bb2d2dd89b76",
                "branch:True": "71d95208-f9eb-4b0e-84f9-35c79cad4749",
                "branch:False": "56b4b2be-6809-447c-8694-34ec15c7c218"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1362a596-fd34-4f4c-84a3-e92aa5de499a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "47ee5c11-4107-4ab0-bc32-53616d3fe870",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "88c1a674-62ac-4cb9-936a-c71063796954",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "acda112b-21f3-43a8-8929-5c0b9da1dd3c",
            "latches": [
                "806a66ac-1708-4364-beda-0d440c2fcc4b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "02d127ab-ba68-4c9a-b891-9d640f4e3db2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "080f4e93-5fee-46d2-b98b-916ce60e234c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c065c154-1b62-4b4e-ab0c-11fef3a4a729",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "25c03d9e-4e52-4f13-b3ce-0193cf8c2aeb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d691f1ec-8e95-4fcf-8003-bb2d2dd89b76",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "71d95208-f9eb-4b0e-84f9-35c79cad4749",
            "latches": [
                "319e153f-878f-4ab5-8174-764dbc7ecc0b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "56b4b2be-6809-447c-8694-34ec15c7c218",
            "latches": []
        },
        {
            "id": "action",
            "instance": "639eb5ef-fceb-4ca5-ba61-14eed316c97f",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe creates WinResSvc.exe in the System32 folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "e19893cf-ca8f-4ba9-aaa9-57377ba59927",
                "30": "9a27ee13-e30d-4f7c-a39e-b17cce681da7",
                "60": "d46c33a6-fe32-434d-a64b-78d5c558ab1c",
                "90": "de6d77f2-5ce8-4880-86fa-23a72cd24d76",
                "120": "5dd8efeb-dd52-4e98-89fa-b22b943faa0d",
                "150": "f8835bcc-8c7f-4969-a2f2-e5dd1796653f",
                "180": "857a0874-bafe-4d37-a3cc-05feec3b6eab",
                "210": "5a0f6804-c41c-4d89-a7ba-e9a6d8c8ad2a",
                "240": "e6aacd91-3309-47aa-897a-9f3651039f63",
                "270": "eced1399-59dc-4a52-b531-31386539f592",
                "300": "81fca7cb-bbe7-41a8-8582-57aabbf9adfb",
                "330": "5d8a6917-5ae2-4e25-b76d-77c801c8e555"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "e19893cf-ca8f-4ba9-aaa9-57377ba59927",
            "latches": [
                "b6fadedd-ad31-4939-9ff4-85cf26f2c1be"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "9a27ee13-e30d-4f7c-a39e-b17cce681da7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d46c33a6-fe32-434d-a64b-78d5c558ab1c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "de6d77f2-5ce8-4880-86fa-23a72cd24d76",
            "latches": [
                "254a756d-9004-4df6-bc5a-43d6d0aa3f60"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5dd8efeb-dd52-4e98-89fa-b22b943faa0d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f8835bcc-8c7f-4969-a2f2-e5dd1796653f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "857a0874-bafe-4d37-a3cc-05feec3b6eab",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5a0f6804-c41c-4d89-a7ba-e9a6d8c8ad2a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e6aacd91-3309-47aa-897a-9f3651039f63",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "eced1399-59dc-4a52-b531-31386539f592",
            "latches": [
                "e38bbfed-ab44-4449-98f9-a5c75bf76706"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "81fca7cb-bbe7-41a8-8582-57aabbf9adfb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5d8a6917-5ae2-4e25-b76d-77c801c8e555",
            "latches": []
        },
        {
            "id": "action",
            "instance": "748a674a-72bf-457d-aae1-516434fa31a6",
            "properties": [
                [
                    "name",
                    "Masquerade Task or Service"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1036.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "WinResSvc.exe uses filenames mressvc.dll (Loader DLL) and MSSVCCFG.dll (Orchestrator DLL) to appear benign/legitimate"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "7c0a24c5-b89d-4ca5-88fe-f6f1091da437",
                "30": "312d1a8a-0e18-4697-93dc-ebfaddd61e3f",
                "60": "583bc12a-350c-4a41-a7c8-b9cd19662a07",
                "90": "6575f725-10cf-4531-8b8d-0d5a053e5141",
                "120": "624ff0c8-8c57-4d0b-a9ed-22109d3a4d01",
                "150": "e59eef7b-8dc5-424f-bf33-24f4e2ff5ff7",
                "180": "0db89954-0e02-4dbd-b1f4-faa61bcb75b5",
                "210": "4c456fed-d54e-4663-9c32-2671a69a370c",
                "240": "bbf53150-fa22-4197-bd5e-37776194fde6",
                "270": "18dad0c4-e958-4477-ba83-2e1a4b568810",
                "300": "6d5765f1-cae8-43de-b4b4-08762ed6de7b",
                "330": "22a2fd71-b871-4e45-960e-3fb67a0038a4"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "7c0a24c5-b89d-4ca5-88fe-f6f1091da437",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "312d1a8a-0e18-4697-93dc-ebfaddd61e3f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "583bc12a-350c-4a41-a7c8-b9cd19662a07",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6575f725-10cf-4531-8b8d-0d5a053e5141",
            "latches": [
                "1097f835-a6c3-4700-a6ed-342495682091"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "624ff0c8-8c57-4d0b-a9ed-22109d3a4d01",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e59eef7b-8dc5-424f-bf33-24f4e2ff5ff7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0db89954-0e02-4dbd-b1f4-faa61bcb75b5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4c456fed-d54e-4663-9c32-2671a69a370c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bbf53150-fa22-4197-bd5e-37776194fde6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "18dad0c4-e958-4477-ba83-2e1a4b568810",
            "latches": [
                "5d2c69af-9341-4825-b5ca-6b404ac28626"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6d5765f1-cae8-43de-b4b4-08762ed6de7b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "22a2fd71-b871-4e45-960e-3fb67a0038a4",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "c01cfa4d-64b6-437d-b270-092f381577eb",
            "properties": [
                [
                    "name",
                    "mressvc.dll"
                ],
                [
                    "description",
                    "Loader DLL; the loader executes the orchestrator DLL"
                ],
                [
                    "malware_types",
                    [
                        [
                            "9233d5742462829e9cf0e5fff0f156ec",
                            "loader"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "bcf96cb540b90d36bfbe01fc1313cc42",
                            "installs-other-components"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "76a37bad-7763-474d-af8a-9f72f01a9ca8",
                "30": "b78ac5c4-9c75-4513-80c9-6e6383aa2d6f",
                "60": "e824dd92-6aeb-41e3-a78f-2e9c1068f71f",
                "90": "f2fb9900-09e1-4523-bbb3-0ab6309d9dd1",
                "120": "535518e8-ac40-4c55-8a0d-b98d3b047031",
                "150": "e845ad05-edfe-49d3-bf4b-c7849e3aa1d7",
                "180": "0637dd09-c9a0-48b2-b6d2-323e13fa62fb",
                "210": "7eec0228-180b-48ff-82dc-936a052e5de5",
                "240": "46e6f9fa-1cea-4655-b44a-be601fac7756",
                "270": "14b9108e-cd3f-4170-a980-ac0c37a89cf2",
                "300": "f7cc9761-48fb-44dc-ac9c-b6e35fae9329",
                "330": "7413d509-023a-45d3-b3d8-248760c249e4"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "76a37bad-7763-474d-af8a-9f72f01a9ca8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b78ac5c4-9c75-4513-80c9-6e6383aa2d6f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e824dd92-6aeb-41e3-a78f-2e9c1068f71f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f2fb9900-09e1-4523-bbb3-0ab6309d9dd1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "535518e8-ac40-4c55-8a0d-b98d3b047031",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e845ad05-edfe-49d3-bf4b-c7849e3aa1d7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0637dd09-c9a0-48b2-b6d2-323e13fa62fb",
            "latches": [
                "f7b94422-dd44-478a-96fd-7f44dad5783b"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7eec0228-180b-48ff-82dc-936a052e5de5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "46e6f9fa-1cea-4655-b44a-be601fac7756",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "14b9108e-cd3f-4170-a980-ac0c37a89cf2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f7cc9761-48fb-44dc-ac9c-b6e35fae9329",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7413d509-023a-45d3-b3d8-248760c249e4",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "3c3b7ca1-60a0-4286-ad11-1232a8c30269",
            "properties": [
                [
                    "name",
                    "MSSVCCFG.dll"
                ],
                [
                    "description",
                    "Orchestrator DLL; injects the communications library DLL into target processes specified in the CARBON DLL configuration file. It is also responsible for executing tasks and storing the output in encrypted files for the communications library to send to the C2 server."
                ],
                [
                    "malware_types",
                    [
                        [
                            "36d31b4613da90c9de52422e03700192",
                            "backdoor"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "55f0f23a1b3cae959c42c14945597310",
                            "escalates-privileges"
                        ],
                        [
                            "70994484d876a44fc7c29143356a0701",
                            "installs-other-components"
                        ],
                        [
                            "96024b079c524084c1413c6e88005f1e",
                            "communicates-with-c2"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "cc5a67d5-9c7b-4a24-8246-ad745b52e54c",
                "30": "e5cc28eb-3be1-4b0d-bcd8-24deca0811f3",
                "60": "92021fb0-2064-496b-87a4-11c55ae9b000",
                "90": "28d71cfb-5841-4de5-b7e5-144b09fdafef",
                "120": "6eedd3be-4b68-4404-9c10-8b04733d512c",
                "150": "c81b5dae-a17d-4a76-812c-d7785cc1ad06",
                "180": "67637aa5-6624-4bb7-be7c-5c327a297e8d",
                "210": "73f83d13-a0d5-4457-80e5-1d3510b19c69",
                "240": "78605d2a-4e64-43e4-b593-087b2c3c0ec3",
                "270": "1ba3aad7-d207-497e-a74c-9d78b3f15bd0",
                "300": "f03a1cbb-4bc9-4f30-81d8-1c7fc1589d62",
                "330": "ee978c03-0970-4f16-8e9d-b2f6b6a7ea9f"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "cc5a67d5-9c7b-4a24-8246-ad745b52e54c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e5cc28eb-3be1-4b0d-bcd8-24deca0811f3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "92021fb0-2064-496b-87a4-11c55ae9b000",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "28d71cfb-5841-4de5-b7e5-144b09fdafef",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6eedd3be-4b68-4404-9c10-8b04733d512c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c81b5dae-a17d-4a76-812c-d7785cc1ad06",
            "latches": [
                "b18d4c5d-31dc-4699-b098-7752de852b5f"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "67637aa5-6624-4bb7-be7c-5c327a297e8d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "73f83d13-a0d5-4457-80e5-1d3510b19c69",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "78605d2a-4e64-43e4-b593-087b2c3c0ec3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1ba3aad7-d207-497e-a74c-9d78b3f15bd0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f03a1cbb-4bc9-4f30-81d8-1c7fc1589d62",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ee978c03-0970-4f16-8e9d-b2f6b6a7ea9f",
            "latches": []
        },
        {
            "id": "action",
            "instance": "59203da5-73ed-4cac-9ab2-13e1e6cb26e7",
            "properties": [
                [
                    "name",
                    "Windows Service"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1543.003"
                        ]
                    ]
                ],
                [
                    "description",
                    "WinResSvc.exe creates WinResSvc service using OpenSCManager and CreateService APIs"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "06f7f312-ad5a-418b-8dce-0e5fd0dae531",
                "30": "075e3a6e-23d6-4037-90b9-6557b1ab81f7",
                "60": "db972280-a08d-47f0-8742-ee30b07dfed5",
                "90": "92653a13-e9b3-4cb5-ae58-b173b25bbf91",
                "120": "277fcb92-fb52-4021-8906-7ec46a28a2d6",
                "150": "79e7f683-c1f6-4705-861b-97dad230bf22",
                "180": "927e8a7a-d846-4bf7-8ee1-0d4c772b5d45",
                "210": "062856e3-49cd-4256-ab61-4df050ba5dbb",
                "240": "a925ae40-a7fc-4ccb-a2b2-d80669ed15d4",
                "270": "f197fa58-f5df-4d08-a9e1-d1cdf0c4f3f2",
                "300": "d3eb0269-cff0-46cc-af09-d4bcdc3ad889",
                "330": "45184ff4-879b-495a-8609-c61fcb46c13b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "06f7f312-ad5a-418b-8dce-0e5fd0dae531",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "075e3a6e-23d6-4037-90b9-6557b1ab81f7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "db972280-a08d-47f0-8742-ee30b07dfed5",
            "latches": [
                "cd1ba344-3ac7-4fe1-a97f-0860b455c774"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "92653a13-e9b3-4cb5-ae58-b173b25bbf91",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "277fcb92-fb52-4021-8906-7ec46a28a2d6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "79e7f683-c1f6-4705-861b-97dad230bf22",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "927e8a7a-d846-4bf7-8ee1-0d4c772b5d45",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "062856e3-49cd-4256-ab61-4df050ba5dbb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a925ae40-a7fc-4ccb-a2b2-d80669ed15d4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f197fa58-f5df-4d08-a9e1-d1cdf0c4f3f2",
            "latches": [
                "a5f2e48f-f303-4cf4-b5bc-48b8a0855d86"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "d3eb0269-cff0-46cc-af09-d4bcdc3ad889",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "45184ff4-879b-495a-8609-c61fcb46c13b",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d6fe7e2d-42e1-41f0-a142-0561e733d5b8",
            "properties": [
                [
                    "name",
                    "Modify Registry"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1112"
                        ]
                    ]
                ],
                [
                    "description",
                    "WinResSvc.exe modifies 2 registry keys via RegCreateKey and RegSetValue APIs"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "f7d6adb5-766d-4c88-a083-5dc82ab29606",
                "30": "cee7f16d-b84b-4330-ae19-54a27e6d9350",
                "60": "954f25fe-aba2-4800-ad33-81f5315db8b7",
                "90": "6296bd32-ad0e-476d-855e-1d2a0f723428",
                "120": "fb81de2d-9186-46a8-9b8a-c5ced9d2b6e7",
                "150": "e57af9d1-1ef6-4468-9190-a17f764ac425",
                "180": "fc9891e7-42a4-4188-b86b-e001895a1b05",
                "210": "ec747751-1b90-4de7-9f29-f71089a8542c",
                "240": "0f82dd14-4eb5-4d11-a7df-a5af855b5f14",
                "270": "6c593392-29bd-418d-bbf2-48c4629a3422",
                "300": "c4ab81af-db48-4e58-bee6-a859baacdcc9",
                "330": "2cf96686-92a9-4191-9d9c-42dfbed11ec3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "f7d6adb5-766d-4c88-a083-5dc82ab29606",
            "latches": [
                "01fb4ce7-f569-4903-a6be-a713a386d5e9"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "cee7f16d-b84b-4330-ae19-54a27e6d9350",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "954f25fe-aba2-4800-ad33-81f5315db8b7",
            "latches": [
                "246b95bf-27f8-4570-bff4-31b0f1424fa2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6296bd32-ad0e-476d-855e-1d2a0f723428",
            "latches": [
                "c573a9a4-9709-40ef-b1f8-acb08f9b839b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "fb81de2d-9186-46a8-9b8a-c5ced9d2b6e7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e57af9d1-1ef6-4468-9190-a17f764ac425",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fc9891e7-42a4-4188-b86b-e001895a1b05",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec747751-1b90-4de7-9f29-f71089a8542c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0f82dd14-4eb5-4d11-a7df-a5af855b5f14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6c593392-29bd-418d-bbf2-48c4629a3422",
            "latches": [
                "aa5e7a25-9f0a-4d94-ab0a-aaa490e22735"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c4ab81af-db48-4e58-bee6-a859baacdcc9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2cf96686-92a9-4191-9d9c-42dfbed11ec3",
            "latches": [
                "211ade04-e027-406a-8ce5-019735b0e393"
            ]
        },
        {
            "id": "action",
            "instance": "889d521d-57fb-4bf2-9fe2-9f78818afa1d",
            "properties": [
                [
                    "name",
                    "Service Execution"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0002"
                        ],
                        [
                            "technique",
                            "T1569.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "WinResSvc.exe uses StartService API to start WinSysSvc, which executes the loader DLL (mressvc.dll) under svchost.exe. mressvc.dll loads and executes the Orchestrator DLL (MSSVCCFG.dll)."
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "87b2894c-1b7b-4685-85c9-d774cd57af91",
                "30": "0a6a30d0-7af8-4c9b-a25f-f493f34aa8c6",
                "60": "d5ca2f92-06ad-49fa-960e-f2b5a72c2ec3",
                "90": "0b8c1536-41a0-4f46-b03f-740b411e6ed2",
                "120": "95c18f48-2fb8-4e6f-94d1-cc15d5ca13c5",
                "150": "b22729a1-3021-43eb-9619-abfb03f2dd24",
                "180": "df75c601-f00c-4df6-89f7-7d61ba907443",
                "210": "c60b2260-7032-4beb-a637-76793c9742d6",
                "240": "12c3fded-3ae8-4ee3-b960-890ab30392c5",
                "270": "bafd76b9-432a-4a95-80bb-c5420a88413d",
                "300": "0f7c9f4b-373a-4353-b726-4aa1c4689bb6",
                "330": "395b495d-f2b3-4c60-8b09-10bb28b00d9a"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "87b2894c-1b7b-4685-85c9-d774cd57af91",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0a6a30d0-7af8-4c9b-a25f-f493f34aa8c6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d5ca2f92-06ad-49fa-960e-f2b5a72c2ec3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0b8c1536-41a0-4f46-b03f-740b411e6ed2",
            "latches": [
                "3bc32f83-d99a-4243-bfa8-6776cf9fb232"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "95c18f48-2fb8-4e6f-94d1-cc15d5ca13c5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b22729a1-3021-43eb-9619-abfb03f2dd24",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "df75c601-f00c-4df6-89f7-7d61ba907443",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c60b2260-7032-4beb-a637-76793c9742d6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "12c3fded-3ae8-4ee3-b960-890ab30392c5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bafd76b9-432a-4a95-80bb-c5420a88413d",
            "latches": [
                "4774d5e3-8959-4292-836a-f63c147febf6"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0f7c9f4b-373a-4353-b726-4aa1c4689bb6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "395b495d-f2b3-4c60-8b09-10bb28b00d9a",
            "latches": []
        },
        {
            "id": "tool",
            "instance": "ac437e61-2f2e-4ac9-9daa-cf12d3399527",
            "properties": [
                [
                    "name",
                    "setuplst.xml"
                ],
                [
                    "description",
                    "CAST-128 encrypted configuration file"
                ],
                [
                    "tool_types",
                    [
                        [
                            "a9edd7a980cf63fe9f87e8e97e2e5f1a",
                            "configuration-file"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "tool_version",
                    null
                ]
            ],
            "anchors": {
                "0": "0db6b69b-bce9-41db-8752-ba589705128d",
                "30": "a6696a8b-fb1d-4af2-81a4-3bb7cc550170",
                "60": "fd2d9342-9916-45ef-896c-d5e4e1522233",
                "90": "53b1f183-cbbf-44fe-b17f-d1b98e448ede",
                "120": "73dbe1a8-7571-41d5-8253-12d2566e03ea",
                "150": "004b1af0-97f1-4647-93f0-feb115e9e23b",
                "180": "76493763-5714-4806-9539-7652c98a1e39",
                "210": "13a1cfef-e029-4978-b007-401c2e380c39",
                "240": "d864a3f8-07f6-4365-ba14-113dc136e5e7",
                "270": "38204c22-98df-4bef-964c-aca8b3676918",
                "300": "3af61372-6674-43c2-9b82-be5f08f92a96",
                "330": "b69a968d-1744-42c0-b85d-608dd31d933d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0db6b69b-bce9-41db-8752-ba589705128d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a6696a8b-fb1d-4af2-81a4-3bb7cc550170",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fd2d9342-9916-45ef-896c-d5e4e1522233",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "53b1f183-cbbf-44fe-b17f-d1b98e448ede",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "73dbe1a8-7571-41d5-8253-12d2566e03ea",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "004b1af0-97f1-4647-93f0-feb115e9e23b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "76493763-5714-4806-9539-7652c98a1e39",
            "latches": [
                "4e776370-c517-4223-bfd8-7d8fc4c96f19"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "13a1cfef-e029-4978-b007-401c2e380c39",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d864a3f8-07f6-4365-ba14-113dc136e5e7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "38204c22-98df-4bef-964c-aca8b3676918",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3af61372-6674-43c2-9b82-be5f08f92a96",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b69a968d-1744-42c0-b85d-608dd31d933d",
            "latches": []
        },
        {
            "id": "action",
            "instance": "0dc5ed20-eec4-409e-8a4f-912fa3bfbb0a",
            "properties": [
                [
                    "name",
                    "Dynamic-link Library Injection"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1055.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe injects the communications DLL (msxhlp.dll) into msedge.exe via CreateRemoteThread API"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "469dcd51-6bae-4607-b553-1457aaaea68e",
                "30": "d80a3834-b255-4136-b5a2-1de308c3f545",
                "60": "acdcb213-0326-4883-b452-c514e80fe5b7",
                "90": "ed5fcd44-aee1-4a96-98d9-66bfd5656cf2",
                "120": "3f77b506-04a3-469f-82ac-15f06efea922",
                "150": "4edd7606-5b64-4837-9a29-ec1050adf144",
                "180": "a6b77b91-28cf-4be0-9a9b-641a75adee22",
                "210": "2bfc8f0c-82f1-4518-b27b-622333cc21e1",
                "240": "a4220bc8-4f6e-4096-8b41-5b9fd56c2f1e",
                "270": "c97d5c51-9738-4912-bba7-bd355fd36c99",
                "300": "97ad6078-2a24-4d35-99b2-9ef665ed8e2c",
                "330": "ae0859f6-f60d-4aef-999d-d23c0448bc8c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "469dcd51-6bae-4607-b553-1457aaaea68e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d80a3834-b255-4136-b5a2-1de308c3f545",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "acdcb213-0326-4883-b452-c514e80fe5b7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ed5fcd44-aee1-4a96-98d9-66bfd5656cf2",
            "latches": [
                "18c9c7a4-eeff-4e90-a7de-938e63bada0f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "3f77b506-04a3-469f-82ac-15f06efea922",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4edd7606-5b64-4837-9a29-ec1050adf144",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a6b77b91-28cf-4be0-9a9b-641a75adee22",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2bfc8f0c-82f1-4518-b27b-622333cc21e1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a4220bc8-4f6e-4096-8b41-5b9fd56c2f1e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c97d5c51-9738-4912-bba7-bd355fd36c99",
            "latches": [
                "0154cdc7-aee1-4bb1-a59b-3186720dc214"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "97ad6078-2a24-4d35-99b2-9ef665ed8e2c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ae0859f6-f60d-4aef-999d-d23c0448bc8c",
            "latches": []
        },
        {
            "id": "action",
            "instance": "7ff0b240-1fe8-46e8-ab47-49b705864b96",
            "properties": [
                [
                    "name",
                    "Web Protocols"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1071.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe connects to prendre-des-vacances.fr over HTTP protocol and communicates with GET and POST requests"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "eab34d4f-e6ec-4fc6-9c81-a7f8090e56b3",
                "30": "385938e7-be14-4fcd-aab1-ab308801f3e6",
                "60": "e13fb94e-9342-40ee-9af5-ba0425ea574d",
                "90": "3c430447-077e-4943-bf39-b448593d274f",
                "120": "752462f2-10a7-4e50-a95b-2850dfd4cda0",
                "150": "90e76cb5-b80b-4eba-8f33-5bad983dfb9b",
                "180": "46a2eb09-47fd-4ba7-beaa-d899625b400e",
                "210": "e99e6fc3-79f1-48ae-a2d3-ea9c346ebd40",
                "240": "a886a417-d7a0-49e0-9dfc-09146be0c99e",
                "270": "1f69b493-93c4-4c00-81fa-9de80f55f34d",
                "300": "87ba2668-cb2c-4e07-b6ae-292cf1897f3f",
                "330": "fedc8145-5b93-4d8c-9ac8-017bf6e0f6af"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "eab34d4f-e6ec-4fc6-9c81-a7f8090e56b3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "385938e7-be14-4fcd-aab1-ab308801f3e6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e13fb94e-9342-40ee-9af5-ba0425ea574d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3c430447-077e-4943-bf39-b448593d274f",
            "latches": [
                "25554fcd-2bcf-4e39-9e04-4d080b1c7558"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "752462f2-10a7-4e50-a95b-2850dfd4cda0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "90e76cb5-b80b-4eba-8f33-5bad983dfb9b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "46a2eb09-47fd-4ba7-beaa-d899625b400e",
            "latches": [
                "71561a58-b62c-444a-ba82-894a0b6ff11f"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "e99e6fc3-79f1-48ae-a2d3-ea9c346ebd40",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a886a417-d7a0-49e0-9dfc-09146be0c99e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1f69b493-93c4-4c00-81fa-9de80f55f34d",
            "latches": [
                "9311fea8-ecce-4570-adf5-a2d2ca72f76b",
                "3d0d941a-0382-4067-bc60-07474fa57782"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "87ba2668-cb2c-4e07-b6ae-292cf1897f3f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fedc8145-5b93-4d8c-9ac8-017bf6e0f6af",
            "latches": []
        },
        {
            "id": "url",
            "instance": "d0b1c8fe-13a6-41e7-96fe-e08b37febccb",
            "properties": [
                [
                    "value",
                    "prendre-des-vacances.fr"
                ]
            ],
            "anchors": {
                "0": "4d4e9499-ad5d-48e7-a3a6-5307caf7f1ae",
                "30": "e5a5694c-5e64-4880-89b4-b32f97d2151f",
                "60": "fce9b4e2-8f59-4aa3-8e79-9e2bb48361f4",
                "90": "bc86aaf9-c8b4-4ca4-9853-80de01f68d96",
                "120": "940edd53-2642-41a3-8f94-496140865be7",
                "150": "69a20147-f184-4c59-aea9-8ecd6e14d543",
                "180": "6e2fc823-e817-41d4-8e91-c035b3adda0a",
                "210": "41345336-d675-40e0-a227-e1a192ab8a46",
                "240": "64f0365d-d25a-4b6c-979c-4256885b1b20",
                "270": "e9afef78-0c41-4fac-a9b5-e2c8019008f3",
                "300": "75a04676-5e20-44e0-a74d-d99c57db9722",
                "330": "054ff540-df9e-4333-a46f-cacd749c70e9"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "4d4e9499-ad5d-48e7-a3a6-5307caf7f1ae",
            "latches": [
                "e64b7f4d-0ae8-4a69-b802-3f98c7ee1ecc"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "e5a5694c-5e64-4880-89b4-b32f97d2151f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fce9b4e2-8f59-4aa3-8e79-9e2bb48361f4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bc86aaf9-c8b4-4ca4-9853-80de01f68d96",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "940edd53-2642-41a3-8f94-496140865be7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "69a20147-f184-4c59-aea9-8ecd6e14d543",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6e2fc823-e817-41d4-8e91-c035b3adda0a",
            "latches": [
                "6beccf68-6e56-45c6-97dc-347b937003e1"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "41345336-d675-40e0-a227-e1a192ab8a46",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "64f0365d-d25a-4b6c-979c-4256885b1b20",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e9afef78-0c41-4fac-a9b5-e2c8019008f3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "75a04676-5e20-44e0-a74d-d99c57db9722",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "054ff540-df9e-4333-a46f-cacd749c70e9",
            "latches": []
        },
        {
            "id": "network_traffic",
            "instance": "57583f62-d4fb-42a0-946e-5bf039dd23eb",
            "properties": [
                [
                    "start",
                    null
                ],
                [
                    "end",
                    null
                ],
                [
                    "is_active",
                    null
                ],
                [
                    "src_port",
                    null
                ],
                [
                    "dst_port",
                    80
                ],
                [
                    "protocols",
                    [
                        [
                            "0a4a447f71df32af1d4338820095a6cb",
                            "HTTP"
                        ]
                    ]
                ],
                [
                    "src_byte_count",
                    null
                ],
                [
                    "dst_byte_count",
                    null
                ],
                [
                    "src_packets",
                    null
                ],
                [
                    "dst_packets",
                    null
                ],
                [
                    "ipfix",
                    null
                ]
            ],
            "anchors": {
                "0": "00ab1a35-17d4-4ae9-bf91-30e2213c03f9",
                "30": "ed79c771-963f-4e06-8eb8-915f2b6bbaca",
                "60": "0e3fb095-e97f-4ee1-a6fd-44c2f37f22ff",
                "90": "6db94c19-d673-4805-9d2f-a940417c4d85",
                "120": "4c881cd4-bbe8-4d63-bec4-194064473a38",
                "150": "32d43fa8-a9c2-4bc7-8395-a7bb432b71c0",
                "180": "fb369b56-4f1c-4ad3-9ee8-5d728576d296",
                "210": "70b8d562-f2a0-452f-a6e6-837325b183e0",
                "240": "e653a1e7-97f2-4aa9-a2d4-f742d9cc8f14",
                "270": "544b2df4-df0e-487b-aef0-217c37854008",
                "300": "33ada986-e4ab-4eb3-9b4d-fa4127a778bb",
                "330": "f85f8474-fccc-480d-af70-4c2130115993"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "00ab1a35-17d4-4ae9-bf91-30e2213c03f9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ed79c771-963f-4e06-8eb8-915f2b6bbaca",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0e3fb095-e97f-4ee1-a6fd-44c2f37f22ff",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6db94c19-d673-4805-9d2f-a940417c4d85",
            "latches": [
                "f0c0b994-9c6c-4655-817e-7eda330893e0"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4c881cd4-bbe8-4d63-bec4-194064473a38",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "32d43fa8-a9c2-4bc7-8395-a7bb432b71c0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fb369b56-4f1c-4ad3-9ee8-5d728576d296",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "70b8d562-f2a0-452f-a6e6-837325b183e0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e653a1e7-97f2-4aa9-a2d4-f742d9cc8f14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "544b2df4-df0e-487b-aef0-217c37854008",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "33ada986-e4ab-4eb3-9b4d-fa4127a778bb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f85f8474-fccc-480d-af70-4c2130115993",
            "latches": []
        },
        {
            "id": "action",
            "instance": "f84e56b2-d28d-4200-985c-39688f12bfc5",
            "properties": [
                [
                    "name",
                    "Asymmetric Cryptography"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1573.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe receives RSA encrypted symmetric key"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "65b1e554-8b93-4d09-a116-f3123a4f7e82",
                "30": "013f8cfe-1aa2-421b-91fd-6e2744780ed0",
                "60": "2a958cc2-0bd4-4aed-9e99-b00c3544112f",
                "90": "c4bdf7fe-9c85-40d2-9985-7f54aa6a5743",
                "120": "30f78f09-8d1a-4f76-b7fa-e70923501944",
                "150": "8d6d6af9-ba8a-4cf2-8bee-3ebf90e948a4",
                "180": "32b1ba76-0333-4903-a773-0704538deee7",
                "210": "e1dda69d-c189-4db6-813b-1204eb707e9e",
                "240": "8242ae73-f952-4b4b-9fac-e776af60156d",
                "270": "5d638aa5-fc36-4748-9612-4a346c93911a",
                "300": "3a3aeaa4-625d-4ea6-ac22-4f815595d0ad",
                "330": "d71fdc62-3086-4702-8250-deaa2467c8a5"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "65b1e554-8b93-4d09-a116-f3123a4f7e82",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "013f8cfe-1aa2-421b-91fd-6e2744780ed0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2a958cc2-0bd4-4aed-9e99-b00c3544112f",
            "latches": [
                "48c90eca-3440-4f37-beab-3a156a1486b1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c4bdf7fe-9c85-40d2-9985-7f54aa6a5743",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "30f78f09-8d1a-4f76-b7fa-e70923501944",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8d6d6af9-ba8a-4cf2-8bee-3ebf90e948a4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "32b1ba76-0333-4903-a773-0704538deee7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e1dda69d-c189-4db6-813b-1204eb707e9e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8242ae73-f952-4b4b-9fac-e776af60156d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5d638aa5-fc36-4748-9612-4a346c93911a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3a3aeaa4-625d-4ea6-ac22-4f815595d0ad",
            "latches": [
                "e66979fe-5eba-4d61-93c7-3d7cd8e5ee54"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "d71fdc62-3086-4702-8250-deaa2467c8a5",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "ceb33404-38f3-489f-9ed8-676d389836ad",
            "properties": [
                [
                    "name",
                    "msxhlp.dll"
                ],
                [
                    "description",
                    "communications library dll; communicates with the C2 server either through a direct C2 channel using HTTP or peer-to-peer C2 communication using named pipes"
                ],
                [
                    "malware_types",
                    [
                        [
                            "5fd22fd3b52ddff55d45c39e0444a910",
                            "backdoor"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "9401cc551b0cee945d62b241cf304d1d",
                            "communicates-with-c2"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "2c94dab9-6781-460b-a388-b5f211a022f5",
                "30": "9e64292c-9c38-43e8-9630-9df93fd708fe",
                "60": "3906bb47-8e8c-4155-a571-4d0d640f36c6",
                "90": "22a869d8-451c-4525-bb3e-c615e472e770",
                "120": "23615666-a5f8-42f7-ba61-d9d798b8b2c4",
                "150": "4028b8f5-3e99-49cb-8c88-21735a57f780",
                "180": "43eaade8-72d5-4391-a8d1-5220d509623e",
                "210": "d3cea50b-c619-45c1-86b9-f4c8c927d2ef",
                "240": "f6d7f746-22b6-4e2c-ae02-827d03a2905e",
                "270": "1ba79c12-ef31-4ed2-8c01-77146d1f1cd1",
                "300": "fcf0fbac-94ab-41c3-9b5b-7f50b86e493b",
                "330": "d5d091f0-124a-483d-ab59-0c7e5fcd2a49"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2c94dab9-6781-460b-a388-b5f211a022f5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9e64292c-9c38-43e8-9630-9df93fd708fe",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3906bb47-8e8c-4155-a571-4d0d640f36c6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "22a869d8-451c-4525-bb3e-c615e472e770",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "23615666-a5f8-42f7-ba61-d9d798b8b2c4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4028b8f5-3e99-49cb-8c88-21735a57f780",
            "latches": [
                "df6edf6c-cce6-4dea-8cf0-56da3893fc58"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "43eaade8-72d5-4391-a8d1-5220d509623e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d3cea50b-c619-45c1-86b9-f4c8c927d2ef",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f6d7f746-22b6-4e2c-ae02-827d03a2905e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1ba79c12-ef31-4ed2-8c01-77146d1f1cd1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fcf0fbac-94ab-41c3-9b5b-7f50b86e493b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d5d091f0-124a-483d-ab59-0c7e5fcd2a49",
            "latches": []
        },
        {
            "id": "action",
            "instance": "5a6daf1e-b3c2-4cb2-bb0f-a6a2ba99f52c",
            "properties": [
                [
                    "name",
                    "Symmetric Cryptography"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1573.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe receives CAST-128 encrypted tasking "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "8232c20f-7074-48ac-8fa5-d6c56cc43acb",
                "30": "9778e662-4da3-405d-addc-cc14b4079425",
                "60": "ad4e3453-0ee9-4723-abe5-a6a2752a76bb",
                "90": "0262da9d-df24-47dc-8b83-cdad07db4d6c",
                "120": "223a8256-71ae-40e8-9ee4-dc28fad17cc8",
                "150": "f9fa9ac6-2c59-46d7-a176-892be1f265d1",
                "180": "385429ff-233a-4943-ab29-241e1ba4ecf7",
                "210": "41d58874-47ba-4ca3-9f4b-7ed0587633a4",
                "240": "6218a2e8-1306-4491-a21f-118cabebbfc4",
                "270": "7ddc99fa-31db-4a63-9cc7-4dea02790c0e",
                "300": "9491b7ab-3871-443d-8424-fbb935ea43b3",
                "330": "c5ec24ac-feb5-497e-8807-68e5d7b5a582"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "8232c20f-7074-48ac-8fa5-d6c56cc43acb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9778e662-4da3-405d-addc-cc14b4079425",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ad4e3453-0ee9-4723-abe5-a6a2752a76bb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0262da9d-df24-47dc-8b83-cdad07db4d6c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "223a8256-71ae-40e8-9ee4-dc28fad17cc8",
            "latches": [
                "aef1d77e-e582-4e35-ad90-5660209e7674"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f9fa9ac6-2c59-46d7-a176-892be1f265d1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "385429ff-233a-4943-ab29-241e1ba4ecf7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "41d58874-47ba-4ca3-9f4b-7ed0587633a4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6218a2e8-1306-4491-a21f-118cabebbfc4",
            "latches": [
                "1fe35aa2-2c82-4522-ad65-5a0b68cb0e43"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "7ddc99fa-31db-4a63-9cc7-4dea02790c0e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9491b7ab-3871-443d-8424-fbb935ea43b3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c5ec24ac-feb5-497e-8807-68e5d7b5a582",
            "latches": []
        },
        {
            "id": "action",
            "instance": "a0002de1-4df1-4c78-bf76-407bbf551e6e",
            "properties": [
                [
                    "name",
                    "System Owner/User Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1033"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe uses CreateProcess API to execute cmd.exe to execute whoami"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "da606c54-c835-4684-a668-4abd25291a67",
                "30": "810c333e-4275-446b-9ee1-9e4a7573f9db",
                "60": "b3620e07-c0a1-4722-ad76-43a596bd0a8b",
                "90": "400f60ee-31ff-470c-aded-e6d25387fa01",
                "120": "e14bb9d9-8a86-4dc6-bc56-32acae2af03e",
                "150": "c90146c1-c49d-4b95-8f53-838cd0898e72",
                "180": "061d439d-3572-455d-a8ea-e81f10f33e0d",
                "210": "60e9d8dd-7f9b-4375-8ed6-5bcded2ccaa1",
                "240": "5688ac0e-81c6-49b3-b49f-a1bf55221410",
                "270": "9a428a27-0bb3-4b38-a2ce-9953ed16fbaf",
                "300": "0b2ddb28-7e55-4093-ba43-f757fafc2baf",
                "330": "105c50da-7107-4703-9664-a2bd0c2a22a9"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "da606c54-c835-4684-a668-4abd25291a67",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "810c333e-4275-446b-9ee1-9e4a7573f9db",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b3620e07-c0a1-4722-ad76-43a596bd0a8b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "400f60ee-31ff-470c-aded-e6d25387fa01",
            "latches": [
                "432110c4-3da9-42ed-a9f2-f7aa027be0b4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "e14bb9d9-8a86-4dc6-bc56-32acae2af03e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c90146c1-c49d-4b95-8f53-838cd0898e72",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "061d439d-3572-455d-a8ea-e81f10f33e0d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "60e9d8dd-7f9b-4375-8ed6-5bcded2ccaa1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5688ac0e-81c6-49b3-b49f-a1bf55221410",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9a428a27-0bb3-4b38-a2ce-9953ed16fbaf",
            "latches": [
                "4953d20f-af79-47a1-aa75-24844cb32bc3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0b2ddb28-7e55-4093-ba43-f757fafc2baf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "105c50da-7107-4703-9664-a2bd0c2a22a9",
            "latches": []
        },
        {
            "id": "action",
            "instance": "01a24a01-0891-495f-b2bf-2faf24a1c0b2",
            "properties": [
                [
                    "name",
                    "Symmetric Cryptography"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1573.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe CAST-128 encrypts task output"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "854fc735-acee-4495-92f0-6443c84d6141",
                "30": "3fbf67b1-958d-456d-9c6c-a45f4e926948",
                "60": "9171f6db-ad64-43e4-acd5-c0a3490313fb",
                "90": "ce949d70-7b9a-4c1b-aec3-138563537a24",
                "120": "287e2645-d473-4ab7-a79e-59a6296d6d82",
                "150": "ced1b4aa-baaa-4d5d-8481-32e126443329",
                "180": "e4ebebe4-febf-40ce-8345-0bd9a952d9d3",
                "210": "7661efa8-2d1b-4220-b08d-8550e48699a1",
                "240": "0c247767-5ac6-45df-bcfe-d99a53ea2fdf",
                "270": "c8c2e936-9493-4a25-be0b-08f67346bb1e",
                "300": "59c8c894-9915-4e34-81db-c7b3f6098576",
                "330": "20012704-033d-4b6f-b727-c0a9dab0bb89"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "854fc735-acee-4495-92f0-6443c84d6141",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fbf67b1-958d-456d-9c6c-a45f4e926948",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9171f6db-ad64-43e4-acd5-c0a3490313fb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ce949d70-7b9a-4c1b-aec3-138563537a24",
            "latches": [
                "7c65661b-843c-4a08-a9ab-2f646efd0d12"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "287e2645-d473-4ab7-a79e-59a6296d6d82",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ced1b4aa-baaa-4d5d-8481-32e126443329",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e4ebebe4-febf-40ce-8345-0bd9a952d9d3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7661efa8-2d1b-4220-b08d-8550e48699a1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0c247767-5ac6-45df-bcfe-d99a53ea2fdf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c8c2e936-9493-4a25-be0b-08f67346bb1e",
            "latches": [
                "a11fa04c-5cfa-48e2-bf9f-b1f84459003e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "59c8c894-9915-4e34-81db-c7b3f6098576",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "20012704-033d-4b6f-b727-c0a9dab0bb89",
            "latches": []
        },
        {
            "id": "action",
            "instance": "a9f72a14-7e67-4bda-b3f1-fc8febe5d5ce",
            "properties": [
                [
                    "name",
                    "Standard Encoding"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1132.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe base64 encodes the CAST-128 encrypted task output"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "4c839939-7cfd-452f-82da-32399e30a9ef",
                "30": "705b7ccf-b839-48e6-bbe4-aec8497dd39f",
                "60": "f399648f-67bd-486f-ba96-7f123146e87e",
                "90": "8266f07b-e9ad-4ddf-bd1a-85a5e0cde717",
                "120": "744d7f81-cdea-44b9-9bb8-8c72be47cf53",
                "150": "f5de265b-0832-4334-b315-b88a9ba6d14a",
                "180": "8008f982-eb85-47e2-a475-f41150665718",
                "210": "6c5b862e-e36c-443b-bb96-fc0fa2ccd58e",
                "240": "3706169c-8583-4f82-9257-3ebafd2952fa",
                "270": "3250fe6f-0bf8-43bd-87de-3a9a7e229d52",
                "300": "46db1ff3-2966-4390-bb46-ee8e1b033c83",
                "330": "b6885c6c-242d-40fb-9f33-7c53167c02d4"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "4c839939-7cfd-452f-82da-32399e30a9ef",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "705b7ccf-b839-48e6-bbe4-aec8497dd39f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f399648f-67bd-486f-ba96-7f123146e87e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8266f07b-e9ad-4ddf-bd1a-85a5e0cde717",
            "latches": [
                "b3825df3-8265-40ce-b942-4c9b098fae2f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "744d7f81-cdea-44b9-9bb8-8c72be47cf53",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f5de265b-0832-4334-b315-b88a9ba6d14a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8008f982-eb85-47e2-a475-f41150665718",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6c5b862e-e36c-443b-bb96-fc0fa2ccd58e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3706169c-8583-4f82-9257-3ebafd2952fa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3250fe6f-0bf8-43bd-87de-3a9a7e229d52",
            "latches": [
                "b8c366a2-4acc-403f-9ff4-8944219012e9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "46db1ff3-2966-4390-bb46-ee8e1b033c83",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b6885c6c-242d-40fb-9f33-7c53167c02d4",
            "latches": []
        },
        {
            "id": "action",
            "instance": "465b48e0-0c8a-43bd-8e90-3f33b4d55341",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads winsas64.bat to the Windows Temp folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "797f9b87-75c9-4452-aaa6-7497064ec890",
                "30": "f139fd41-134c-48b6-9c12-117ed532923c",
                "60": "2d17eaae-8bd3-445d-b602-4765cc3f8d80",
                "90": "30cca1c5-d314-432f-9f50-d7c4a713fdbe",
                "120": "a84c2a2d-9ff4-48ae-b302-1e15e89c41c2",
                "150": "521ad3da-f83c-4fb2-854f-ebae5946a5c0",
                "180": "57148932-80d4-4a3b-8130-fbe63aa1c1ef",
                "210": "868a91c2-e14a-49ac-87f3-1cecb2cbbf59",
                "240": "669f892e-700c-48d7-93ab-d2e476656df7",
                "270": "f10835d6-f61e-4fbf-9e4e-736b90dc929e",
                "300": "cf37aa5b-5473-4b1e-a617-d9a95fcc77d2",
                "330": "f0279fab-0256-43b5-a1ce-e599ddf575eb"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "797f9b87-75c9-4452-aaa6-7497064ec890",
            "latches": [
                "056aa581-f46f-463a-a2e2-ce8305f218ca"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f139fd41-134c-48b6-9c12-117ed532923c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2d17eaae-8bd3-445d-b602-4765cc3f8d80",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "30cca1c5-d314-432f-9f50-d7c4a713fdbe",
            "latches": [
                "0ef47577-6498-445c-94d0-356759bb9cbe"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a84c2a2d-9ff4-48ae-b302-1e15e89c41c2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "521ad3da-f83c-4fb2-854f-ebae5946a5c0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "57148932-80d4-4a3b-8130-fbe63aa1c1ef",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "868a91c2-e14a-49ac-87f3-1cecb2cbbf59",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "669f892e-700c-48d7-93ab-d2e476656df7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f10835d6-f61e-4fbf-9e4e-736b90dc929e",
            "latches": [
                "2b3fdf2e-276a-4d56-a7ca-418b67b38ff9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cf37aa5b-5473-4b1e-a617-d9a95fcc77d2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f0279fab-0256-43b5-a1ce-e599ddf575eb",
            "latches": []
        },
        {
            "id": "action",
            "instance": "71dd65f1-45e6-4f6f-8249-6a7909eb4b13",
            "properties": [
                [
                    "name",
                    "Windows Command Shell"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0002"
                        ],
                        [
                            "technique",
                            "T1059.003"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe executes winsas64.bat"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "72cffa80-9563-41ba-b331-0d2c5380c817",
                "30": "9ba36d77-d834-4ff4-bf6a-9acc55ca7423",
                "60": "25efbead-d443-476a-b6cf-4313a0cd31c5",
                "90": "433ed215-b140-46c6-9554-ab6c79a77521",
                "120": "360c5e11-a596-4519-9e04-f6dbbae40341",
                "150": "55101d22-93a2-4594-9331-bd4a387e4029",
                "180": "1cacd951-e91f-4c7a-b6ed-430a5b123540",
                "210": "14bf81fe-89a0-4b2a-b911-cedee3b0f8d1",
                "240": "fbb26261-9c26-4fd0-bf49-c57da9a8637a",
                "270": "b9a7128c-f8ab-45c5-bd8c-2f0a97623084",
                "300": "2140ffac-e116-400c-8527-065d92d63771",
                "330": "66e19c26-aaeb-44cb-ab6b-9d154029efeb"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "72cffa80-9563-41ba-b331-0d2c5380c817",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9ba36d77-d834-4ff4-bf6a-9acc55ca7423",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "25efbead-d443-476a-b6cf-4313a0cd31c5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "433ed215-b140-46c6-9554-ab6c79a77521",
            "latches": [
                "aceef139-7147-48d0-a999-8106e65a2312"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "360c5e11-a596-4519-9e04-f6dbbae40341",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "55101d22-93a2-4594-9331-bd4a387e4029",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1cacd951-e91f-4c7a-b6ed-430a5b123540",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "14bf81fe-89a0-4b2a-b911-cedee3b0f8d1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fbb26261-9c26-4fd0-bf49-c57da9a8637a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b9a7128c-f8ab-45c5-bd8c-2f0a97623084",
            "latches": [
                "836e93a0-944e-42cf-bf10-eae5a8bba7aa"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2140ffac-e116-400c-8527-065d92d63771",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "66e19c26-aaeb-44cb-ab6b-9d154029efeb",
            "latches": []
        },
        {
            "id": "action",
            "instance": "df9288f1-4d96-49f7-9a5a-963fa77d0389",
            "properties": [
                [
                    "name",
                    "Password Spraying"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0006"
                        ],
                        [
                            "technique",
                            "T1110.003"
                        ]
                    ]
                ],
                [
                    "description",
                    "winsas64.bat sprays several weak passwords against domain admin accounts. Using Frieda's plaintext password, the C:\\ drive of the domain controller is successfully mounted"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "dcd23dc6-6034-4ff4-ac47-498fcc980ed3",
                "30": "0752e4dc-21b1-45d9-9b11-a635cff0611c",
                "60": "d4cd7904-f61d-4878-87ea-9bfb615b6ec8",
                "90": "abd99975-8b6b-4c7e-89aa-439e4b1be8bd",
                "120": "b643c68f-f88b-4420-87c6-750165711618",
                "150": "aaeb2bba-2e29-4660-b182-63ca4df4d4b7",
                "180": "94771edf-2c96-431e-b0e2-35407b1cd368",
                "210": "0f0c2c22-98a8-4328-9903-79d83e11dbed",
                "240": "9b5e3b2c-8284-4241-9bd5-ceaff63f5b68",
                "270": "bb5b819e-870e-46a6-ace4-101e8fee5188",
                "300": "26cd1f98-0012-4406-954d-1bd1af30b776",
                "330": "f3fa1f27-24ad-4699-b898-ae55e38354f8"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "dcd23dc6-6034-4ff4-ac47-498fcc980ed3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0752e4dc-21b1-45d9-9b11-a635cff0611c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d4cd7904-f61d-4878-87ea-9bfb615b6ec8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "abd99975-8b6b-4c7e-89aa-439e4b1be8bd",
            "latches": [
                "cc461922-ae71-4ca3-9b4b-9d31dde21f1f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b643c68f-f88b-4420-87c6-750165711618",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "aaeb2bba-2e29-4660-b182-63ca4df4d4b7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "94771edf-2c96-431e-b0e2-35407b1cd368",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0f0c2c22-98a8-4328-9903-79d83e11dbed",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9b5e3b2c-8284-4241-9bd5-ceaff63f5b68",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bb5b819e-870e-46a6-ace4-101e8fee5188",
            "latches": [
                "a596cbc0-d844-409f-a77e-c47b2c8b9833"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "26cd1f98-0012-4406-954d-1bd1af30b776",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f3fa1f27-24ad-4699-b898-ae55e38354f8",
            "latches": []
        },
        {
            "id": "action",
            "instance": "b235d21a-daba-487e-a5fe-4f034056c50e",
            "properties": [
                [
                    "name",
                    "File Deletion"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1070.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe spawns cmd.exe to delete winsas64.bat"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "a98dfae2-c7de-4138-ac34-7ccf52e803ef",
                "30": "1e4411c9-0b85-49ad-95d7-46367c503854",
                "60": "f29ade77-c975-4cea-a160-c3fdbf6dcc87",
                "90": "8e49ee17-7f93-4767-a9b2-6e38759f82f2",
                "120": "43d4341b-678d-4f54-b2e9-96753e9d4622",
                "150": "ed7477bb-2f6b-4fb3-bdbd-6ec9280b22f7",
                "180": "006e3386-e166-464f-9113-d204221a302f",
                "210": "ccbfdbb1-27b8-450e-a38b-86ee0b162ce5",
                "240": "b301e4b5-943a-4fcc-b10b-c92a62a83b0b",
                "270": "c2954940-db3d-4d4a-9c35-e5f0aa7910bc",
                "300": "8d63fcfd-3164-4498-b85e-f0bfe1539403",
                "330": "70641970-d759-4e4e-94ad-cc3bea8d1573"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "a98dfae2-c7de-4138-ac34-7ccf52e803ef",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e4411c9-0b85-49ad-95d7-46367c503854",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f29ade77-c975-4cea-a160-c3fdbf6dcc87",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8e49ee17-7f93-4767-a9b2-6e38759f82f2",
            "latches": [
                "a239cfc1-273b-469b-abbd-d1e84c8d90ae"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "43d4341b-678d-4f54-b2e9-96753e9d4622",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ed7477bb-2f6b-4fb3-bdbd-6ec9280b22f7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "006e3386-e166-464f-9113-d204221a302f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ccbfdbb1-27b8-450e-a38b-86ee0b162ce5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b301e4b5-943a-4fcc-b10b-c92a62a83b0b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c2954940-db3d-4d4a-9c35-e5f0aa7910bc",
            "latches": [
                "fa6980c0-b422-4f7c-9155-ee5e514d1679"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "8d63fcfd-3164-4498-b85e-f0bfe1539403",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "70641970-d759-4e4e-94ad-cc3bea8d1573",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ddad5941-ff0d-4104-927d-9a5cd88d7189",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe creates C:\\Windows\\Temp\\wmimetricsq.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "7152c8bc-465d-4def-ba8f-fc73ff770120",
                "30": "a638c479-08bb-464f-b417-8066327e47ba",
                "60": "9b2fcfc7-75f9-449a-92d3-60984c19f66e",
                "90": "195812bb-0f3e-41a5-bbeb-0390cdcaa736",
                "120": "ddc0235c-3942-4dff-bec6-4ab2df9c5e09",
                "150": "d9c95708-7591-473e-a8e7-aafa71b8bd53",
                "180": "afabd988-3625-46ee-9789-44985e19d085",
                "210": "5a19eada-5543-432e-8c46-ab6344b5cbc1",
                "240": "fdb9a187-efa1-46fd-bba4-cb058dd81c1d",
                "270": "971b9026-0c0e-4273-bdab-eec4a29d3669",
                "300": "de83e2a2-d251-42da-af65-7894c3e73acd",
                "330": "605cb7e5-ca35-458f-b30f-19f90bb92162"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "7152c8bc-465d-4def-ba8f-fc73ff770120",
            "latches": [
                "f7005300-8aa8-491b-b4b6-0d3dc8618d53"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a638c479-08bb-464f-b417-8066327e47ba",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9b2fcfc7-75f9-449a-92d3-60984c19f66e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "195812bb-0f3e-41a5-bbeb-0390cdcaa736",
            "latches": [
                "7d2988e2-7aba-4639-9df3-d277a6acb534"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ddc0235c-3942-4dff-bec6-4ab2df9c5e09",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d9c95708-7591-473e-a8e7-aafa71b8bd53",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "afabd988-3625-46ee-9789-44985e19d085",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5a19eada-5543-432e-8c46-ab6344b5cbc1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fdb9a187-efa1-46fd-bba4-cb058dd81c1d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "971b9026-0c0e-4273-bdab-eec4a29d3669",
            "latches": [
                "22005518-c680-4bec-bee7-a4188836607f",
                "42fa7cad-6acb-49de-86e7-df0b5c93357c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "de83e2a2-d251-42da-af65-7894c3e73acd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "605cb7e5-ca35-458f-b30f-19f90bb92162",
            "latches": []
        },
        {
            "id": "action",
            "instance": "1115ca53-8e01-450f-9b08-372af94613ce",
            "properties": [
                [
                    "name",
                    "Lateral Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0008"
                        ],
                        [
                            "technique",
                            "T1570"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe moves C:\\Windows\\Temp\\wmimetricsq.exe to \\\\bannik\\C$\\Windows\\System32"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ed3274fc-0542-4b7d-b8bb-c32f7545e8da",
                "30": "b06d0666-47e4-40d8-ab10-325130f04d1e",
                "60": "97149fd8-a294-4a58-8e7a-129f70100bd1",
                "90": "baac87a4-6e6f-422d-87bd-665cda10ddea",
                "120": "41761b12-9832-42fb-9f5d-db17d515323a",
                "150": "bff858a4-8d5e-4911-9031-54d11d6ed991",
                "180": "66a66517-6a43-4ef6-981a-cb3ea1501567",
                "210": "dd6eb677-9537-4bc2-981d-c68524c73c00",
                "240": "f4f2756c-16d1-44f0-8092-9f879e9d374a",
                "270": "87ffa8ca-b81a-4131-8f10-81c70b623557",
                "300": "32dc2f62-ae8e-4b25-bbd3-8edbff1c6841",
                "330": "40495f52-78f1-49c1-8d78-2f13e1f84374"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ed3274fc-0542-4b7d-b8bb-c32f7545e8da",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b06d0666-47e4-40d8-ab10-325130f04d1e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "97149fd8-a294-4a58-8e7a-129f70100bd1",
            "latches": [
                "5f962ba3-b943-4e93-88ec-2f558ba978df"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "baac87a4-6e6f-422d-87bd-665cda10ddea",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "41761b12-9832-42fb-9f5d-db17d515323a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bff858a4-8d5e-4911-9031-54d11d6ed991",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "66a66517-6a43-4ef6-981a-cb3ea1501567",
            "latches": [
                "a14a0d0c-9901-41d0-8b9e-4c12b2d1a09b"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "dd6eb677-9537-4bc2-981d-c68524c73c00",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f4f2756c-16d1-44f0-8092-9f879e9d374a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "87ffa8ca-b81a-4131-8f10-81c70b623557",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "32dc2f62-ae8e-4b25-bbd3-8edbff1c6841",
            "latches": [
                "1d42b885-eeb6-4477-82d4-32457831ac05"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "40495f52-78f1-49c1-8d78-2f13e1f84374",
            "latches": []
        },
        {
            "id": "action",
            "instance": "a12b4799-1f17-4b8c-9497-8d12a29e76bf",
            "properties": [
                [
                    "name",
                    "Scheduled Task"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1053.005"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe remotely enumerates, modifies, and executes a scheduled task - \\Microsoft\\Windows\\Customer Experience Improvement Program\\Consolidator - on BANNIK"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "943171c4-5276-4092-9870-5a61fa619340",
                "30": "b0fd259e-ce24-4ef2-b0bc-01e578005648",
                "60": "ef920923-31c1-49d2-b376-a5da2c248269",
                "90": "d2698bef-3ad6-455e-82ed-9a5b1824f6f8",
                "120": "3772a86d-84ca-47d1-b44f-4b23ed0a9c4e",
                "150": "ee8c80b5-36dc-44eb-bf5b-807e10fa8d4b",
                "180": "835206d8-afe7-43ce-b7fc-4d616c0dd1fe",
                "210": "1c0fdf36-8199-415f-a785-5ee59adc934d",
                "240": "14bcfb25-f0c7-4dfb-a523-211fd5d2f8e9",
                "270": "a253ff98-8dfd-47d9-bfa4-df4ccdd9b6c1",
                "300": "63540064-645a-4f0f-adc3-2676961dacdd",
                "330": "777630e1-d8bb-4e8c-bb09-e5635bd410dd"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "943171c4-5276-4092-9870-5a61fa619340",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b0fd259e-ce24-4ef2-b0bc-01e578005648",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ef920923-31c1-49d2-b376-a5da2c248269",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d2698bef-3ad6-455e-82ed-9a5b1824f6f8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3772a86d-84ca-47d1-b44f-4b23ed0a9c4e",
            "latches": [
                "01b9ad89-5021-4d8d-b1b3-dcf0a3695443"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ee8c80b5-36dc-44eb-bf5b-807e10fa8d4b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "835206d8-afe7-43ce-b7fc-4d616c0dd1fe",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1c0fdf36-8199-415f-a785-5ee59adc934d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "14bcfb25-f0c7-4dfb-a523-211fd5d2f8e9",
            "latches": [
                "5b8c1b16-29b6-495c-9562-766268676219"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a253ff98-8dfd-47d9-bfa4-df4ccdd9b6c1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "63540064-645a-4f0f-adc3-2676961dacdd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "777630e1-d8bb-4e8c-bb09-e5635bd410dd",
            "latches": []
        },
        {
            "id": "action",
            "instance": "e29d1661-7554-4e82-a89f-450acb5c18bb",
            "properties": [
                [
                    "name",
                    "Internal Proxy"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1090.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe uses peer-to-peer communication over a named pipe - dsnap - through the first CARBON DLL implant on HOBGOBLIN"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "4d57f1e9-6025-4184-990d-961fc290ec17",
                "30": "4bbf4ca2-055a-47b0-9160-03b1f12ae1e0",
                "60": "81a15f0d-9470-4d6c-a7f8-ef44d8cc045d",
                "90": "604f7188-ad91-4e14-a4de-14e4db34fd45",
                "120": "87c6e121-bcdb-41ad-a088-654cda284a1a",
                "150": "26efa237-6815-4a7e-822b-16d25bfc0bc9",
                "180": "a14b7b83-dc33-4707-9631-834d322c8a5c",
                "210": "367d6c66-1cc4-4358-bbe2-df49cf583846",
                "240": "e59b4de7-0413-407a-95f4-101bead32a20",
                "270": "1147b6be-f106-449a-9571-a328ef06042b",
                "300": "a4994534-5f03-49ee-a257-91f00f4d4ab2",
                "330": "19bab7aa-074d-43ed-8f41-f8920b516085"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "4d57f1e9-6025-4184-990d-961fc290ec17",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4bbf4ca2-055a-47b0-9160-03b1f12ae1e0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "81a15f0d-9470-4d6c-a7f8-ef44d8cc045d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "604f7188-ad91-4e14-a4de-14e4db34fd45",
            "latches": [
                "e8378b21-b44e-477e-939f-9c7d0812b02c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "87c6e121-bcdb-41ad-a088-654cda284a1a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "26efa237-6815-4a7e-822b-16d25bfc0bc9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a14b7b83-dc33-4707-9631-834d322c8a5c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "367d6c66-1cc4-4358-bbe2-df49cf583846",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e59b4de7-0413-407a-95f4-101bead32a20",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1147b6be-f106-449a-9571-a328ef06042b",
            "latches": [
                "50af796f-6201-4e4a-921d-2585b703b05c",
                "919b5953-80dd-42fb-9790-760d3a217fcc"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a4994534-5f03-49ee-a257-91f00f4d4ab2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "19bab7aa-074d-43ed-8f41-f8920b516085",
            "latches": []
        },
        {
            "id": "action",
            "instance": "9f9c3ab6-12a8-44de-8fb8-19a2a5a53dfa",
            "properties": [
                [
                    "name",
                    "Domain Groups"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1069.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to enumerate all groups in the domain"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "eaa06dd9-cce2-461a-b8fe-c210376a7eb3",
                "30": "14bd2985-a94c-4c4b-a644-bc3e41944759",
                "60": "98345ebf-15cc-4330-b746-d0e6699f2982",
                "90": "06fafb90-06f5-4b36-856f-41426869db56",
                "120": "fd15add5-ef18-43f8-bf79-20ce12f4ae95",
                "150": "3137f64d-30df-477d-b681-806af89a4660",
                "180": "8d16b55d-fd92-47a0-9fdf-3dac694ba993",
                "210": "bdf67089-c53a-408b-9b55-7d805ec4bf01",
                "240": "b8505ae9-7bff-4e6f-b24b-818b15b5102e",
                "270": "ae28b3a9-f19b-4951-9b20-afe67b8f38ae",
                "300": "f12bacee-ee84-4dbf-ae7e-ff405bb7a2a7",
                "330": "10c8ed1e-0f65-4732-a5df-ac367517258e"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "eaa06dd9-cce2-461a-b8fe-c210376a7eb3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "14bd2985-a94c-4c4b-a644-bc3e41944759",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "98345ebf-15cc-4330-b746-d0e6699f2982",
            "latches": [
                "71b182eb-b528-4dd0-8b54-402f9ddaec3f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "06fafb90-06f5-4b36-856f-41426869db56",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fd15add5-ef18-43f8-bf79-20ce12f4ae95",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3137f64d-30df-477d-b681-806af89a4660",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8d16b55d-fd92-47a0-9fdf-3dac694ba993",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bdf67089-c53a-408b-9b55-7d805ec4bf01",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b8505ae9-7bff-4e6f-b24b-818b15b5102e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ae28b3a9-f19b-4951-9b20-afe67b8f38ae",
            "latches": [
                "e68041c4-9b15-45df-ae6b-18a89611cacb"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f12bacee-ee84-4dbf-ae7e-ff405bb7a2a7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "10c8ed1e-0f65-4732-a5df-ac367517258e",
            "latches": []
        },
        {
            "id": "action",
            "instance": "76f1da1f-d530-4eab-a283-9457194f3baa",
            "properties": [
                [
                    "name",
                    "Remote System Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1018"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to enumerate the Active Directory Computers"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "0b43afef-dbde-46d8-813a-62e55ea9197b",
                "30": "24c68497-41c5-4327-b446-9a2387e29e09",
                "60": "244e92ad-0bea-4ec0-85e1-a391611bef86",
                "90": "bdacccbd-5e44-4bd3-af61-8af7458d2a59",
                "120": "3585069b-6480-48f4-bfa4-17b59d15c89b",
                "150": "eb859f30-3647-401a-a3a1-b4093050b5f7",
                "180": "0b2f055d-73e7-461b-b09c-9aafe69ccef1",
                "210": "43a66dba-f465-47b7-a925-12e5068f6122",
                "240": "90b03520-c7a7-4beb-997b-91203fdd5afa",
                "270": "c2ffe5f8-80d7-4f63-85c2-a4b9583f6da4",
                "300": "01837777-0ac2-435e-8d25-8b7f3d1689bb",
                "330": "c4426665-b0c9-4fa9-95d0-16b8cd54b998"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0b43afef-dbde-46d8-813a-62e55ea9197b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "24c68497-41c5-4327-b446-9a2387e29e09",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "244e92ad-0bea-4ec0-85e1-a391611bef86",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bdacccbd-5e44-4bd3-af61-8af7458d2a59",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3585069b-6480-48f4-bfa4-17b59d15c89b",
            "latches": [
                "64e55356-d21b-41fd-a30d-f1cee0883121"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb859f30-3647-401a-a3a1-b4093050b5f7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0b2f055d-73e7-461b-b09c-9aafe69ccef1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "43a66dba-f465-47b7-a925-12e5068f6122",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "90b03520-c7a7-4beb-997b-91203fdd5afa",
            "latches": [
                "37a8dfe8-2019-40e1-9dd0-e4750e28c0e1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c2ffe5f8-80d7-4f63-85c2-a4b9583f6da4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "01837777-0ac2-435e-8d25-8b7f3d1689bb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c4426665-b0c9-4fa9-95d0-16b8cd54b998",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "3bfa8d52-32c9-4001-a213-7ef9ff06e74b",
            "properties": [
                [
                    "description",
                    "When the scheduled task is executed, the attacker successfully moves to BANNIK, where the user has opened a browser (msedge.exe)"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "5c276e88-ad9f-4dc7-8c0a-647b913aee7e",
                "30": "bab6af92-d15f-473f-99f9-5945cb202d67",
                "60": "9f0a7968-b164-42a9-81c8-df08299af6f2",
                "90": "7feaff50-36b9-45c0-8c3c-d41fb671e2dd",
                "120": "52e57b35-ac6d-426e-b41b-104f5ea07c62",
                "150": "1e350ad2-54c6-4972-a0dd-0e78ad76a404",
                "180": "a2351ef1-4f9d-490d-9057-3f45f07b221a",
                "210": "ec9990fe-76f8-44a8-9899-c99b6b4f9f3d",
                "330": "ac6e99c7-8f53-416e-84ca-597c776f5eee",
                "branch:True": "c7ea3f1c-44ca-4411-abe3-66ffda40d115",
                "branch:False": "502658b8-023f-4225-b16f-a8cee2879367"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5c276e88-ad9f-4dc7-8c0a-647b913aee7e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bab6af92-d15f-473f-99f9-5945cb202d67",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9f0a7968-b164-42a9-81c8-df08299af6f2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7feaff50-36b9-45c0-8c3c-d41fb671e2dd",
            "latches": [
                "0f736779-bf95-480d-b27a-033a6d48db3f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "52e57b35-ac6d-426e-b41b-104f5ea07c62",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e350ad2-54c6-4972-a0dd-0e78ad76a404",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a2351ef1-4f9d-490d-9057-3f45f07b221a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec9990fe-76f8-44a8-9899-c99b6b4f9f3d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ac6e99c7-8f53-416e-84ca-597c776f5eee",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c7ea3f1c-44ca-4411-abe3-66ffda40d115",
            "latches": [
                "bfd5e55e-54ee-46bf-9ba6-a751b3685488"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "502658b8-023f-4225-b16f-a8cee2879367",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "af046f51-6908-474e-9cf0-3796d37d6b0d",
            "properties": [
                [
                    "description",
                    "The attacker identifies an Apache web server and the workstation of the administrator of the Apache web server (Adalwolfa)"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "11e0ea25-53f1-4f55-8400-d696441ccf26",
                "30": "b94d6a5a-c82a-473f-8ffe-c91ff7e2065e",
                "60": "a70e4745-9de9-42b2-a6b3-e1e680e0c04e",
                "90": "b4fc006d-99da-4fb0-b1e9-349e14b21b77",
                "120": "5fc34c0e-43f3-4561-a3fa-89e728bf584a",
                "150": "2272e2dd-84c2-483a-b158-561fee2b5021",
                "180": "0c900c90-a553-4317-9924-138d65e72b5f",
                "210": "7966a392-a8b0-4d4b-9a8c-ed329435ed0a",
                "330": "7ed065be-bc0e-4ff4-a188-ac1aba346b16",
                "branch:True": "3b07be39-8f34-4191-92ec-7e6a9d0bee27",
                "branch:False": "0789cff8-2f3a-48d6-82dd-2ad7b6d28726"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "11e0ea25-53f1-4f55-8400-d696441ccf26",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b94d6a5a-c82a-473f-8ffe-c91ff7e2065e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a70e4745-9de9-42b2-a6b3-e1e680e0c04e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b4fc006d-99da-4fb0-b1e9-349e14b21b77",
            "latches": [
                "28e549c8-cff7-4bbd-bc7a-34e53aa7f332"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5fc34c0e-43f3-4561-a3fa-89e728bf584a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2272e2dd-84c2-483a-b158-561fee2b5021",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0c900c90-a553-4317-9924-138d65e72b5f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7966a392-a8b0-4d4b-9a8c-ed329435ed0a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7ed065be-bc0e-4ff4-a188-ac1aba346b16",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3b07be39-8f34-4191-92ec-7e6a9d0bee27",
            "latches": [
                "fc077a68-ad3c-4298-a3df-6cc5a66bc867"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0789cff8-2f3a-48d6-82dd-2ad7b6d28726",
            "latches": []
        },
        {
            "id": "action",
            "instance": "6a6ab413-862c-499c-873a-ff97ece68044",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads mimikatz to the Temp folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ecee0708-46cb-423c-8e96-2aab9b721e7a",
                "30": "acd9afb9-e11d-44fd-957b-84d827ba0aac",
                "60": "4689d558-f8ce-4374-b785-f4a2864939a0",
                "90": "e180fbc0-2382-4c8d-87c9-0117440863b2",
                "120": "876f76a2-1314-4114-866b-c4f5e12e6d0b",
                "150": "4c303c9b-f1c0-4382-ab92-f0711a373d42",
                "180": "2733eb7d-6799-4201-8fe6-76225410d793",
                "210": "49d94df6-20ef-4c32-953d-c19ff70111ec",
                "240": "0f405e56-016f-4851-a9e5-874e3a7f28cf",
                "270": "48f43a22-b3c8-4fe5-9659-f16c59b4e1ee",
                "300": "09cb789f-3e3b-4f32-8ec9-a92a6df09f99",
                "330": "4f1fc4fb-aa10-4288-a3c1-5fca487aaa45"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ecee0708-46cb-423c-8e96-2aab9b721e7a",
            "latches": [
                "990e180e-357f-4832-be38-61d7fe7340f6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "acd9afb9-e11d-44fd-957b-84d827ba0aac",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4689d558-f8ce-4374-b785-f4a2864939a0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e180fbc0-2382-4c8d-87c9-0117440863b2",
            "latches": [
                "43db07f4-4b8d-4373-8e59-38d65bcc1b9b"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "876f76a2-1314-4114-866b-c4f5e12e6d0b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4c303c9b-f1c0-4382-ab92-f0711a373d42",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2733eb7d-6799-4201-8fe6-76225410d793",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "49d94df6-20ef-4c32-953d-c19ff70111ec",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0f405e56-016f-4851-a9e5-874e3a7f28cf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "48f43a22-b3c8-4fe5-9659-f16c59b4e1ee",
            "latches": [
                "4034a5fc-bacb-4728-8c9b-070cbc0a92b1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "09cb789f-3e3b-4f32-8ec9-a92a6df09f99",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4f1fc4fb-aa10-4288-a3c1-5fca487aaa45",
            "latches": []
        },
        {
            "id": "tool",
            "instance": "9ba17838-ce01-45a9-a8e7-9795724ade94",
            "properties": [
                [
                    "name",
                    "terabox.exe"
                ],
                [
                    "description",
                    "Mimikatz"
                ],
                [
                    "tool_types",
                    [
                        [
                            "681c94a24c81da9758e67f3549eda102",
                            "credential-exploitation"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "tool_version",
                    null
                ]
            ],
            "anchors": {
                "0": "0da2f430-7f06-459b-bfe3-a02744b932cd",
                "30": "b2c8517d-8140-4e7f-80f2-f9db6d74be35",
                "60": "0506ba9c-a83c-45f0-ba8e-7a62312c9138",
                "90": "d9536e8f-be7e-498f-9f57-95371d439f8f",
                "120": "073f2ca5-4d3e-4ed5-a57c-22bf969ceddb",
                "150": "9597a0c8-09f1-47ce-b2f3-a1a68ecfdb90",
                "180": "5ea17e5c-1a7e-41db-9886-926a9642b785",
                "210": "26a6145f-d3b4-481f-9532-2b111086b366",
                "240": "d16273f9-05e5-4ee5-9441-cde4c07f0ab8",
                "270": "a5735490-d6aa-4b30-b7b3-d89a3d61da1b",
                "300": "ce94d890-be92-4c3b-9de6-bd83f13bc768",
                "330": "5ca739e9-5d82-4346-ba53-c0d829b83f56"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0da2f430-7f06-459b-bfe3-a02744b932cd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b2c8517d-8140-4e7f-80f2-f9db6d74be35",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0506ba9c-a83c-45f0-ba8e-7a62312c9138",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d9536e8f-be7e-498f-9f57-95371d439f8f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "073f2ca5-4d3e-4ed5-a57c-22bf969ceddb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9597a0c8-09f1-47ce-b2f3-a1a68ecfdb90",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5ea17e5c-1a7e-41db-9886-926a9642b785",
            "latches": [
                "1248114d-1f5f-45f3-a4ef-7b26eab11e1c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "26a6145f-d3b4-481f-9532-2b111086b366",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d16273f9-05e5-4ee5-9441-cde4c07f0ab8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a5735490-d6aa-4b30-b7b3-d89a3d61da1b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ce94d890-be92-4c3b-9de6-bd83f13bc768",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5ca739e9-5d82-4346-ba53-c0d829b83f56",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ff604248-f53b-4a3c-921e-c337f6faf6a2",
            "properties": [
                [
                    "name",
                    "Match Legitimate Name or Location"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1036.005"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe moves terabox.exe to the System32 folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "576afd88-d2a7-4dcb-937d-3aa1de2fc079",
                "30": "c5cab7c6-d681-4b14-b600-6ffedb072471",
                "60": "ff8ecf2a-ca26-406f-b67f-7db18387ffb6",
                "90": "aa2cec6f-7e0f-4da6-a05b-6b819b0a846d",
                "120": "c055a046-9540-4b80-9921-e8fd201389d2",
                "150": "0d809a1f-4689-4e9e-b4d1-1c606267b2d1",
                "180": "cc55a369-2317-4f77-91cb-9a66a13c2877",
                "210": "94339dbf-f23f-474d-b032-03a264e8771e",
                "240": "a4cf145d-100f-404c-b7b6-9f259894e727",
                "270": "c430b8ce-aa01-4eb5-8b89-3a80654dcd9c",
                "300": "f8b23828-3625-4a42-a5f4-3e67cec6c1b1",
                "330": "0c40f42b-cf7e-4d5a-9014-45555a6025d8"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "576afd88-d2a7-4dcb-937d-3aa1de2fc079",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c5cab7c6-d681-4b14-b600-6ffedb072471",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ff8ecf2a-ca26-406f-b67f-7db18387ffb6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "aa2cec6f-7e0f-4da6-a05b-6b819b0a846d",
            "latches": [
                "9ada2ad7-29b5-414d-a059-aaa85dfb2ee5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c055a046-9540-4b80-9921-e8fd201389d2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0d809a1f-4689-4e9e-b4d1-1c606267b2d1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cc55a369-2317-4f77-91cb-9a66a13c2877",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "94339dbf-f23f-474d-b032-03a264e8771e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a4cf145d-100f-404c-b7b6-9f259894e727",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c430b8ce-aa01-4eb5-8b89-3a80654dcd9c",
            "latches": [
                "ad72f532-48ee-49b5-a780-865187ef92b5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f8b23828-3625-4a42-a5f4-3e67cec6c1b1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0c40f42b-cf7e-4d5a-9014-45555a6025d8",
            "latches": []
        },
        {
            "id": "action",
            "instance": "48c31894-6b07-46e7-889b-c49ab0d78b03",
            "properties": [
                [
                    "name",
                    "OS Credential Dumping"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0006"
                        ],
                        [
                            "technique",
                            "T1003"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe executes terabox.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "de72ced7-85e4-42aa-a7c7-ba7ba1e1920e",
                "30": "014db0c8-8fc4-4c20-b805-cb5a10d7b190",
                "60": "4e991cc6-b972-4dd8-a2bf-afdf374879ae",
                "90": "6e8fc059-5c1b-446d-9a9b-a552d7ae339b",
                "120": "0ae9b75d-cf99-47d6-a953-ebe89c5ee4d9",
                "150": "103c8a7e-bb88-462f-99fe-107073966837",
                "180": "cc4aec66-7493-41cc-8503-aad4585df321",
                "210": "8be41018-79a4-49cc-b08a-8dd660a9e52e",
                "240": "3da22229-d757-46ec-901f-f763d6461e18",
                "270": "93233279-2a2b-4b99-9bcb-0be478537943",
                "300": "0cddc433-9a17-4ced-9ddd-339bed0e6d77",
                "330": "21bb367d-fc03-47da-afd5-34514d639756"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "de72ced7-85e4-42aa-a7c7-ba7ba1e1920e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "014db0c8-8fc4-4c20-b805-cb5a10d7b190",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4e991cc6-b972-4dd8-a2bf-afdf374879ae",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6e8fc059-5c1b-446d-9a9b-a552d7ae339b",
            "latches": [
                "d4cfab62-797a-4096-9821-7b8982892812"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0ae9b75d-cf99-47d6-a953-ebe89c5ee4d9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "103c8a7e-bb88-462f-99fe-107073966837",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cc4aec66-7493-41cc-8503-aad4585df321",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8be41018-79a4-49cc-b08a-8dd660a9e52e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3da22229-d757-46ec-901f-f763d6461e18",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "93233279-2a2b-4b99-9bcb-0be478537943",
            "latches": [
                "42983167-999b-49aa-bfc5-2c562a568ac0"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0cddc433-9a17-4ced-9ddd-339bed0e6d77",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "21bb367d-fc03-47da-afd5-34514d639756",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "331f943a-95a2-49c1-894a-36b28656e112",
            "properties": [
                [
                    "description",
                    "Adalwolfa is logged in to their workstation and opens the Edge browser. Mimikatz reveals a cached NTLM hash for the admin user Adalwolfa."
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "46704113-921b-4e24-8c30-212cde2f4b41",
                "30": "b22afc0c-2b66-40fb-9605-736f08d1198b",
                "60": "3fd9031e-bf7b-42a0-b7ac-996399294132",
                "90": "79031bb9-e2c3-48b1-ab82-40b7776399fe",
                "120": "cb09efbe-6d7e-4750-b2c6-da5a5d726a5f",
                "150": "1e348cbf-11dd-4d9e-aebc-313d02cb699a",
                "180": "784cb6b1-39f3-4bbe-bcb5-aab70cdef9f8",
                "210": "49c1bdf8-fcad-4d3f-9f9e-9aa3dba28d44",
                "330": "202486fb-1cd9-4067-849a-b732bfdbd162",
                "branch:True": "60070403-23fd-43ea-b9da-8576ba2ab1e7",
                "branch:False": "da3e58ed-d1e0-4c04-a498-81c254bb02c5"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "46704113-921b-4e24-8c30-212cde2f4b41",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b22afc0c-2b66-40fb-9605-736f08d1198b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3fd9031e-bf7b-42a0-b7ac-996399294132",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "79031bb9-e2c3-48b1-ab82-40b7776399fe",
            "latches": [
                "cb19d225-855d-4166-8021-00258cbac784"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cb09efbe-6d7e-4750-b2c6-da5a5d726a5f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e348cbf-11dd-4d9e-aebc-313d02cb699a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "784cb6b1-39f3-4bbe-bcb5-aab70cdef9f8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "49c1bdf8-fcad-4d3f-9f9e-9aa3dba28d44",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "202486fb-1cd9-4067-849a-b732bfdbd162",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "60070403-23fd-43ea-b9da-8576ba2ab1e7",
            "latches": [
                "216fb572-262b-4d0f-9e20-75484b92bace",
                "351ab945-fe60-4ca4-bdec-fb54c879f93c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "da3e58ed-d1e0-4c04-a498-81c254bb02c5",
            "latches": []
        },
        {
            "id": "action",
            "instance": "78054e85-b18f-487b-8770-23b5e23f5edf",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads PsExec to the Temp folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ac5f3945-784a-4ede-8436-b1144229cc41",
                "30": "7a5ce51e-8f11-4cf6-a3b9-c988a122e4b9",
                "60": "2fbd5b7c-b2a0-44be-bf33-b14774b0d34f",
                "90": "d727da09-fb9c-4c30-a8fb-19a7a4d0f0ff",
                "120": "688e59a2-f97a-4d22-9126-69a4c0fd3a05",
                "150": "29a06369-de0d-45fc-90ce-3c5436730f53",
                "180": "e66dac98-af06-4d08-bb78-47466130b1e2",
                "210": "13a3688f-cdb6-49fe-a40c-5e1c4a149b77",
                "240": "0ecce14b-3d60-4402-a05b-d251a835b37f",
                "270": "dd033a89-e8cd-413a-82ca-ad111225ee61",
                "300": "5b4c9e95-5cef-45f7-90f9-4c7fc50718f2",
                "330": "17de6b69-8aea-4f32-bddf-1775c4c4feed"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ac5f3945-784a-4ede-8436-b1144229cc41",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7a5ce51e-8f11-4cf6-a3b9-c988a122e4b9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2fbd5b7c-b2a0-44be-bf33-b14774b0d34f",
            "latches": [
                "2447ff5e-0fd5-4a61-b5e6-253d0934c1b8"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "d727da09-fb9c-4c30-a8fb-19a7a4d0f0ff",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "688e59a2-f97a-4d22-9126-69a4c0fd3a05",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "29a06369-de0d-45fc-90ce-3c5436730f53",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e66dac98-af06-4d08-bb78-47466130b1e2",
            "latches": [
                "8e329478-ea2e-4b71-a0ee-d16899bf3a47"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "13a3688f-cdb6-49fe-a40c-5e1c4a149b77",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0ecce14b-3d60-4402-a05b-d251a835b37f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dd033a89-e8cd-413a-82ca-ad111225ee61",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5b4c9e95-5cef-45f7-90f9-4c7fc50718f2",
            "latches": [
                "65835389-1e70-4076-ad47-a3283fdd3b29"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "17de6b69-8aea-4f32-bddf-1775c4c4feed",
            "latches": []
        },
        {
            "id": "tool",
            "instance": "f6a360e9-017f-4e9e-a622-b244e580dc7b",
            "properties": [
                [
                    "name",
                    "wsqsp.exe"
                ],
                [
                    "description",
                    "PsExec"
                ],
                [
                    "tool_types",
                    [
                        [
                            "6bcddfb734163672c086a52dc496d0c5",
                            "remote-access"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "tool_version",
                    null
                ]
            ],
            "anchors": {
                "0": "bc5a0639-c185-405c-9722-f58ca3a70772",
                "30": "41371502-2ac4-433a-bad3-06d00773185d",
                "60": "0840fc72-0c47-48f4-b899-753eee45f77f",
                "90": "09907907-5e09-472f-a8c8-b1067e9081be",
                "120": "fb3834ce-9e66-4c27-afef-cba2b9de37d3",
                "150": "73b2bc83-caa8-4f36-b33a-e683a4d85ca7",
                "180": "1e97bb5b-5dff-4985-b61d-a523a64ced23",
                "210": "9e01663a-54d8-4c41-8a96-ce7aac3e7df7",
                "240": "e95811ca-a320-44e5-a93a-17b49cab019e",
                "270": "88e473f1-e8c8-4a7b-8eb7-bc6f97dd1fb9",
                "300": "cf42a5f6-f795-4ac5-9b52-0c670202fbab",
                "330": "9e26ab70-980d-42d5-b276-d13b1c898c7b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "bc5a0639-c185-405c-9722-f58ca3a70772",
            "latches": [
                "d251d854-3857-44d5-8d19-ec437fc9a229"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "41371502-2ac4-433a-bad3-06d00773185d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0840fc72-0c47-48f4-b899-753eee45f77f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "09907907-5e09-472f-a8c8-b1067e9081be",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fb3834ce-9e66-4c27-afef-cba2b9de37d3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "73b2bc83-caa8-4f36-b33a-e683a4d85ca7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e97bb5b-5dff-4985-b61d-a523a64ced23",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9e01663a-54d8-4c41-8a96-ce7aac3e7df7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e95811ca-a320-44e5-a93a-17b49cab019e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "88e473f1-e8c8-4a7b-8eb7-bc6f97dd1fb9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cf42a5f6-f795-4ac5-9b52-0c670202fbab",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9e26ab70-980d-42d5-b276-d13b1c898c7b",
            "latches": []
        },
        {
            "id": "action",
            "instance": "964e994c-a8f0-41e0-a951-7d6df4b9a9f1",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads wsqmanager.exe to the Temp folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "2166b68c-8d25-46a8-bf3c-543202a82137",
                "30": "4f95e351-e68e-48bd-826f-d6c668b41179",
                "60": "fb6d455d-bf77-45df-94e6-157cc429f76f",
                "90": "936d736b-c4c9-4839-81d9-476b7868a088",
                "120": "49afadb8-5742-4f6f-b999-6d734652dad2",
                "150": "cd0472b4-49d4-4c91-92e7-b06901d03bd2",
                "180": "7be96321-4641-492f-893f-07edf5e6874d",
                "210": "600a29e0-bb19-4a46-abb2-a0c0081e0e73",
                "240": "03c23f1b-4fd4-4352-9278-d1f1acbe009c",
                "270": "c38fc91e-90ad-45d4-bb76-38741e039d92",
                "300": "29f9075c-7c15-4982-8e95-8501c8a9c5ae",
                "330": "606e7510-dc51-4d2a-9226-bf3cc5209786"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2166b68c-8d25-46a8-bf3c-543202a82137",
            "latches": [
                "04512c24-e432-4ac8-895f-530f812b640f"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "4f95e351-e68e-48bd-826f-d6c668b41179",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fb6d455d-bf77-45df-94e6-157cc429f76f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "936d736b-c4c9-4839-81d9-476b7868a088",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "49afadb8-5742-4f6f-b999-6d734652dad2",
            "latches": [
                "904c4056-af02-4bd3-95b4-53b947d6af92"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "cd0472b4-49d4-4c91-92e7-b06901d03bd2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7be96321-4641-492f-893f-07edf5e6874d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "600a29e0-bb19-4a46-abb2-a0c0081e0e73",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "03c23f1b-4fd4-4352-9278-d1f1acbe009c",
            "latches": [
                "a0ac9132-c4d8-46c5-9bfd-39c1a36b4aa2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c38fc91e-90ad-45d4-bb76-38741e039d92",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "29f9075c-7c15-4982-8e95-8501c8a9c5ae",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "606e7510-dc51-4d2a-9226-bf3cc5209786",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "7e5c41d5-df6f-49ea-84cf-1fe900b9fd6f",
            "properties": [
                [
                    "name",
                    "wsqmanager.exe"
                ],
                [
                    "description",
                    "CARBON-DLL Installer - drops setuplst.xml, MSSVCCFG.dll, mressvc.dll, & msxhlp.dll"
                ],
                [
                    "malware_types",
                    [
                        [
                            "35db2c1fec0964ffa50e418ffad12ae7",
                            "dropper"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "89cc07a0f301892cb2788965014bde4e",
                            "installs-other-components"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "6f53895f-ded6-470b-9e19-9c89f03511aa",
                "30": "ba3af3e6-34d6-4bbc-bca7-8878268de5a5",
                "60": "1cf9fa67-6a24-4b26-9a47-8595b38fdc06",
                "90": "e542a60c-81eb-4cbf-886a-c5b7b3eb229a",
                "120": "fff29cd8-f3f6-4232-ac43-83b0a7e978ad",
                "150": "7900cbb2-a9fd-4d1b-8329-1fcf370180f2",
                "180": "428acf76-84fd-4616-a6b9-3e3ecd04f1d8",
                "210": "7c68002a-6f82-411c-a622-7dd0c9031601",
                "240": "460a510c-1ea4-4a80-82d8-93d6e7b2f383",
                "270": "d490fa29-a0fd-4b95-808f-467a7bf04e35",
                "300": "cf7aad8e-1c77-4667-a847-9b2f136c8a8f",
                "330": "b4480530-6540-4251-929d-0841ae56686b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6f53895f-ded6-470b-9e19-9c89f03511aa",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ba3af3e6-34d6-4bbc-bca7-8878268de5a5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1cf9fa67-6a24-4b26-9a47-8595b38fdc06",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e542a60c-81eb-4cbf-886a-c5b7b3eb229a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fff29cd8-f3f6-4232-ac43-83b0a7e978ad",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7900cbb2-a9fd-4d1b-8329-1fcf370180f2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "428acf76-84fd-4616-a6b9-3e3ecd04f1d8",
            "latches": [
                "96927131-72e6-4477-b290-281a02205040"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7c68002a-6f82-411c-a622-7dd0c9031601",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "460a510c-1ea4-4a80-82d8-93d6e7b2f383",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d490fa29-a0fd-4b95-808f-467a7bf04e35",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cf7aad8e-1c77-4667-a847-9b2f136c8a8f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b4480530-6540-4251-929d-0841ae56686b",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "3c222ff8-ceb3-4a48-9beb-b4862857541b",
            "properties": [
                [
                    "name",
                    "WinResSvc.exe"
                ],
                [
                    "description",
                    "CARBON-DLL Installer - drops setuplst.xml, MSSVCCFG.dll, mressvc.dll, & msxhlp.dll"
                ],
                [
                    "malware_types",
                    [
                        [
                            "5b1765c2c07c7b278ecf25a22c30ff0f",
                            "dropper"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "09632d54b51934578a933f7f843e938d",
                            "installs-other-components"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "6facd5ec-4543-4177-bc0a-18d1e49138f7",
                "30": "4b629fc8-9610-46b8-8fe3-6c8752c7c1b6",
                "60": "6464b872-0304-46cd-8826-4eee95dd692a",
                "90": "40352d76-6c0a-46a8-834d-b50a25d167d3",
                "120": "4689e41c-2dd3-4b71-90c6-9fa1628f9cfc",
                "150": "3d097fed-5d14-4689-9e1e-db6342e29ffe",
                "180": "e5a4b409-0d3a-4808-b228-d183a6c89c0b",
                "210": "f3b1d7db-7f58-4890-9c69-1e5add1aa2d0",
                "240": "379a7e1d-4248-40eb-af09-e4c96eb19770",
                "270": "a0e7e7ee-85ba-4a12-95e3-9d71029640ec",
                "300": "6ece1fa9-234a-4165-a3aa-b42c34551b6d",
                "330": "9b3e6e16-6916-4887-be28-245527aeed80"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6facd5ec-4543-4177-bc0a-18d1e49138f7",
            "latches": [
                "8dbb865f-cf98-47a0-83ee-8522b03b8016",
                "a8dfd907-e8e9-43df-a521-4718aebd87b4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "4b629fc8-9610-46b8-8fe3-6c8752c7c1b6",
            "latches": [
                "27cd8873-ffe8-47e5-80ba-c2874d76b598"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6464b872-0304-46cd-8826-4eee95dd692a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "40352d76-6c0a-46a8-834d-b50a25d167d3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4689e41c-2dd3-4b71-90c6-9fa1628f9cfc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3d097fed-5d14-4689-9e1e-db6342e29ffe",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e5a4b409-0d3a-4808-b228-d183a6c89c0b",
            "latches": [
                "31a9fd22-96ad-4432-a27a-917b823b22c2"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f3b1d7db-7f58-4890-9c69-1e5add1aa2d0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "379a7e1d-4248-40eb-af09-e4c96eb19770",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a0e7e7ee-85ba-4a12-95e3-9d71029640ec",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6ece1fa9-234a-4165-a3aa-b42c34551b6d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9b3e6e16-6916-4887-be28-245527aeed80",
            "latches": [
                "07253906-a51c-4915-98a4-0abd9c5367ce"
            ]
        },
        {
            "id": "action",
            "instance": "02db09d2-4a6b-4822-93cf-3356185a4de8",
            "properties": [
                [
                    "name",
                    "Use Alternative authentication Material: Pass the Hash"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0008"
                        ],
                        [
                            "technique",
                            "T1550.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe executes terabox.exe to pass-the-hash with Adalwolfa's NTLM hash"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "f1df3574-1f1f-460a-976d-311e8d3e8399",
                "30": "f0a06cbe-0417-428a-8a64-81df1300acbc",
                "60": "0c304e2b-8f44-4a25-8283-51c4c0d6bc70",
                "90": "7c3622b9-222c-4f61-b899-0c4bd6c79913",
                "120": "78318cee-0bc5-4059-a87a-951f91e5cea0",
                "150": "f50c7135-35b4-442e-bd83-65e662b9dcfb",
                "180": "0a707767-e1d8-4807-8c9f-264c20d305a9",
                "210": "e263c447-1840-46a9-8785-e780c8d2e41c",
                "240": "b82befce-4fba-4e1d-948a-3e90bc17c799",
                "270": "67c59787-9d7c-49b6-9363-d327a42287a1",
                "300": "43c99d2b-000e-491d-a7bb-ce40f561dd2c",
                "330": "36f4a08f-dd11-4852-9c4b-2185298e6f11"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "f1df3574-1f1f-460a-976d-311e8d3e8399",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f0a06cbe-0417-428a-8a64-81df1300acbc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0c304e2b-8f44-4a25-8283-51c4c0d6bc70",
            "latches": [
                "13e0efd5-f751-45e6-b5b9-1173fa341e0e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "7c3622b9-222c-4f61-b899-0c4bd6c79913",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "78318cee-0bc5-4059-a87a-951f91e5cea0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f50c7135-35b4-442e-bd83-65e662b9dcfb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0a707767-e1d8-4807-8c9f-264c20d305a9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e263c447-1840-46a9-8785-e780c8d2e41c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b82befce-4fba-4e1d-948a-3e90bc17c799",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "67c59787-9d7c-49b6-9363-d327a42287a1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "43c99d2b-000e-491d-a7bb-ce40f561dd2c",
            "latches": [
                "6552763e-7f30-4103-8b3d-82a739b29758"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "36f4a08f-dd11-4852-9c4b-2185298e6f11",
            "latches": []
        },
        {
            "id": "action",
            "instance": "b3dc5a50-e699-4327-a06f-700e54b1c00c",
            "properties": [
                [
                    "name",
                    "Lateral Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0008"
                        ],
                        [
                            "technique",
                            "T1570"
                        ]
                    ]
                ],
                [
                    "description",
                    "the Carbon DLL Installer is copied to Adalwolfa's workstation (KHABIBULIN). PsExec executes the CARBON DLL Installer"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "d0be6042-04b8-4ec6-a3c7-f7c2cf50e669",
                "30": "bd49f3d1-9f31-4191-a4e5-6d133dc23165",
                "60": "252c6e3e-becc-47c2-a0a4-05ad528cbbff",
                "90": "7bfe0ac5-40a8-4ba7-ad2d-a3a1a8198b81",
                "120": "d0f79b38-b5eb-4ce7-bc2f-f235e6560eb8",
                "150": "1e45ebc5-7dfd-4c9e-877d-2ded38821c4b",
                "180": "5caab805-2804-4a42-b2e5-37bb0db82bfa",
                "210": "4ef35ac3-9efd-43dc-9697-c46cfc84806a",
                "240": "8bfc2abd-f60b-4a72-bdde-8370582e4bdf",
                "270": "c3b44379-fd08-4ea6-8ed1-720470415c14",
                "300": "4616f159-a76e-42a1-a3a6-ccb04f54700f",
                "330": "ac130216-be70-4167-a596-0ba572d7c853"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d0be6042-04b8-4ec6-a3c7-f7c2cf50e669",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bd49f3d1-9f31-4191-a4e5-6d133dc23165",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "252c6e3e-becc-47c2-a0a4-05ad528cbbff",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7bfe0ac5-40a8-4ba7-ad2d-a3a1a8198b81",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d0f79b38-b5eb-4ce7-bc2f-f235e6560eb8",
            "latches": [
                "5d4aac7a-eedf-4ae1-a61f-6108ac06f6a1"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e45ebc5-7dfd-4c9e-877d-2ded38821c4b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5caab805-2804-4a42-b2e5-37bb0db82bfa",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4ef35ac3-9efd-43dc-9697-c46cfc84806a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8bfc2abd-f60b-4a72-bdde-8370582e4bdf",
            "latches": [
                "c4ff4180-1cf0-42ec-ba25-0fc9dbb0837c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c3b44379-fd08-4ea6-8ed1-720470415c14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4616f159-a76e-42a1-a3a6-ccb04f54700f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ac130216-be70-4167-a596-0ba572d7c853",
            "latches": []
        },
        {
            "id": "action",
            "instance": "93fc9ea4-a42d-4608-a066-2ba72ef81743",
            "properties": [
                [
                    "name",
                    "Web Protocols"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1071.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe connects to eunewswire.eu over HTTP protocol"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "46ee471e-4523-40ad-b8a1-c5ed90407927",
                "30": "a544e66a-e19f-4ea9-b713-8b4928e6a3a7",
                "60": "93eb8891-62f2-4dcb-ad81-08a8781b27b6",
                "90": "7e9a6091-4239-46f7-b20e-8606378c4d8f",
                "120": "4125fce0-6a52-424a-be27-c29b2334b6fa",
                "150": "982b6611-4453-4a0b-94c1-be20db7851a9",
                "180": "8c92b043-34e1-4823-870e-26358943e8fb",
                "210": "e245b1ea-e87f-411e-9181-b6b4162b8c5f",
                "240": "a1913a2c-e9f8-4fbd-80e9-99711f598da2",
                "270": "5cf6f4b9-24ae-45f8-9f77-e16d8e5fd4cc",
                "300": "c388734f-1a27-40fd-bfe0-0e90c89758d7",
                "330": "6ed885dc-87f3-4bdd-bf0f-edc78437e3e2"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "46ee471e-4523-40ad-b8a1-c5ed90407927",
            "latches": [
                "ac2dad04-87e4-44bb-bb98-b30030daa547"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a544e66a-e19f-4ea9-b713-8b4928e6a3a7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "93eb8891-62f2-4dcb-ad81-08a8781b27b6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7e9a6091-4239-46f7-b20e-8606378c4d8f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4125fce0-6a52-424a-be27-c29b2334b6fa",
            "latches": [
                "39ef87d4-a7f6-4b66-8030-0f22486c1bfc"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "982b6611-4453-4a0b-94c1-be20db7851a9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8c92b043-34e1-4823-870e-26358943e8fb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e245b1ea-e87f-411e-9181-b6b4162b8c5f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a1913a2c-e9f8-4fbd-80e9-99711f598da2",
            "latches": [
                "a0505e83-6dd0-4ef1-a53a-26d07dd77699"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5cf6f4b9-24ae-45f8-9f77-e16d8e5fd4cc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c388734f-1a27-40fd-bfe0-0e90c89758d7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6ed885dc-87f3-4bdd-bf0f-edc78437e3e2",
            "latches": []
        },
        {
            "id": "url",
            "instance": "114ce8e7-5f14-49ed-a14b-8b975574928f",
            "properties": [
                [
                    "value",
                    "eunewswire.eu"
                ]
            ],
            "anchors": {
                "0": "b52e9e47-1135-4a31-8b28-d4609031b592",
                "30": "98c28293-6362-467e-9052-28a324610301",
                "60": "999dbec1-e40f-46f9-854c-0112cb33da79",
                "90": "fb6ac494-d9e8-4e7d-9d26-c836b57cb87a",
                "120": "44ac7bae-f315-4457-badd-792121a6d89a",
                "150": "b328a300-d5a3-45f3-9a09-80b05a930058",
                "180": "5da41e74-ad3b-4ea9-922e-a63d4c8fe172",
                "210": "d4b96980-23ae-4780-8d6e-750a5ec89d8b",
                "240": "b622a8d3-1551-45a3-aa99-217091b15682",
                "270": "5cfd16f1-490a-401c-b5be-0fa358774791",
                "300": "a1afd609-a548-4e97-810e-cd029b977bc4",
                "330": "1af8f340-12dd-4848-ab52-7814b7e38e4f"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b52e9e47-1135-4a31-8b28-d4609031b592",
            "latches": [
                "1f31d67b-56cb-4d15-9633-ddc62ff66e42"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "98c28293-6362-467e-9052-28a324610301",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "999dbec1-e40f-46f9-854c-0112cb33da79",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fb6ac494-d9e8-4e7d-9d26-c836b57cb87a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "44ac7bae-f315-4457-badd-792121a6d89a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b328a300-d5a3-45f3-9a09-80b05a930058",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5da41e74-ad3b-4ea9-922e-a63d4c8fe172",
            "latches": [
                "c4e8e26c-4f0f-46cb-a85b-8b01318ffbac"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "d4b96980-23ae-4780-8d6e-750a5ec89d8b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b622a8d3-1551-45a3-aa99-217091b15682",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5cfd16f1-490a-401c-b5be-0fa358774791",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a1afd609-a548-4e97-810e-cd029b977bc4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1af8f340-12dd-4848-ab52-7814b7e38e4f",
            "latches": []
        },
        {
            "id": "network_traffic",
            "instance": "37225277-74cf-4fdc-ad3c-cf909b5665d9",
            "properties": [
                [
                    "start",
                    null
                ],
                [
                    "end",
                    null
                ],
                [
                    "is_active",
                    null
                ],
                [
                    "src_port",
                    null
                ],
                [
                    "dst_port",
                    80
                ],
                [
                    "protocols",
                    [
                        [
                            "6d1e1edbb62b1895f3d8eee03e74dccf",
                            "HTTP"
                        ]
                    ]
                ],
                [
                    "src_byte_count",
                    null
                ],
                [
                    "dst_byte_count",
                    null
                ],
                [
                    "src_packets",
                    null
                ],
                [
                    "dst_packets",
                    null
                ],
                [
                    "ipfix",
                    null
                ]
            ],
            "anchors": {
                "0": "8906a3f7-beb7-4ed8-91dd-e5f4e427ab80",
                "30": "55d3c273-9b49-45f3-bd1d-7a7c0839fc76",
                "60": "a76eba3d-a620-4af6-a50c-21b8ed2cedad",
                "90": "22fef4e9-c780-43d4-8952-0d25656983d8",
                "120": "9b15a539-23b0-4a50-a16e-cdb87efbe076",
                "150": "1c3d9c4c-1ed7-4ecd-9264-9dc3f97f2ab8",
                "180": "31233bef-eae4-4a34-bbbf-2844091630f4",
                "210": "d5059cf2-e21a-4504-b44c-b10533373177",
                "240": "caa25ca3-867e-4ff2-a3d5-97947c672663",
                "270": "6ae93079-8f8f-416b-a7f7-55078a739aed",
                "300": "b571198e-ed45-4443-9f95-cda60c0a9a81",
                "330": "12ef2944-dcbe-4afc-9a68-e9dbb1f6a21c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "8906a3f7-beb7-4ed8-91dd-e5f4e427ab80",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "55d3c273-9b49-45f3-bd1d-7a7c0839fc76",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a76eba3d-a620-4af6-a50c-21b8ed2cedad",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "22fef4e9-c780-43d4-8952-0d25656983d8",
            "latches": [
                "9c1da37c-7e06-42b4-9595-11b193c51752"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9b15a539-23b0-4a50-a16e-cdb87efbe076",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1c3d9c4c-1ed7-4ecd-9264-9dc3f97f2ab8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "31233bef-eae4-4a34-bbbf-2844091630f4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d5059cf2-e21a-4504-b44c-b10533373177",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "caa25ca3-867e-4ff2-a3d5-97947c672663",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6ae93079-8f8f-416b-a7f7-55078a739aed",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b571198e-ed45-4443-9f95-cda60c0a9a81",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "12ef2944-dcbe-4afc-9a68-e9dbb1f6a21c",
            "latches": []
        },
        {
            "id": "action",
            "instance": "54504110-d800-434e-ac35-b393c0d04358",
            "properties": [
                [
                    "name",
                    "File Deletion"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1070.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe deletes terabox.exe, wsqsp.exe, and wsqmanager.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "912feb5f-c10d-43ba-9c7c-27e376442902",
                "30": "ac0cfb14-0642-4db6-bbf0-fcd73be8a0c3",
                "60": "ce5ffe46-569d-4ca0-92a4-300fc0146282",
                "90": "037f607c-0e23-4802-8072-91ddbf70cb34",
                "120": "86cb64c0-98fb-46b3-8065-adba69f2cf9e",
                "150": "0abe85aa-43c6-4b11-9934-140e03e1b5a7",
                "180": "0aac4be8-a60d-4ca1-a6e0-52d5a2039147",
                "210": "c4447cfe-a58a-48c9-8a3c-382d770a683b",
                "240": "6b8d34ca-6903-4e8d-a84c-a62f30acf7a3",
                "270": "602d159f-7946-45f0-9258-34c6d449b34a",
                "300": "83cb7ff1-af5a-4386-924e-1f1fed963194",
                "330": "55824bc1-c75b-4ed1-a60f-133d9ceb621e"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "912feb5f-c10d-43ba-9c7c-27e376442902",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ac0cfb14-0642-4db6-bbf0-fcd73be8a0c3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ce5ffe46-569d-4ca0-92a4-300fc0146282",
            "latches": [
                "abf3cb24-0b64-4614-9e7b-9aeec4eb62b2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "037f607c-0e23-4802-8072-91ddbf70cb34",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "86cb64c0-98fb-46b3-8065-adba69f2cf9e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0abe85aa-43c6-4b11-9934-140e03e1b5a7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0aac4be8-a60d-4ca1-a6e0-52d5a2039147",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c4447cfe-a58a-48c9-8a3c-382d770a683b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6b8d34ca-6903-4e8d-a84c-a62f30acf7a3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "602d159f-7946-45f0-9258-34c6d449b34a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "83cb7ff1-af5a-4386-924e-1f1fed963194",
            "latches": [
                "2a4f12de-4ec1-47f7-a922-36df09d53f2d"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "55824bc1-c75b-4ed1-a60f-133d9ceb621e",
            "latches": []
        },
        {
            "id": "action",
            "instance": "b43c700d-47de-4c38-a6d7-f414c7c0d030",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads wingtsvcupdt.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "5e913a3c-9bbf-4eb0-aa26-e2e59166839d",
                "30": "293e2fba-1744-4378-b16c-e6b4d9f54ada",
                "60": "75851e3a-f06a-48aa-9dbe-d562ddcba573",
                "90": "40d2a3e8-6979-4e03-a960-6d6588878816",
                "120": "eb1c4cae-a6da-42a3-a404-36a339eb4d91",
                "150": "11bc20b2-2fcf-4f86-aa8a-ae380dbee073",
                "180": "b1164cea-e9dd-461e-b45c-9f916685c975",
                "210": "eb0d4f75-d948-400e-a19e-733da60ddbd1",
                "240": "6a49d260-fffa-4f05-beb3-19b0c611337a",
                "270": "ab2d0311-2d58-497e-bf82-528db392e00a",
                "300": "0b3666bf-5c42-4627-8b78-738ebd3a095d",
                "330": "8a6ee872-272a-4c24-8593-b7abc24d5e11"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5e913a3c-9bbf-4eb0-aa26-e2e59166839d",
            "latches": [
                "dc583961-0c90-48b7-a371-e116a25adfb4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "293e2fba-1744-4378-b16c-e6b4d9f54ada",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "75851e3a-f06a-48aa-9dbe-d562ddcba573",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "40d2a3e8-6979-4e03-a960-6d6588878816",
            "latches": [
                "df309418-040a-4a9f-9ace-248bfec403d5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "eb1c4cae-a6da-42a3-a404-36a339eb4d91",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "11bc20b2-2fcf-4f86-aa8a-ae380dbee073",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b1164cea-e9dd-461e-b45c-9f916685c975",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb0d4f75-d948-400e-a19e-733da60ddbd1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6a49d260-fffa-4f05-beb3-19b0c611337a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ab2d0311-2d58-497e-bf82-528db392e00a",
            "latches": [
                "3348b23f-789f-43d7-aac1-0e9644924d58"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0b3666bf-5c42-4627-8b78-738ebd3a095d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8a6ee872-272a-4c24-8593-b7abc24d5e11",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d61bcea4-01b9-4f5b-9adf-f5d5a2275013",
            "properties": [
                [
                    "name",
                    "Keylogging"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0009"
                        ],
                        [
                            "technique",
                            "T1056.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "wingtsvcupdt.exe logs keystrokes to %temp%\\~DFA512.tmp"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "5b730378-b335-443c-836a-ee0190506f47",
                "30": "93dbb8d0-4b22-4118-a828-1054804347ce",
                "60": "515243bb-9a0e-4298-9e7e-f2d3ae7134fb",
                "90": "eb7fca3f-9a86-4bb7-ab66-69db832f9634",
                "120": "bda9f568-c26b-43ce-b6b7-b27fc658dc64",
                "150": "93a60f9a-b144-4621-84cc-8c914577fb00",
                "180": "776f25b8-762f-44d0-924b-fe0bf56a80e0",
                "210": "3cccdd8a-4595-4972-a38c-69d48629244d",
                "240": "ad0ea8db-d078-490a-9842-78b976211ef4",
                "270": "cb1399cd-d8e4-40dc-83f3-a2814d07b959",
                "300": "01f19a7d-b16d-466c-ab10-122373291bd2",
                "330": "c1ca7e81-4837-4c10-a011-9ebf2d8d193c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5b730378-b335-443c-836a-ee0190506f47",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "93dbb8d0-4b22-4118-a828-1054804347ce",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "515243bb-9a0e-4298-9e7e-f2d3ae7134fb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "eb7fca3f-9a86-4bb7-ab66-69db832f9634",
            "latches": [
                "32014236-3c07-45a3-ac91-b40c9780add2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "bda9f568-c26b-43ce-b6b7-b27fc658dc64",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "93a60f9a-b144-4621-84cc-8c914577fb00",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "776f25b8-762f-44d0-924b-fe0bf56a80e0",
            "latches": [
                "bff8d8f2-4269-4d82-b920-8b557b87f44c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3cccdd8a-4595-4972-a38c-69d48629244d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ad0ea8db-d078-490a-9842-78b976211ef4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cb1399cd-d8e4-40dc-83f3-a2814d07b959",
            "latches": [
                "037c2534-1390-42a5-a206-0c5ac081800d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "01f19a7d-b16d-466c-ab10-122373291bd2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c1ca7e81-4837-4c10-a011-9ebf2d8d193c",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "b2dc5abb-7d7c-473d-b124-0aaf23c3ea47",
            "properties": [
                [
                    "name",
                    "wingtsvcupdt.exe"
                ],
                [
                    "description",
                    "custom keylogger binary used to collect SSH credentials"
                ],
                [
                    "malware_types",
                    [
                        [
                            "49795374899c4adfb312d4700e320868",
                            "keylogger"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "false"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "9775cf3b93c87243288b6fcd80573f2c",
                            "steals-authentication-credentials"
                        ],
                        [
                            "6c5fa5a8388178c9c256b55a3e75adfe",
                            "logs-keystrokes"
                        ],
                        [
                            "8f0368516359bb03b2a9f40857708ce5",
                            "captures-input-peripherals"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "b2e3f10d-e2b3-4803-b162-82e4e1e3259f",
                "30": "743124af-12b0-4dfd-bcec-3591256a094e",
                "60": "9628c6f6-87b0-48da-8645-6d72074f8479",
                "90": "d29f17b7-900f-42d8-a5cc-39274a853fb9",
                "120": "a4537ffb-8b5a-44b3-83d1-9c06b88f965b",
                "150": "fb53ba93-5357-4631-8cc3-034e587b99cd",
                "180": "9f6d055b-abf5-43a1-8ef3-fa9e538fbeb1",
                "210": "f61a7309-d5ab-45d4-97e0-acfceb049a6b",
                "240": "2df7f29a-f893-42e2-860e-010aa21b0fef",
                "270": "a8aed54f-9429-4ecf-a6e3-e29a993a240f",
                "300": "484f8a6a-5aed-4f82-b128-b5f87d625c24",
                "330": "347f27b4-6c1c-467b-ac6e-0c60ffa2368a"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b2e3f10d-e2b3-4803-b162-82e4e1e3259f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "743124af-12b0-4dfd-bcec-3591256a094e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9628c6f6-87b0-48da-8645-6d72074f8479",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d29f17b7-900f-42d8-a5cc-39274a853fb9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a4537ffb-8b5a-44b3-83d1-9c06b88f965b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fb53ba93-5357-4631-8cc3-034e587b99cd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9f6d055b-abf5-43a1-8ef3-fa9e538fbeb1",
            "latches": [
                "be0c7da3-fd39-487d-982e-1d38a1fdb87b"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f61a7309-d5ab-45d4-97e0-acfceb049a6b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2df7f29a-f893-42e2-860e-010aa21b0fef",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a8aed54f-9429-4ecf-a6e3-e29a993a240f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "484f8a6a-5aed-4f82-b128-b5f87d625c24",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "347f27b4-6c1c-467b-ac6e-0c60ffa2368a",
            "latches": []
        },
        {
            "id": "file",
            "instance": "8b005c54-e446-4a17-99d0-1892ad4d7373",
            "properties": [
                [
                    "name",
                    "%temp%\\~DFA512.tmp"
                ],
                [
                    "name_enc",
                    null
                ],
                [
                    "size",
                    null
                ],
                [
                    "hashes",
                    []
                ],
                [
                    "magic_number_hex",
                    null
                ],
                [
                    "mime_type",
                    null
                ],
                [
                    "ctime",
                    null
                ],
                [
                    "mtime",
                    null
                ],
                [
                    "atime",
                    null
                ]
            ],
            "anchors": {
                "0": "83b50620-5de6-435b-9a32-19345393ae9a",
                "30": "37e6f744-c7cc-413f-88be-b1b7da51f712",
                "60": "51327203-c71b-4ed0-9ac3-a17a84572c79",
                "90": "91831676-4167-4b34-8686-d6d64041e13a",
                "120": "02cf290c-57e4-4ee0-a2fe-8f110279510c",
                "150": "d19044cf-53fe-47b5-a30b-1422c3dc04ee",
                "180": "b4327783-5cfb-43d8-a652-9b4513c41565",
                "210": "fef18a54-bfc7-404e-b43e-b736a39c593d",
                "240": "cba9af35-25bf-4420-85c2-4b6d79f4afaf",
                "270": "8a16840d-44d4-4753-8a74-607226040894",
                "300": "8c0fa0cf-cc80-4323-927d-a96bc394c334",
                "330": "cb6fde9c-ef83-44c9-a3c3-3c663a5a92a0"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "83b50620-5de6-435b-9a32-19345393ae9a",
            "latches": [
                "691f4d4f-5981-4212-8be3-122c732020e5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "37e6f744-c7cc-413f-88be-b1b7da51f712",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "51327203-c71b-4ed0-9ac3-a17a84572c79",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "91831676-4167-4b34-8686-d6d64041e13a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "02cf290c-57e4-4ee0-a2fe-8f110279510c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d19044cf-53fe-47b5-a30b-1422c3dc04ee",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b4327783-5cfb-43d8-a652-9b4513c41565",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fef18a54-bfc7-404e-b43e-b736a39c593d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cba9af35-25bf-4420-85c2-4b6d79f4afaf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8a16840d-44d4-4753-8a74-607226040894",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8c0fa0cf-cc80-4323-927d-a96bc394c334",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cb6fde9c-ef83-44c9-a3c3-3c663a5a92a0",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "24d2e486-abd9-4790-bb36-4eea0a8cfaa2",
            "properties": [
                [
                    "description",
                    "Adalwolfa's SSH credentials are collected and exfiltrated"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "ce3fdd02-dc0f-45b1-8790-c10d5575d483",
                "30": "c385f8d3-c604-454e-9c14-5a46585e3236",
                "60": "1560ebcf-8518-4177-920e-a07240d7c514",
                "90": "5ca3aa22-7bc6-4b8f-a903-cad03c56e43f",
                "120": "f400a779-53e9-422a-82af-20b5f062ef2d",
                "150": "2d2e0c58-d250-4866-a636-287de3d4e1ab",
                "180": "ae5077ed-0bad-4ebe-b233-546795e9fcb4",
                "210": "7ad28f85-73e3-44c9-8403-226c13fc0176",
                "330": "57baab0a-00ba-4d55-9f7f-3e5055bd1290",
                "branch:True": "0ad7bb87-66ac-478c-b284-a0afff7cd8f3",
                "branch:False": "cb8f6ebe-499b-4108-acc3-a555a5bfbf7d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ce3fdd02-dc0f-45b1-8790-c10d5575d483",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c385f8d3-c604-454e-9c14-5a46585e3236",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1560ebcf-8518-4177-920e-a07240d7c514",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5ca3aa22-7bc6-4b8f-a903-cad03c56e43f",
            "latches": [
                "83ce3447-33f5-49a5-8c06-6da3ff65d40c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f400a779-53e9-422a-82af-20b5f062ef2d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2d2e0c58-d250-4866-a636-287de3d4e1ab",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ae5077ed-0bad-4ebe-b233-546795e9fcb4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7ad28f85-73e3-44c9-8403-226c13fc0176",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "57baab0a-00ba-4d55-9f7f-3e5055bd1290",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0ad7bb87-66ac-478c-b284-a0afff7cd8f3",
            "latches": [
                "1b79acf9-7d17-46cc-ae63-ba16ae6447aa"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cb8f6ebe-499b-4108-acc3-a555a5bfbf7d",
            "latches": []
        },
        {
            "id": "action",
            "instance": "53900fc1-afff-4a2e-8cfa-cfefdd352e1b",
            "properties": [
                [
                    "name",
                    "File Deletion"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1070.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to delete wingtsvcupdt.exe and ~DFA512.tmp"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "9907c3a2-8875-4ae1-8b00-cea02feb32be",
                "30": "5d74c452-848e-43aa-b20f-bb642b2bbaa4",
                "60": "6f9e0dbc-93e8-47ec-95f7-5488638d0ecd",
                "90": "54b24446-2953-4aba-8d4c-7ccfcfdf439a",
                "120": "bd13c6ec-4a54-4b27-858e-0a9bcfbf0384",
                "150": "1a1035c8-d1e6-465a-a628-e10af64fd500",
                "180": "e2dfb2f3-3552-4def-9306-aa7c7473241d",
                "210": "61d2b740-b1a5-44dc-8a17-9828be0c14b8",
                "240": "3d53474a-f130-47e9-9e2c-31d547b19325",
                "270": "c1f88325-a9ab-4a1d-948c-5542052733e6",
                "300": "c4360501-ef8a-4526-863a-b820e25965a0",
                "330": "e97d0df1-861d-4dba-8375-90941b56e43d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "9907c3a2-8875-4ae1-8b00-cea02feb32be",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5d74c452-848e-43aa-b20f-bb642b2bbaa4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6f9e0dbc-93e8-47ec-95f7-5488638d0ecd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "54b24446-2953-4aba-8d4c-7ccfcfdf439a",
            "latches": [
                "61105b26-6b08-4194-bf04-3cb7a226df88"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "bd13c6ec-4a54-4b27-858e-0a9bcfbf0384",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1a1035c8-d1e6-465a-a628-e10af64fd500",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e2dfb2f3-3552-4def-9306-aa7c7473241d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "61d2b740-b1a5-44dc-8a17-9828be0c14b8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3d53474a-f130-47e9-9e2c-31d547b19325",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c1f88325-a9ab-4a1d-948c-5542052733e6",
            "latches": [
                "1cedda8e-be23-4a97-bde4-adf477778b43",
                "aba26cb9-43d1-49d3-88c2-a8bae2dc61a5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c4360501-ef8a-4526-863a-b820e25965a0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e97d0df1-861d-4dba-8375-90941b56e43d",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ea1020dc-aabc-4753-bced-1f83782d01c0",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads PENQUIN to the Temp folder as C:\\Windows\\Temp\\tmp504e.tmp "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "b5e76fa0-2474-4711-89ff-fb96055126ca",
                "30": "70361cd1-724c-4562-a972-d56689a465e3",
                "60": "b34ee44a-1e7c-4c34-b629-590d3d3f18f7",
                "90": "2471a935-81a1-4a69-96bc-78ef4e72ae87",
                "120": "3a952169-f9dd-4532-ab03-fb0ff45a8748",
                "150": "1bca6b49-d593-49ab-9a77-5b7b02cdc84a",
                "180": "ac614702-fc54-431f-998f-b001c9073bb3",
                "210": "fc96c188-bb6d-4c77-a5b2-376a099b415e",
                "240": "6b72f640-e2f0-49d8-9dc8-43052d912f76",
                "270": "2ed38d2b-864e-4d41-9363-179195d25700",
                "300": "b09999fe-2dd0-4c3c-9894-98eba24d21f9",
                "330": "2e64080e-e4c1-470e-a3ed-897e02771e05"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b5e76fa0-2474-4711-89ff-fb96055126ca",
            "latches": [
                "7a6679c4-d291-4c9f-b239-ef8436b6334c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "70361cd1-724c-4562-a972-d56689a465e3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b34ee44a-1e7c-4c34-b629-590d3d3f18f7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2471a935-81a1-4a69-96bc-78ef4e72ae87",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3a952169-f9dd-4532-ab03-fb0ff45a8748",
            "latches": [
                "7d09f54d-9cce-4e0c-ab89-c6199d8a4466"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "1bca6b49-d593-49ab-9a77-5b7b02cdc84a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ac614702-fc54-431f-998f-b001c9073bb3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fc96c188-bb6d-4c77-a5b2-376a099b415e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6b72f640-e2f0-49d8-9dc8-43052d912f76",
            "latches": [
                "cf2d106f-0a13-4a2e-a481-32836939c6fd"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2ed38d2b-864e-4d41-9363-179195d25700",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b09999fe-2dd0-4c3c-9894-98eba24d21f9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2e64080e-e4c1-470e-a3ed-897e02771e05",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "fb9dad2d-28d4-409b-9384-6fa3aff37a5a",
            "properties": [
                [
                    "name",
                    "tmp504e.tmp"
                ],
                [
                    "description",
                    "PENQUIN malware; backdoor for re-activating access to servers over long term engagements"
                ],
                [
                    "malware_types",
                    [
                        [
                            "b162e14996fb76ad4eff50b7b1198bab",
                            "backdoor"
                        ],
                        [
                            "b5e0da9a8783fca1eabcf21449b264b6",
                            "dropper"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "ef7d43bac64b93bcb36ac60eb8f14582",
                            "installs-other-components"
                        ],
                        [
                            "c2636add7b7912f5df9c88f0c8a483c4",
                            "persists-after-system-reboot"
                        ],
                        [
                            "1e30e00a9e61c1026628be2f9cf636a4",
                            "communicates-with-c2"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "f13b2aea-9459-432f-a597-c014fd96bc16",
                "30": "2707d9e6-550d-4604-9d31-560440932507",
                "60": "12ed192f-f984-468b-94f6-bd076aca7f61",
                "90": "e229ab9d-0c7a-4735-8346-c61b9d8cf5aa",
                "120": "c0c2fbc7-4c06-4c29-a43d-64f1bc804040",
                "150": "002e5324-2d20-4dc2-bd33-10fe18a5b1b8",
                "180": "2c6c6756-96ab-4017-bdeb-97a07b842709",
                "210": "953e4228-438c-4fcc-9d67-37661d353940",
                "240": "e649d596-551e-4072-920a-58c866f041fd",
                "270": "101ae834-a916-459d-a601-c7c35b8bbcbb",
                "300": "359c3034-9d98-4803-a926-95127dde4d94",
                "330": "2e3ef8bc-87b2-4dc0-a708-fd118da0e287"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "f13b2aea-9459-432f-a597-c014fd96bc16",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2707d9e6-550d-4604-9d31-560440932507",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "12ed192f-f984-468b-94f6-bd076aca7f61",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e229ab9d-0c7a-4735-8346-c61b9d8cf5aa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c0c2fbc7-4c06-4c29-a43d-64f1bc804040",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "002e5324-2d20-4dc2-bd33-10fe18a5b1b8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2c6c6756-96ab-4017-bdeb-97a07b842709",
            "latches": [
                "5996d513-8418-4a17-88fd-03a50f357451"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "953e4228-438c-4fcc-9d67-37661d353940",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e649d596-551e-4072-920a-58c866f041fd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "101ae834-a916-459d-a601-c7c35b8bbcbb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "359c3034-9d98-4803-a926-95127dde4d94",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2e3ef8bc-87b2-4dc0-a708-fd118da0e287",
            "latches": []
        },
        {
            "id": "action",
            "instance": "c1220c75-3597-4fd3-a340-550b6863bd1b",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads C:\\Windows\\Temp\\pscp.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "c2f0ee64-2792-418a-9a98-23d1806217eb",
                "30": "d31aacbf-e824-4c7e-8f4e-bed375a727d3",
                "60": "c5d784f9-eec4-4fc6-aaf9-cc8e896466ad",
                "90": "a4ffaa79-6b60-4a80-8315-c55bacce8d23",
                "120": "2d42c223-6464-42bc-9792-41a9421debe8",
                "150": "ebaa5b0d-f876-46fe-9ecb-be34ae9959db",
                "180": "d9fa1d2c-7e45-49c3-b7b3-71b3f1675a35",
                "210": "13bedd13-321b-42ed-a896-aec10200d716",
                "240": "2a61a133-62a4-4193-a348-12b61f122d2f",
                "270": "03d24887-0714-4b0e-97c3-02e845b70d2d",
                "300": "96d501e3-49b9-4cfd-b88f-345676036742",
                "330": "77db3f2c-fc16-4344-8b1e-73a0e0c355c2"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c2f0ee64-2792-418a-9a98-23d1806217eb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d31aacbf-e824-4c7e-8f4e-bed375a727d3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c5d784f9-eec4-4fc6-aaf9-cc8e896466ad",
            "latches": [
                "07b727b5-03e7-4dee-a58c-048a45c8d9d6"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a4ffaa79-6b60-4a80-8315-c55bacce8d23",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2d42c223-6464-42bc-9792-41a9421debe8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ebaa5b0d-f876-46fe-9ecb-be34ae9959db",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d9fa1d2c-7e45-49c3-b7b3-71b3f1675a35",
            "latches": [
                "1d1e494f-6cb8-448b-a68b-b89e7585c281"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "13bedd13-321b-42ed-a896-aec10200d716",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2a61a133-62a4-4193-a348-12b61f122d2f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "03d24887-0714-4b0e-97c3-02e845b70d2d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "96d501e3-49b9-4cfd-b88f-345676036742",
            "latches": [
                "e67d7a4f-9746-4082-a62f-1e6b01ce7926"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "77db3f2c-fc16-4344-8b1e-73a0e0c355c2",
            "latches": []
        },
        {
            "id": "action",
            "instance": "68f92163-215b-40b0-8ab3-c2d1a245ae59",
            "properties": [
                [
                    "name",
                    "SSH"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0008"
                        ],
                        [
                            "technique",
                            "T1021.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to execute pscp.exe to copy PENQUIN (tmp504e.tmp) to KAGAROV as /tmp/tmp514f524f using the keylogged (Adalwolfa's) credentials "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "bb7ff247-dc7a-47cb-b965-2f6a4cf01881",
                "30": "b80b95c7-a1fc-448a-a62a-98d0e029fe4f",
                "60": "6b80cd28-bd1c-47b4-bf07-8cb0b26e32be",
                "90": "62320d90-b079-4a16-a6d5-54f7f3a06012",
                "120": "cf9968bf-8d7d-4996-b4ca-596ee8063dd8",
                "150": "11273f3a-e4c7-45ff-bea7-d1490cc7e7cb",
                "180": "6c7d62cd-661c-44c6-8547-8351c81916f2",
                "210": "bf97eaf5-6bf0-4713-8410-47a73541fbe9",
                "240": "672e3052-3b71-41ba-af3a-0a9190b375ad",
                "270": "749da55f-fa77-42d9-9318-d4ddcb5734bd",
                "300": "ddb21475-3e01-424a-8751-593b90494ed0",
                "330": "a5b110ec-1f37-4482-8561-c8d37216c3ce"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb7ff247-dc7a-47cb-b965-2f6a4cf01881",
            "latches": [
                "82449e8e-0e79-496e-ae50-657aad374715"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "b80b95c7-a1fc-448a-a62a-98d0e029fe4f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6b80cd28-bd1c-47b4-bf07-8cb0b26e32be",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "62320d90-b079-4a16-a6d5-54f7f3a06012",
            "latches": [
                "a3ba8ccd-5049-40c5-bc48-879b5f3e94e9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cf9968bf-8d7d-4996-b4ca-596ee8063dd8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "11273f3a-e4c7-45ff-bea7-d1490cc7e7cb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6c7d62cd-661c-44c6-8547-8351c81916f2",
            "latches": [
                "e0c494ec-e748-40f6-9779-434c58014f08"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "bf97eaf5-6bf0-4713-8410-47a73541fbe9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "672e3052-3b71-41ba-af3a-0a9190b375ad",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "749da55f-fa77-42d9-9318-d4ddcb5734bd",
            "latches": [
                "6ac467b9-d20e-4dfe-b453-a9fc3b36984e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ddb21475-3e01-424a-8751-593b90494ed0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a5b110ec-1f37-4482-8561-c8d37216c3ce",
            "latches": []
        },
        {
            "id": "action",
            "instance": "0beed176-56c8-4154-81b6-be13da211109",
            "properties": [
                [
                    "name",
                    "Ingress Tool Transfer"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1105"
                        ]
                    ]
                ],
                [
                    "description",
                    "msedge.exe downloads C:\\Windows\\Temp\\plink.exe to KHABIBULIN "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "fb72938d-d884-4165-b530-f5ea3d9bf7c2",
                "30": "be61a8b3-e43c-4fe5-a0aa-c4d0b0e1cbb6",
                "60": "c5bcb0af-ef54-44f3-9ea5-401ac8a6be87",
                "90": "498cea24-c30b-4021-ae9c-0eed4aa33706",
                "120": "8f618acd-7958-4d1b-832a-013363107887",
                "150": "14693134-ba2e-4855-96a9-36946585de88",
                "180": "d50f37c0-5ac1-479f-9fc7-a75fcb9587ca",
                "210": "c9477a4a-3619-4486-9730-bf8a910dc0bf",
                "240": "4c23739b-0c6c-49ab-a2b8-0faf902da5f4",
                "270": "a8d795f7-6822-4527-8a4a-5aab5364f584",
                "300": "9fc880f0-a263-4acf-9e1d-2aef033aa015",
                "330": "9b6b8840-f3f6-4fdd-9f51-261b835ba114"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "fb72938d-d884-4165-b530-f5ea3d9bf7c2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "be61a8b3-e43c-4fe5-a0aa-c4d0b0e1cbb6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c5bcb0af-ef54-44f3-9ea5-401ac8a6be87",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "498cea24-c30b-4021-ae9c-0eed4aa33706",
            "latches": [
                "e353bb99-6d5c-4c43-99df-03a94ebbaaec"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "8f618acd-7958-4d1b-832a-013363107887",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "14693134-ba2e-4855-96a9-36946585de88",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d50f37c0-5ac1-479f-9fc7-a75fcb9587ca",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c9477a4a-3619-4486-9730-bf8a910dc0bf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4c23739b-0c6c-49ab-a2b8-0faf902da5f4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a8d795f7-6822-4527-8a4a-5aab5364f584",
            "latches": [
                "d64d306b-17e8-4cc5-9df9-f174b4d826a2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9fc880f0-a263-4acf-9e1d-2aef033aa015",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9b6b8840-f3f6-4fdd-9f51-261b835ba114",
            "latches": []
        },
        {
            "id": "action",
            "instance": "83918801-3f6c-46cf-bcfb-2526b51bf5fb",
            "properties": [
                [
                    "name",
                    "SSH"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0008"
                        ],
                        [
                            "technique",
                            "T1021.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to run plink to execute PENQUIN"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "db69631d-a126-4bb6-9141-fc2ff1e0865f",
                "30": "7de5dfdb-a8f1-46c3-9419-512efa472797",
                "60": "e63bc165-d56d-42d6-832b-516e5a0cada5",
                "90": "14b05974-e312-4c22-940e-f5c00d0f67ec",
                "120": "6eed5e6a-7b29-4aae-8293-9dee7221b44c",
                "150": "008299fb-67bb-413d-a7cb-58473b5543e4",
                "180": "0e81e410-f1c7-4dbd-835a-fcec40e3dd8b",
                "210": "481266d5-a278-4260-aa49-573c5e303c94",
                "240": "2403493a-f405-4c63-bd61-aee8bfea4767",
                "270": "d69bd8d6-6b3b-44e5-b3ae-e59f6a276157",
                "300": "bc10acc8-d6f8-4020-8376-bfd134ae1b0f",
                "330": "adfb23ac-f9e4-47b7-adc3-bc0b317de6d3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "db69631d-a126-4bb6-9141-fc2ff1e0865f",
            "latches": [
                "85fe602b-ced3-443f-905e-a408feb6a17a"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7de5dfdb-a8f1-46c3-9419-512efa472797",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e63bc165-d56d-42d6-832b-516e5a0cada5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "14b05974-e312-4c22-940e-f5c00d0f67ec",
            "latches": [
                "a76291df-3f14-4d1a-b3e1-5f9e26b1d86e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6eed5e6a-7b29-4aae-8293-9dee7221b44c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "008299fb-67bb-413d-a7cb-58473b5543e4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0e81e410-f1c7-4dbd-835a-fcec40e3dd8b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "481266d5-a278-4260-aa49-573c5e303c94",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2403493a-f405-4c63-bd61-aee8bfea4767",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d69bd8d6-6b3b-44e5-b3ae-e59f6a276157",
            "latches": [
                "7bb6471e-914b-4c99-a67f-74ced4af566c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "bc10acc8-d6f8-4020-8376-bfd134ae1b0f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "adfb23ac-f9e4-47b7-adc3-bc0b317de6d3",
            "latches": []
        },
        {
            "id": "action",
            "instance": "89675195-dd60-4fd8-83e7-d96ad314ea6c",
            "properties": [
                [
                    "name",
                    "File Deletion"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1070.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe deletes tmp504e.tmp, pscp.exe, and plink.exe on KHABIBULIN"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "5dd1e70c-01d7-4d5f-8c69-a8cd55943499",
                "30": "deea770c-33c3-4eac-9f44-0fd26e25da42",
                "60": "38923030-3022-4090-b016-f62c9f2c830e",
                "90": "01a254d3-2725-40fb-b9f0-307bc40b9aa9",
                "120": "a800f66e-131a-4502-855d-72b0a2dfd2e3",
                "150": "6155bac3-c7ef-4b19-914c-a0d63ae25139",
                "180": "ffd31af9-1f94-4059-a620-05e3a844a0c5",
                "210": "78782ef5-aafb-4377-8716-58c18542d94f",
                "240": "b3a41fb8-e8d5-45db-9c38-12e8da3d98a0",
                "270": "895612fc-69d4-4614-bb42-a7b3326bd709",
                "300": "60aa5833-c027-4b39-ab74-e33572f60397",
                "330": "fa5aeacb-479e-4902-9b3a-ab285ec5ce26"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5dd1e70c-01d7-4d5f-8c69-a8cd55943499",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "deea770c-33c3-4eac-9f44-0fd26e25da42",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "38923030-3022-4090-b016-f62c9f2c830e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "01a254d3-2725-40fb-b9f0-307bc40b9aa9",
            "latches": [
                "b7a7d952-81b1-4273-890f-5d8beb49ccf5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a800f66e-131a-4502-855d-72b0a2dfd2e3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6155bac3-c7ef-4b19-914c-a0d63ae25139",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ffd31af9-1f94-4059-a620-05e3a844a0c5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "78782ef5-aafb-4377-8716-58c18542d94f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b3a41fb8-e8d5-45db-9c38-12e8da3d98a0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "895612fc-69d4-4614-bb42-a7b3326bd709",
            "latches": [
                "2b848ea5-637d-474e-9187-862fa4db49be"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "60aa5833-c027-4b39-ab74-e33572f60397",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fa5aeacb-479e-4902-9b3a-ab285ec5ce26",
            "latches": []
        },
        {
            "id": "action",
            "instance": "4d164140-e60b-4f01-8430-38062b07ba8c",
            "properties": [
                [
                    "name",
                    "Deobfuscate/Decode Files or Information"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1140"
                        ]
                    ]
                ],
                [
                    "description",
                    "hsperfdata unpacks a binary named cron"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "5c7e6067-3c44-49e6-9fd7-9e2f0fa759b2",
                "30": "c19f356e-8d7e-4c6b-9c35-df148bd73fb6",
                "60": "5ac06895-d95f-4803-b7c8-a84cd4b022f4",
                "90": "68fe6cb9-5a57-4faa-9651-5c01448ec87c",
                "120": "c4f21d54-a0ee-47c8-90ee-cfa6e6a4f37d",
                "150": "60707a8d-948f-4cf3-8eb0-077dc5934d9c",
                "180": "ea2f3a4f-bab5-4871-9f77-79352ab28051",
                "210": "25661017-0ef0-41fd-8b5c-13328db754d5",
                "240": "c6a50ce8-e420-4cb6-b27b-006a778756a2",
                "270": "8b49a4ba-c27d-4fb8-8385-146996528542",
                "300": "81e28587-4865-46cc-8128-461cc55e7d71",
                "330": "5cf8652c-8717-415f-abf3-726b133bf205"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5c7e6067-3c44-49e6-9fd7-9e2f0fa759b2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c19f356e-8d7e-4c6b-9c35-df148bd73fb6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5ac06895-d95f-4803-b7c8-a84cd4b022f4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "68fe6cb9-5a57-4faa-9651-5c01448ec87c",
            "latches": [
                "c984630e-10c3-46a8-abdf-0b69a8636eeb"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c4f21d54-a0ee-47c8-90ee-cfa6e6a4f37d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "60707a8d-948f-4cf3-8eb0-077dc5934d9c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ea2f3a4f-bab5-4871-9f77-79352ab28051",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "25661017-0ef0-41fd-8b5c-13328db754d5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c6a50ce8-e420-4cb6-b27b-006a778756a2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8b49a4ba-c27d-4fb8-8385-146996528542",
            "latches": [
                "6d24563e-d20d-4db1-808e-5466ba45bff1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "81e28587-4865-46cc-8128-461cc55e7d71",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5cf8652c-8717-415f-abf3-726b133bf205",
            "latches": []
        },
        {
            "id": "action",
            "instance": "2908b72e-f062-4601-a536-edef7a910279",
            "properties": [
                [
                    "name",
                    "Match Legitimate Name or Location"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1036.005"
                        ]
                    ]
                ],
                [
                    "description",
                    "hsperfdata copies cron to /usr/bin/ and executes cron from this folder "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "10aaced5-7db3-4174-9b39-184c7886088a",
                "30": "ad66bc0d-7bf2-42d8-b50d-b126dee462e9",
                "60": "552706e9-59cc-4c41-b545-f80bb48212ca",
                "90": "26371652-8d21-43ba-8186-82a84b28ba87",
                "120": "fcd6ff25-192b-45c0-8163-5e687958624a",
                "150": "a283d91e-f46f-4814-a6cf-d0d3314804e8",
                "180": "a70cd0e3-477b-4b85-86ae-5bc0d28e93c9",
                "210": "122ee729-4076-4248-a30e-0c0207357818",
                "240": "c1ebca7e-80d8-4ee4-8548-9d28db66984b",
                "270": "c2498ce3-844f-4aa5-bbb8-af7df5271e58",
                "300": "0e758c71-62f7-428c-97ee-f7af5de37347",
                "330": "66b90019-c88b-44b7-9e74-be164998399d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "10aaced5-7db3-4174-9b39-184c7886088a",
            "latches": [
                "507a7010-7eba-4867-94a4-a34149de437f"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ad66bc0d-7bf2-42d8-b50d-b126dee462e9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "552706e9-59cc-4c41-b545-f80bb48212ca",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "26371652-8d21-43ba-8186-82a84b28ba87",
            "latches": [
                "55c81ccb-c005-481e-acbd-0a9ac8d0c1cd"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "fcd6ff25-192b-45c0-8163-5e687958624a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a283d91e-f46f-4814-a6cf-d0d3314804e8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a70cd0e3-477b-4b85-86ae-5bc0d28e93c9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "122ee729-4076-4248-a30e-0c0207357818",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c1ebca7e-80d8-4ee4-8548-9d28db66984b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c2498ce3-844f-4aa5-bbb8-af7df5271e58",
            "latches": [
                "27f777db-146d-4b0e-b90c-7b4272fd8cfe"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0e758c71-62f7-428c-97ee-f7af5de37347",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "66b90019-c88b-44b7-9e74-be164998399d",
            "latches": []
        },
        {
            "id": "action",
            "instance": "22f5e129-2c9f-4b79-8317-7a3178a071d8",
            "properties": [
                [
                    "name",
                    "Linux and Mac File and Directory Permissions Modification"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1222.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "hsperfdata adds an executable flag (for executable permissions) to the created cron file"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "6d19d3c4-7a77-4b72-8590-f8b9f8bf8457",
                "30": "48e5c04a-02cf-4724-9a83-95817fcca9a4",
                "60": "14f13924-5ee2-4b03-93cc-0823ca4f0c84",
                "90": "957b4a00-726c-4cb5-bf2f-fbb587d0d7ec",
                "120": "dce71d70-5e66-4995-ad6d-4ab113d52d48",
                "150": "9b295e51-9848-459d-97be-f2863036d0ec",
                "180": "5ade1d28-d28b-4f95-a55f-3e718d56c852",
                "210": "96fae4ea-ea55-4e6e-ac83-2d539796b02a",
                "240": "1d96cc40-e809-4bf1-9e28-27cea1a9b9fc",
                "270": "86c31997-fd4b-4f9f-8008-bfcd34a5c290",
                "300": "c2e7c0c0-e73e-44a3-b110-68cff103a128",
                "330": "82c3d8c1-71dc-4c16-9ff7-ada44265dd9d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6d19d3c4-7a77-4b72-8590-f8b9f8bf8457",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "48e5c04a-02cf-4724-9a83-95817fcca9a4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "14f13924-5ee2-4b03-93cc-0823ca4f0c84",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "957b4a00-726c-4cb5-bf2f-fbb587d0d7ec",
            "latches": [
                "e58ec0fb-d5cb-484b-8207-f81d68906190"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "dce71d70-5e66-4995-ad6d-4ab113d52d48",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9b295e51-9848-459d-97be-f2863036d0ec",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5ade1d28-d28b-4f95-a55f-3e718d56c852",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "96fae4ea-ea55-4e6e-ac83-2d539796b02a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1d96cc40-e809-4bf1-9e28-27cea1a9b9fc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "86c31997-fd4b-4f9f-8008-bfcd34a5c290",
            "latches": [
                "b21ca736-57c9-4c4a-bf3c-1f903da6f7da"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c2e7c0c0-e73e-44a3-b110-68cff103a128",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "82c3d8c1-71dc-4c16-9ff7-ada44265dd9d",
            "latches": []
        },
        {
            "id": "action",
            "instance": "74453d46-eb96-4e82-a676-76b644e272f3",
            "properties": [
                [
                    "name",
                    "Cron"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1053.003"
                        ]
                    ]
                ],
                [
                    "description",
                    "hsperfdata stops the cron service"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "20ec2c6b-929e-461d-bb70-7018bccd788b",
                "30": "4073cb95-9800-4347-8e76-107bd93dcca5",
                "60": "cc1c3133-6d74-4992-b324-2ee17093a6d2",
                "90": "99134898-6b66-4602-a120-6ee2b045019b",
                "120": "9278562e-3578-4fa4-aa44-bf36a4795de6",
                "150": "72f05460-e6a4-4dd8-a2a0-6f085d6827fe",
                "180": "80ea09eb-f5a4-401b-bf97-13221d1e1fab",
                "210": "63bd86c0-9530-4863-9c01-6de36355e7b7",
                "240": "99bb9960-73a6-4eb2-92ad-ef87e3f4a200",
                "270": "cd388de3-1356-4005-ba11-0badb23a5c98",
                "300": "3cbf5e1d-51c9-4566-82d7-b4fb039ca2d5",
                "330": "08741033-ed84-400d-9c0d-a13c391ea725"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "20ec2c6b-929e-461d-bb70-7018bccd788b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4073cb95-9800-4347-8e76-107bd93dcca5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cc1c3133-6d74-4992-b324-2ee17093a6d2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "99134898-6b66-4602-a120-6ee2b045019b",
            "latches": [
                "42906e52-aed6-4cb7-b7b2-12b8caf473b4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9278562e-3578-4fa4-aa44-bf36a4795de6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "72f05460-e6a4-4dd8-a2a0-6f085d6827fe",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "80ea09eb-f5a4-401b-bf97-13221d1e1fab",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "63bd86c0-9530-4863-9c01-6de36355e7b7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "99bb9960-73a6-4eb2-92ad-ef87e3f4a200",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cd388de3-1356-4005-ba11-0badb23a5c98",
            "latches": [
                "0ce6363e-6c5b-4c17-8f76-27e77caebf13"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "3cbf5e1d-51c9-4566-82d7-b4fb039ca2d5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "08741033-ed84-400d-9c0d-a13c391ea725",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d616c7b8-ec33-4ff5-be7a-3033154731f6",
            "properties": [
                [
                    "name",
                    "Create or Modify System Process: Systemd Service"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1543.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "hsperfdata modifies /etc/systemd/system/cron.service for systemd to execute the created cron file"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "337ccbbb-e40c-480d-92aa-fcd4d6103afc",
                "30": "288363f9-5e84-4e8c-b678-f30720a2bfc9",
                "60": "2b024eda-4346-408b-ba8c-4e429394436f",
                "90": "cb1cf0fb-b143-493c-bd07-88c1e6a1c7e6",
                "120": "e928b12a-f0e5-401f-8840-5e5afb708e46",
                "150": "89e9bbc6-1242-4a0b-ac0e-0044dc1cd96b",
                "180": "b837ea64-96cc-4b01-96e6-d56c5c1e9f1f",
                "210": "9a1645d5-d429-42df-835c-aebf96df50b9",
                "240": "23a4b3c0-11f8-4628-901a-2f6a58804a37",
                "270": "94c24f83-43f0-4ac8-a3b4-f7abba82cd50",
                "300": "cffca178-5309-47c0-bb87-bd00aeef81fc",
                "330": "9ad5a381-c136-4eeb-926b-fc4944b22a79"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "337ccbbb-e40c-480d-92aa-fcd4d6103afc",
            "latches": [
                "90f627c6-57b2-409c-975f-806f815d1daa"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "288363f9-5e84-4e8c-b678-f30720a2bfc9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2b024eda-4346-408b-ba8c-4e429394436f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cb1cf0fb-b143-493c-bd07-88c1e6a1c7e6",
            "latches": [
                "8c388a35-af86-4928-b91d-c022906eda64"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "e928b12a-f0e5-401f-8840-5e5afb708e46",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "89e9bbc6-1242-4a0b-ac0e-0044dc1cd96b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b837ea64-96cc-4b01-96e6-d56c5c1e9f1f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9a1645d5-d429-42df-835c-aebf96df50b9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "23a4b3c0-11f8-4628-901a-2f6a58804a37",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "94c24f83-43f0-4ac8-a3b4-f7abba82cd50",
            "latches": [
                "4d0eb043-4d35-4d64-870f-9c6a90272d1f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cffca178-5309-47c0-bb87-bd00aeef81fc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9ad5a381-c136-4eeb-926b-fc4944b22a79",
            "latches": []
        },
        {
            "id": "action",
            "instance": "eb09b9be-8a82-4a2e-b5c6-8746b13f48c8",
            "properties": [
                [
                    "name",
                    "Traffic Signaling"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1205"
                        ]
                    ]
                ],
                [
                    "description",
                    "cron installs a TCP filter on the eth0 interface "
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "5a98125f-1214-40be-8139-f57095d31642",
                "30": "25e9f52f-cecc-4224-bb71-bcd8a0b2c13d",
                "60": "0fc9324f-a94d-423c-a43f-9c25a912baac",
                "90": "24b94270-066f-489e-8453-a80cf928204e",
                "120": "2efcb58d-0b7f-47f8-8f0a-b34ace5a6b68",
                "150": "6e8bc6f7-1a44-4a6b-8cf7-34395c2ef194",
                "180": "3a5d808c-306c-49dc-9db2-2a3cb03236b9",
                "210": "f7db1e98-e53c-48ad-960b-9111a3309257",
                "240": "b39e9316-54df-4508-9d9d-616e99f058c9",
                "270": "f62ae012-17ca-4bd3-a6b6-b5845dcb6913",
                "300": "ad43aa90-a726-4401-8aeb-1579ddce9973",
                "330": "bd6b3ea4-717c-48dc-9b0c-a0bcbb794efb"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5a98125f-1214-40be-8139-f57095d31642",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "25e9f52f-cecc-4224-bb71-bcd8a0b2c13d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0fc9324f-a94d-423c-a43f-9c25a912baac",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "24b94270-066f-489e-8453-a80cf928204e",
            "latches": [
                "671b7255-f769-4546-b34f-cd94614922da"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2efcb58d-0b7f-47f8-8f0a-b34ace5a6b68",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6e8bc6f7-1a44-4a6b-8cf7-34395c2ef194",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3a5d808c-306c-49dc-9db2-2a3cb03236b9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f7db1e98-e53c-48ad-960b-9111a3309257",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b39e9316-54df-4508-9d9d-616e99f058c9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f62ae012-17ca-4bd3-a6b6-b5845dcb6913",
            "latches": [
                "a85868a4-8ce0-4f5b-acf5-eefdf0483a6f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ad43aa90-a726-4401-8aeb-1579ddce9973",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bd6b3ea4-717c-48dc-9b0c-a0bcbb794efb",
            "latches": []
        },
        {
            "id": "action",
            "instance": "aab5ecac-d592-4c87-9e77-10f3e0a1df38",
            "properties": [
                [
                    "name",
                    "Network Sniffing"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            null
                        ],
                        [
                            "technique",
                            "T1040"
                        ]
                    ]
                ],
                [
                    "description",
                    "cron sniffs network traffic on eth0 for a specific activation packet (the magic packet)"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "141c5a6f-aab4-4b7c-ae98-ce94ff657d46",
                "30": "82110f0c-7de5-4fcc-a756-3e5e10ab5966",
                "60": "0e4f2aa2-68c0-40d5-8fc4-e2ac49d9d05d",
                "90": "8908db4a-2e80-4ddb-a3e1-e8a91c93a634",
                "120": "c5511de0-1182-4da5-b33e-a3f4781c5ed2",
                "150": "9ac16962-0710-45c1-ab8e-f41958d96143",
                "180": "abfac9fc-022b-4f93-ac57-8700bfc9c7c9",
                "210": "05134147-3416-4f67-bd33-c57fc33828e1",
                "240": "a75bd772-b6bd-44ad-b6ee-aa2091bc68a3",
                "270": "c0d34b00-2ebc-4901-a3e0-f82a45e946ba",
                "300": "ab18b438-a6e0-4c01-a872-95be2448a05b",
                "330": "08250d3d-c207-4529-a32a-fdce793568d1"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "141c5a6f-aab4-4b7c-ae98-ce94ff657d46",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "82110f0c-7de5-4fcc-a756-3e5e10ab5966",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0e4f2aa2-68c0-40d5-8fc4-e2ac49d9d05d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8908db4a-2e80-4ddb-a3e1-e8a91c93a634",
            "latches": [
                "722933dc-feb9-4e0a-a0c5-26fea673343f"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c5511de0-1182-4da5-b33e-a3f4781c5ed2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9ac16962-0710-45c1-ab8e-f41958d96143",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "abfac9fc-022b-4f93-ac57-8700bfc9c7c9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "05134147-3416-4f67-bd33-c57fc33828e1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a75bd772-b6bd-44ad-b6ee-aa2091bc68a3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c0d34b00-2ebc-4901-a3e0-f82a45e946ba",
            "latches": [
                "dc6b9c3e-73c9-4d3a-a6cb-772caf4cf226"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ab18b438-a6e0-4c01-a872-95be2448a05b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "08250d3d-c207-4529-a32a-fdce793568d1",
            "latches": []
        },
        {
            "id": "action",
            "instance": "d9f0fdcc-8fac-4ea2-b11f-88302030dfb5",
            "properties": [
                [
                    "name",
                    "Traffic Signaling"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0003"
                        ],
                        [
                            "technique",
                            "T1205"
                        ]
                    ]
                ],
                [
                    "description",
                    "cron receives and triggers on a TCP packet containing a magic sequence of bytes"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "4bd28904-7388-4336-be5d-9bf56f5c3971",
                "30": "1254ecdb-5161-4264-b3cb-b579911f4ccb",
                "60": "96f3e210-371a-4225-8882-cdf191670cb0",
                "90": "9ce7a816-9528-4f2a-ac21-bdd958a448ae",
                "120": "33c070f0-51a1-47d4-9787-8d4bd7ad1208",
                "150": "5af7bb06-4712-451b-9606-4a05c8cb207e",
                "180": "c8e8c565-2330-4232-b30a-a6340a640710",
                "210": "e505156b-6699-4c0b-816e-36fe55cf47da",
                "240": "755b4c32-e303-4830-a0cb-f891813511f7",
                "270": "be09c22a-3a1b-49f1-b74a-7a10a0c1df40",
                "300": "2dc49f8e-f8eb-43c3-a596-bbf3ccb1a963",
                "330": "c09f1673-3064-4fdf-b602-148f25684d76"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "4bd28904-7388-4336-be5d-9bf56f5c3971",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1254ecdb-5161-4264-b3cb-b579911f4ccb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "96f3e210-371a-4225-8882-cdf191670cb0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9ce7a816-9528-4f2a-ac21-bdd958a448ae",
            "latches": [
                "6195ae62-82bf-4575-8eef-e4009d9dc5af"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "33c070f0-51a1-47d4-9787-8d4bd7ad1208",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5af7bb06-4712-451b-9606-4a05c8cb207e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c8e8c565-2330-4232-b30a-a6340a640710",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e505156b-6699-4c0b-816e-36fe55cf47da",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "755b4c32-e303-4830-a0cb-f891813511f7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "be09c22a-3a1b-49f1-b74a-7a10a0c1df40",
            "latches": [
                "b2cc26b5-e501-4ad5-a769-9c6ee005426e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2dc49f8e-f8eb-43c3-a596-bbf3ccb1a963",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c09f1673-3064-4fdf-b602-148f25684d76",
            "latches": []
        },
        {
            "id": "action",
            "instance": "c9109f42-c087-4ede-8709-a26b7e954fcf",
            "properties": [
                [
                    "name",
                    "Standard Encoding"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0011"
                        ],
                        [
                            "technique",
                            "T1132.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "the TCP packet payload contains data that is base64 encoded. Once decoded, the packet contains the IP address and port to connect to the listener"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "6a756293-52f6-4e08-a9ba-71a9b7c2542a",
                "30": "98df85ac-c24b-4f92-a545-1b6e937aed50",
                "60": "5deb6270-a458-4471-9ce5-881d11788619",
                "90": "07a42917-db5d-4c62-86a6-953c12d7b799",
                "120": "d2ca55c3-c648-4aa2-9758-acd1b90d662f",
                "150": "d81935e8-91df-446d-9353-072cfc6b5c17",
                "180": "80d301fe-4004-4ef8-91fa-fbd26761e83b",
                "210": "78044104-9eed-4308-84b2-daf69e20a57c",
                "240": "ba0a060a-5d75-47f2-bbac-97eefe2bdeb9",
                "270": "e47481f0-c4bc-4913-b295-d08102599cae",
                "300": "08660ead-b400-430c-81a3-7d284d83da5e",
                "330": "d5d1560e-b6b0-438a-9633-7ebec92a24d6"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6a756293-52f6-4e08-a9ba-71a9b7c2542a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "98df85ac-c24b-4f92-a545-1b6e937aed50",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5deb6270-a458-4471-9ce5-881d11788619",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "07a42917-db5d-4c62-86a6-953c12d7b799",
            "latches": [
                "3aa0a569-9c64-4abe-9cf1-7299b3e48d4d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "d2ca55c3-c648-4aa2-9758-acd1b90d662f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d81935e8-91df-446d-9353-072cfc6b5c17",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "80d301fe-4004-4ef8-91fa-fbd26761e83b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "78044104-9eed-4308-84b2-daf69e20a57c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ba0a060a-5d75-47f2-bbac-97eefe2bdeb9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e47481f0-c4bc-4913-b295-d08102599cae",
            "latches": [
                "86706050-b892-4804-84c4-74ae5fa478c2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "08660ead-b400-430c-81a3-7d284d83da5e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d5d1560e-b6b0-438a-9633-7ebec92a24d6",
            "latches": []
        },
        {
            "id": "action",
            "instance": "a32a6261-8469-4912-87a1-b5153f4a2ee9",
            "properties": [
                [
                    "name",
                    "Unix Shell"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0002"
                        ],
                        [
                            "technique",
                            "T1059.004"
                        ]
                    ]
                ],
                [
                    "description",
                    "cron executes a reverse shell to the listener IP and port"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "c9d084e9-5b3f-49e0-93a7-a121dcae449f",
                "30": "af8ad921-f299-43ae-a203-47ab79b8da74",
                "60": "390ea28a-a7b2-4af1-8083-7b3c0bc000ca",
                "90": "5790896a-3fd0-4a96-983c-955c2c3754a8",
                "120": "16525a28-a1ee-423f-baf1-c9a79f1d3dcc",
                "150": "3fb05566-7e6b-4a5c-a1b5-c1974ae49333",
                "180": "ec7b66d7-4c2e-4863-ab86-31e77fce9e55",
                "210": "e2e937a5-70e0-40df-bcad-cbe5b9d3a51c",
                "240": "bbfa7f73-9130-408d-9226-e92c6cfbbe9b",
                "270": "2e0cfec8-9eea-4c0b-ace6-c36d5291f61f",
                "300": "c38624ac-ef1d-46c7-b2de-77d8d5da9d66",
                "330": "ea3983a5-ebdd-4b56-9c6c-56c780116286"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c9d084e9-5b3f-49e0-93a7-a121dcae449f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "af8ad921-f299-43ae-a203-47ab79b8da74",
            "latches": [
                "3ff902da-5bef-47af-9433-73eeed3dfd94"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "390ea28a-a7b2-4af1-8083-7b3c0bc000ca",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5790896a-3fd0-4a96-983c-955c2c3754a8",
            "latches": [
                "3cc153c6-ad5b-4838-bf09-ffbd3ebcb776"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "16525a28-a1ee-423f-baf1-c9a79f1d3dcc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fb05566-7e6b-4a5c-a1b5-c1974ae49333",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec7b66d7-4c2e-4863-ab86-31e77fce9e55",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e2e937a5-70e0-40df-bcad-cbe5b9d3a51c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bbfa7f73-9130-408d-9226-e92c6cfbbe9b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2e0cfec8-9eea-4c0b-ace6-c36d5291f61f",
            "latches": [
                "0ba54f16-f1dd-40ac-bb32-581fdf95fcca"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c38624ac-ef1d-46c7-b2de-77d8d5da9d66",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ea3983a5-ebdd-4b56-9c6c-56c780116286",
            "latches": []
        },
        {
            "id": "action",
            "instance": "0ba9c654-32a5-4853-9a27-e1b583ccb159",
            "properties": [
                [
                    "name",
                    "Drive-by Compromise"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0001"
                        ],
                        [
                            "technique",
                            "T1189"
                        ]
                    ]
                ],
                [
                    "description",
                    "the JavaScript establishes a watering hole redirecting users to the adversary's malicious website"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "a9f486bc-d752-4185-97b0-9f69d056b1e1",
                "30": "0a96b22e-008f-490d-b744-4472709191e2",
                "60": "45d603ac-cab4-4f0c-8e5f-f4d2bf029578",
                "90": "c986e8ca-4c86-474e-a058-37ce8822debb",
                "120": "f034bc85-d304-4669-89d2-e2205be3ebad",
                "150": "d3238247-0bd5-4cbc-9bab-780738488622",
                "180": "3f5070fb-51f0-4c84-82a4-ad7a463322b5",
                "210": "2d19f151-4aaf-472b-ade3-47aadaadeb94",
                "240": "7cf64eaf-7cec-4f4b-a27e-4e13dd679fb9",
                "270": "f3fe2c9c-3589-4cce-9575-ff774f943297",
                "300": "5967c214-27cd-4b67-ac03-ff9a7bc24a65",
                "330": "89433b8c-7bfd-4a01-9679-3916ed14601d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "a9f486bc-d752-4185-97b0-9f69d056b1e1",
            "latches": [
                "e2675060-7254-4372-b961-71973d87a1c0"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "0a96b22e-008f-490d-b744-4472709191e2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "45d603ac-cab4-4f0c-8e5f-f4d2bf029578",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c986e8ca-4c86-474e-a058-37ce8822debb",
            "latches": [
                "357f695d-455d-4e53-9815-880613075425"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f034bc85-d304-4669-89d2-e2205be3ebad",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d3238247-0bd5-4cbc-9bab-780738488622",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3f5070fb-51f0-4c84-82a4-ad7a463322b5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2d19f151-4aaf-472b-ade3-47aadaadeb94",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7cf64eaf-7cec-4f4b-a27e-4e13dd679fb9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f3fe2c9c-3589-4cce-9575-ff774f943297",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5967c214-27cd-4b67-ac03-ff9a7bc24a65",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "89433b8c-7bfd-4a01-9679-3916ed14601d",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "307e5d85-a676-44f0-a4d9-d8efb5853225",
            "properties": [
                [
                    "description",
                    "HTML is appended to the webpage previously edited by Adalwolfa that contains script tags to load another JavaScript file"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "c02afa90-9cf1-4722-9a98-ee94c8f3806b",
                "30": "0ac97390-43a6-487c-b384-3f5452d64639",
                "60": "f037131f-cd58-422c-9dbc-7a99eae4176c",
                "90": "dc7c696d-8573-45da-84cb-881c954d3874",
                "120": "6cf26625-31f8-473b-9414-148853a6a671",
                "150": "4b8bf76d-8b88-46ba-a5b9-cd5124cef60b",
                "180": "e64b6407-f7f1-4df9-bc3a-9b23d899d416",
                "210": "aa5ac567-fb02-47ac-9200-c37f3039c9d4",
                "330": "f479ce8e-fd15-429c-b5f2-afb27e15e786",
                "branch:True": "6cb9cd39-cc01-4b61-b79e-2c7f3d65c8dd",
                "branch:False": "4b38d557-047d-4407-961b-adc23a9d6d52"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c02afa90-9cf1-4722-9a98-ee94c8f3806b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0ac97390-43a6-487c-b384-3f5452d64639",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f037131f-cd58-422c-9dbc-7a99eae4176c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dc7c696d-8573-45da-84cb-881c954d3874",
            "latches": [
                "11ae5ac6-7521-43f6-bb23-5cda4b865d83"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6cf26625-31f8-473b-9414-148853a6a671",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4b8bf76d-8b88-46ba-a5b9-cd5124cef60b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e64b6407-f7f1-4df9-bc3a-9b23d899d416",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "aa5ac567-fb02-47ac-9200-c37f3039c9d4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f479ce8e-fd15-429c-b5f2-afb27e15e786",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6cb9cd39-cc01-4b61-b79e-2c7f3d65c8dd",
            "latches": [
                "b01d1a86-ef9a-4cf5-ad7a-823f4674578a"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4b38d557-047d-4407-961b-adc23a9d6d52",
            "latches": []
        },
        {
            "id": "action",
            "instance": "8d609ef9-3ae8-4c1a-9e30-b79dc45eb661",
            "properties": [
                [
                    "name",
                    "Discovery"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            null
                        ]
                    ]
                ],
                [
                    "description",
                    "Discovery commands are sent through the established reverse shell"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "dbb3a797-c15e-4983-a1c4-ad8ddf3614c5",
                "30": "c63b1b78-d2c7-47d7-922c-49a925834b52",
                "60": "8856f9df-aff1-49e9-b255-0cf30c7d52c7",
                "90": "adee6349-7e27-4a22-8ab3-825cf874cffe",
                "120": "ff78eeb2-43eb-4be8-9d65-317a07fe2b14",
                "150": "1ea3e400-1918-4b47-98ac-7dabac686837",
                "180": "2fba76bb-d4d1-4ed4-a857-eb19f75a8327",
                "210": "62f37945-d0e9-4754-b648-4aeb23fb1eac",
                "240": "6d705065-0905-4da7-a24b-9d5b6146efe9",
                "270": "2f9a3e05-39dc-4f1e-ae21-f71701850fdd",
                "300": "f026b8f2-af95-45e4-8030-6a56269951f1",
                "330": "ed42af81-9172-495d-85bf-5ee832291643"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "dbb3a797-c15e-4983-a1c4-ad8ddf3614c5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c63b1b78-d2c7-47d7-922c-49a925834b52",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8856f9df-aff1-49e9-b255-0cf30c7d52c7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "adee6349-7e27-4a22-8ab3-825cf874cffe",
            "latches": [
                "8311a57d-0270-4a91-906a-c70717e1ff99"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ff78eeb2-43eb-4be8-9d65-317a07fe2b14",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1ea3e400-1918-4b47-98ac-7dabac686837",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2fba76bb-d4d1-4ed4-a857-eb19f75a8327",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "62f37945-d0e9-4754-b648-4aeb23fb1eac",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6d705065-0905-4da7-a24b-9d5b6146efe9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2f9a3e05-39dc-4f1e-ae21-f71701850fdd",
            "latches": [
                "0f267966-d18f-4410-ac0e-eb75e36e4ed4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f026b8f2-af95-45e4-8030-6a56269951f1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ed42af81-9172-495d-85bf-5ee832291643",
            "latches": []
        },
        {
            "id": "url",
            "instance": "d03f66c8-1f90-43f5-9150-5b3c09046dfd",
            "properties": [
                [
                    "value",
                    "anto-int.com"
                ]
            ],
            "anchors": {
                "0": "80de1c88-c19d-4d63-bdd0-6f2991fe8afa",
                "30": "940a81e1-0e22-46c7-b6fa-cdf37ee76a3d",
                "60": "b7f241b7-c5f4-4123-a9af-1c0ca56c9319",
                "90": "a3583561-49c0-4dd3-b51e-9ec1fc9d03fc",
                "120": "027a2c91-3977-47b1-8339-600f57e9bb2b",
                "150": "085923f8-bd50-4486-b0b5-f616cfa3db79",
                "180": "ea507a76-2ec2-4b80-a194-9eabcaefd112",
                "210": "f4be914e-4507-47a2-a4ef-6122c9de5317",
                "240": "e6a41303-4b22-4eb8-bea4-42c7e99b1f14",
                "270": "9db6e618-8652-4972-a026-f06b21b90bab",
                "300": "5359c397-417e-42a8-9e3f-48d42c8e52ca",
                "330": "af44d70d-6f87-4706-a3b9-8b9a41f9dba8"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "80de1c88-c19d-4d63-bdd0-6f2991fe8afa",
            "latches": [
                "980e5247-019a-4865-8997-ac7c0a612495"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "940a81e1-0e22-46c7-b6fa-cdf37ee76a3d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b7f241b7-c5f4-4123-a9af-1c0ca56c9319",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a3583561-49c0-4dd3-b51e-9ec1fc9d03fc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "027a2c91-3977-47b1-8339-600f57e9bb2b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "085923f8-bd50-4486-b0b5-f616cfa3db79",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ea507a76-2ec2-4b80-a194-9eabcaefd112",
            "latches": [
                "3161884b-1310-4f37-8272-72ca7321d778"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f4be914e-4507-47a2-a4ef-6122c9de5317",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e6a41303-4b22-4eb8-bea4-42c7e99b1f14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9db6e618-8652-4972-a026-f06b21b90bab",
            "latches": [
                "4bd31491-5e67-4bd1-8084-17dca5f88589"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5359c397-417e-42a8-9e3f-48d42c8e52ca",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "af44d70d-6f87-4706-a3b9-8b9a41f9dba8",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "2ceffd16-c580-4ba1-9462-c8719934e244",
            "properties": [
                [
                    "description",
                    "The C2 server responds with a UUID for EPIC to save for future communications. Future communications with this C2 server are also bzip2 compressed and base64 encoded."
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "6dbab104-e147-43bf-bd48-2266973fed5d",
                "30": "85f4cf66-a87c-4b66-b9a9-8c5aaf82749a",
                "60": "393348df-b39a-4121-952b-ba162c9533f9",
                "90": "5debbd1e-51b7-49d3-832e-20fb16abd861",
                "120": "3f9d05af-a83f-4e12-aa41-db91aaba3c45",
                "150": "05d49cf4-4c52-4acd-b18a-03446edd16d7",
                "180": "60310709-7f5c-4a54-be7b-11873199bfe9",
                "210": "10e65b00-0d13-487d-89b1-5223b48f5cbe",
                "330": "95d7883a-062b-419f-b533-6fa021b5ab25",
                "branch:True": "be595c71-2c1b-4b9a-9017-87769b5786ff",
                "branch:False": "74e51561-ae15-4960-ad3b-22eedc78a123"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "6dbab104-e147-43bf-bd48-2266973fed5d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "85f4cf66-a87c-4b66-b9a9-8c5aaf82749a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "393348df-b39a-4121-952b-ba162c9533f9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5debbd1e-51b7-49d3-832e-20fb16abd861",
            "latches": [
                "dc5c01db-c9c7-4800-8509-657a293a0faf"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "3f9d05af-a83f-4e12-aa41-db91aaba3c45",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "05d49cf4-4c52-4acd-b18a-03446edd16d7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "60310709-7f5c-4a54-be7b-11873199bfe9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "10e65b00-0d13-487d-89b1-5223b48f5cbe",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "95d7883a-062b-419f-b533-6fa021b5ab25",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "be595c71-2c1b-4b9a-9017-87769b5786ff",
            "latches": [
                "9d5b3f8e-0830-462b-be14-3625d3d5bcb3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "74e51561-ae15-4960-ad3b-22eedc78a123",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "1f51e091-f984-44b9-9de4-f4d53c43cc90",
            "properties": [
                [
                    "description",
                    "The attacker identifies the domain controller and several domain administrator accounts, including frieda"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "1e773598-82c3-46d1-8f90-daf28507ec3e",
                "30": "17d1a4c9-bb83-4a07-bc70-f994dad3c1db",
                "60": "67cfcb80-f93f-4c1e-98c8-14cbb8ce5b56",
                "90": "b7b578b4-a3d2-43c7-af8a-4a0786967537",
                "120": "f65390da-eb98-40cc-9663-ef79a961e23a",
                "150": "17e6dcf5-78e9-4818-9e08-eb18eaadcd2f",
                "180": "19b79251-5086-4413-9dcf-5546cb094e03",
                "210": "be702c2f-8d76-4ac9-aa58-5cf54877de35",
                "330": "13ffc29a-95e1-428a-bd5f-741d6ceda0fa",
                "branch:True": "e2b08e8a-95fb-4406-8898-85da110fc1d2",
                "branch:False": "751b6956-506e-4ca9-9cf2-4bba2fb3b4ca"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1e773598-82c3-46d1-8f90-daf28507ec3e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "17d1a4c9-bb83-4a07-bc70-f994dad3c1db",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "67cfcb80-f93f-4c1e-98c8-14cbb8ce5b56",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b7b578b4-a3d2-43c7-af8a-4a0786967537",
            "latches": [
                "1aeeacc5-648e-4393-b42e-0f828a093a54"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f65390da-eb98-40cc-9663-ef79a961e23a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "17e6dcf5-78e9-4818-9e08-eb18eaadcd2f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "19b79251-5086-4413-9dcf-5546cb094e03",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "be702c2f-8d76-4ac9-aa58-5cf54877de35",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "13ffc29a-95e1-428a-bd5f-741d6ceda0fa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e2b08e8a-95fb-4406-8898-85da110fc1d2",
            "latches": [
                "48214284-5c23-41d5-b9b2-3cb1b238abe3",
                "a33b8590-9722-4dcc-8e96-64d49881b8f6"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "751b6956-506e-4ca9-9cf2-4bba2fb3b4ca",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "27da13a9-09bf-4dfd-846e-b7beea16fbe4",
            "properties": [
                [
                    "description",
                    "The attacker identifies a custom service, ViperVPN, that has a weak registry permission"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "d8531cbf-eb19-41e3-ad1f-068ff10c6be7",
                "30": "8a47ca9b-1cff-49bf-b279-6bba2123c90e",
                "60": "0d6ec28d-cb29-4512-bc60-18ee0ed9ad36",
                "90": "76770e49-85dd-4f5d-9865-30fd553e9ca7",
                "120": "2d1ce779-3b84-4079-a591-a7b72065d538",
                "150": "eb433b7a-fbb1-4588-b95a-fa80da3a1453",
                "180": "4b24fefe-720d-4179-91d8-d80b89b2d574",
                "210": "2dda06e1-ee05-4ced-b26d-c107828a1182",
                "330": "ca8b4ec3-70b0-4aba-856c-921aac23013a",
                "branch:True": "a90d3b48-3db0-428c-8eb0-27b913e807dd",
                "branch:False": "137f53dd-0355-46dd-9cdd-d956763fc687"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d8531cbf-eb19-41e3-ad1f-068ff10c6be7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8a47ca9b-1cff-49bf-b279-6bba2123c90e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0d6ec28d-cb29-4512-bc60-18ee0ed9ad36",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "76770e49-85dd-4f5d-9865-30fd553e9ca7",
            "latches": [
                "3ba0c80a-3dec-4581-8dbf-9eb7c59a31b8"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2d1ce779-3b84-4079-a591-a7b72065d538",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb433b7a-fbb1-4588-b95a-fa80da3a1453",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4b24fefe-720d-4179-91d8-d80b89b2d574",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2dda06e1-ee05-4ced-b26d-c107828a1182",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ca8b4ec3-70b0-4aba-856c-921aac23013a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a90d3b48-3db0-428c-8eb0-27b913e807dd",
            "latches": [
                "0e71058b-88c4-4aac-831e-9b6d2565d58e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "137f53dd-0355-46dd-9cdd-d956763fc687",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "79ca06c8-3229-4d41-9160-c228830522dc",
            "properties": [
                [
                    "name",
                    "HOBGOBLIN"
                ],
                [
                    "description",
                    "Windows Workstation targeted by the attacker"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "ed4c012937b1b8355c70dcaa8ab490ea",
                            "red-team-model-network"
                        ],
                        [
                            "5c20847779f2aec2f7239a811db6f5b5",
                            "workstation"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "2bd9ecaf-fa99-4451-a9c4-ab4a762e3fa1",
                "30": "985ace63-37fb-4231-8cca-d146abe5cf05",
                "60": "32d22f72-1024-4a19-9af6-1069e3b5fbb5",
                "90": "3ee74b64-dd06-4e66-9a37-a05410812518",
                "120": "c332de58-4eae-4ec3-96f6-00fd8df067c0",
                "150": "4776885c-2053-442d-a36b-f18565bf346e",
                "180": "e1478aa4-cee0-4df4-bf94-285b6bc4e952",
                "210": "c0498b36-241c-4b61-91c6-f3183b447140",
                "240": "c35903dd-2681-4fa6-9d93-a4ab3022a19e",
                "270": "609024ee-dfee-43d3-bdd2-8cbb86ee99dd",
                "300": "2d4b3800-1ff4-4ac1-b14e-784bb14b693e",
                "330": "d1202255-e072-4952-abcd-6c59ada8ab07"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2bd9ecaf-fa99-4451-a9c4-ab4a762e3fa1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "985ace63-37fb-4231-8cca-d146abe5cf05",
            "latches": [
                "519f9081-c7bc-44ae-a13e-f5f6b8308d07"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "32d22f72-1024-4a19-9af6-1069e3b5fbb5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3ee74b64-dd06-4e66-9a37-a05410812518",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c332de58-4eae-4ec3-96f6-00fd8df067c0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4776885c-2053-442d-a36b-f18565bf346e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e1478aa4-cee0-4df4-bf94-285b6bc4e952",
            "latches": [
                "aa7f6c0c-4628-4c62-b68f-44206b6535b0"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "c0498b36-241c-4b61-91c6-f3183b447140",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c35903dd-2681-4fa6-9d93-a4ab3022a19e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "609024ee-dfee-43d3-bdd2-8cbb86ee99dd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2d4b3800-1ff4-4ac1-b14e-784bb14b693e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d1202255-e072-4952-abcd-6c59ada8ab07",
            "latches": [
                "aebd99ac-d839-4fb4-9a63-4bd8475aa455"
            ]
        },
        {
            "id": "ipv4_addr",
            "instance": "7f60addd-0e7f-4218-acdb-e0ebe5c514f0",
            "properties": [
                [
                    "value",
                    "10.20.20.102"
                ]
            ],
            "anchors": {
                "0": "2193adbb-0716-407f-959d-5b39136a65e2",
                "30": "416be8ba-b6c7-4289-910f-2ee786517e6b",
                "60": "eeee592b-4e45-4042-9ce4-ec37ee311e9f",
                "90": "46af3af7-dee6-408c-b483-478b03c84d41",
                "120": "8956ae97-c890-4aa2-926b-a70bdd371c22",
                "150": "460e444d-b942-422d-9dac-aeb6514fb3b7",
                "180": "95d25aae-c1dd-4365-9935-568416e2d880",
                "210": "53f72844-274e-43b1-bf13-3c777d81cb5e",
                "240": "15a27084-5a39-4186-ad01-11c359ce4c04",
                "270": "baff50e1-a7a8-4033-93a5-bbfe3e33fde1",
                "300": "02705abd-1b61-41fd-a225-027f1e1d8c79",
                "330": "64d4ba4a-2994-4575-920e-68196f5408b3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2193adbb-0716-407f-959d-5b39136a65e2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "416be8ba-b6c7-4289-910f-2ee786517e6b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "eeee592b-4e45-4042-9ce4-ec37ee311e9f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "46af3af7-dee6-408c-b483-478b03c84d41",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8956ae97-c890-4aa2-926b-a70bdd371c22",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "460e444d-b942-422d-9dac-aeb6514fb3b7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "95d25aae-c1dd-4365-9935-568416e2d880",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "53f72844-274e-43b1-bf13-3c777d81cb5e",
            "latches": [
                "798d85cc-74c5-42fd-812c-c76b318ffb98"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "15a27084-5a39-4186-ad01-11c359ce4c04",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "baff50e1-a7a8-4033-93a5-bbfe3e33fde1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "02705abd-1b61-41fd-a225-027f1e1d8c79",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "64d4ba4a-2994-4575-920e-68196f5408b3",
            "latches": []
        },
        {
            "id": "user_account",
            "instance": "b354ba41-073f-46a0-83e5-9c11992bf441",
            "properties": [
                [
                    "user_name",
                    null
                ],
                [
                    "credential",
                    "Password1!"
                ],
                [
                    "account_login",
                    "skt\\Gunter"
                ],
                [
                    "account_type",
                    null
                ],
                [
                    "display_name",
                    "Gunter"
                ],
                [
                    "is_service_account",
                    null
                ],
                [
                    "is_privileged",
                    null
                ],
                [
                    "can_escalate_privs",
                    null
                ],
                [
                    "is_disabled",
                    null
                ],
                [
                    "account_created",
                    null
                ],
                [
                    "account_expires",
                    null
                ],
                [
                    "credential_last_changed",
                    null
                ],
                [
                    "account_first_login",
                    null
                ],
                [
                    "account_last_login",
                    null
                ]
            ],
            "anchors": {
                "0": "8b86eef5-44d0-469f-b225-24ef50de7b5b",
                "30": "6b40ff53-4fee-4bce-af8f-4a918272c3e4",
                "60": "30a212b5-aa64-427f-81b8-471fcbc7978f",
                "90": "20af615e-59a5-4e87-a74e-34755fdd5cfc",
                "120": "17ad0a49-da3a-4a8b-9028-e82bae57c390",
                "150": "8926435d-45b7-42e2-a4a7-b526f10c1f8e",
                "180": "988e78b2-101e-426b-9d62-9039d5ca4188",
                "210": "ddc2a03b-fc80-4d21-92b9-53ce8ada6215",
                "240": "7fdadcb0-24e9-4ef1-a97c-770a35c4e5f9",
                "270": "f3119038-5a72-455a-8060-fe6ebf585e32",
                "300": "f6ebee62-4d8a-44dd-84c4-e43ee891415e",
                "330": "ccaf2e7e-9eae-423d-9959-bda30e26b976"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "8b86eef5-44d0-469f-b225-24ef50de7b5b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6b40ff53-4fee-4bce-af8f-4a918272c3e4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "30a212b5-aa64-427f-81b8-471fcbc7978f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "20af615e-59a5-4e87-a74e-34755fdd5cfc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "17ad0a49-da3a-4a8b-9028-e82bae57c390",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8926435d-45b7-42e2-a4a7-b526f10c1f8e",
            "latches": [
                "b405eaa2-9c90-41ab-8b14-1bd7496c5f6e"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "988e78b2-101e-426b-9d62-9039d5ca4188",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ddc2a03b-fc80-4d21-92b9-53ce8ada6215",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7fdadcb0-24e9-4ef1-a97c-770a35c4e5f9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f3119038-5a72-455a-8060-fe6ebf585e32",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f6ebee62-4d8a-44dd-84c4-e43ee891415e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ccaf2e7e-9eae-423d-9959-bda30e26b976",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "c786d46f-cd49-4ec0-a972-bcd5d55cfd04",
            "properties": [
                [
                    "name",
                    "shoppingbeach.org"
                ],
                [
                    "description",
                    "compromised website proxying C2 communications to the adversary C2 server (MODIN)"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "b706d048e487f9f21eb6d813be0c43c5",
                            "red-team-infrastructure"
                        ],
                        [
                            "d6eeae6f1aaf33b00a815ae0c440a28a",
                            "anonymization"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "51a31f1c-7803-4daa-8c05-8f080d554c5b",
                "30": "fc95625c-63c8-4fc9-8745-3b9d907ad6e5",
                "60": "63ec797a-c63b-4fa7-a1dc-e8af6bd26701",
                "90": "68076afe-097b-4dcc-9900-2e21661702cb",
                "120": "c9e39d97-6fba-4f8e-b205-d81d09c5e102",
                "150": "0320102f-c321-4db4-9636-01b2ce60261f",
                "180": "2b8b36ea-a954-4f1a-9620-f03ddfda8fb7",
                "210": "fa57e5d8-c44a-4bef-9703-d62483aa8692",
                "240": "20f1c6c8-54ea-4e2c-b460-c0d85e304b51",
                "270": "8076ca48-0bbc-4238-ba9f-ef42075e32b5",
                "300": "f3da900c-f61e-4ef7-b20e-1ad52774cc8b",
                "330": "7728f9b0-89e4-4c90-9e04-5881e334f402"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "51a31f1c-7803-4daa-8c05-8f080d554c5b",
            "latches": [
                "3d262585-8c09-45d6-b09f-22de4fab9ea6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "fc95625c-63c8-4fc9-8745-3b9d907ad6e5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "63ec797a-c63b-4fa7-a1dc-e8af6bd26701",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "68076afe-097b-4dcc-9900-2e21661702cb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c9e39d97-6fba-4f8e-b205-d81d09c5e102",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0320102f-c321-4db4-9636-01b2ce60261f",
            "latches": [
                "9cf87461-cccc-4b1d-85d9-9c49f5eb4265"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "2b8b36ea-a954-4f1a-9620-f03ddfda8fb7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fa57e5d8-c44a-4bef-9703-d62483aa8692",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "20f1c6c8-54ea-4e2c-b460-c0d85e304b51",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8076ca48-0bbc-4238-ba9f-ef42075e32b5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f3da900c-f61e-4ef7-b20e-1ad52774cc8b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7728f9b0-89e4-4c90-9e04-5881e334f402",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "b3a66965-1879-4861-a4cf-3bca5b896604",
            "properties": [
                [
                    "name",
                    "prendre-des-vacances.fr"
                ],
                [
                    "description",
                    "compromised website proxying C2 communications to the adversary C2 server (MODIN)"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "665467708ea9778b433e2647319c93df",
                            "red-team-infrastructure"
                        ],
                        [
                            "9ce3d452b68d5e6a4f14efb9bd912279",
                            "anonymization"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "654d0337-7438-41c8-b895-e7e9e8def8c3",
                "30": "aad54a05-7043-4c28-8ef6-3db33850dc0b",
                "60": "e927c131-378e-4198-ad27-d03bbfb1b599",
                "90": "9f406190-3064-4003-9270-6dd6ad009cf5",
                "120": "cb612aa8-bf82-41ea-9917-c5a24a098e98",
                "150": "87b81e70-df53-4d11-ab4c-8642aab960dd",
                "180": "201e121a-32bc-46e8-afa5-fc67602ebadf",
                "210": "74e78e24-d879-4c63-ad4c-a70325e13fb3",
                "240": "9c2aa791-8311-4fc5-a4ac-999a9a583683",
                "270": "d6b9a98c-912e-4a38-a413-0665ceba7d79",
                "300": "01f5c538-12e7-4ead-8211-4ab66d2518eb",
                "330": "94c2b0b7-cdfc-497f-a883-1bf9c0031df9"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "654d0337-7438-41c8-b895-e7e9e8def8c3",
            "latches": [
                "a40dbf9b-2934-484c-aa2a-3431e90e7ff9"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "aad54a05-7043-4c28-8ef6-3db33850dc0b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e927c131-378e-4198-ad27-d03bbfb1b599",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9f406190-3064-4003-9270-6dd6ad009cf5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cb612aa8-bf82-41ea-9917-c5a24a098e98",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "87b81e70-df53-4d11-ab4c-8642aab960dd",
            "latches": [
                "ce550f63-40a4-44c0-a949-2141a011aad9"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "201e121a-32bc-46e8-afa5-fc67602ebadf",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "74e78e24-d879-4c63-ad4c-a70325e13fb3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9c2aa791-8311-4fc5-a4ac-999a9a583683",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d6b9a98c-912e-4a38-a413-0665ceba7d79",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "01f5c538-12e7-4ead-8211-4ab66d2518eb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "94c2b0b7-cdfc-497f-a883-1bf9c0031df9",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "f5f760aa-365f-44dc-88ca-4fa4d27463cb",
            "properties": [
                [
                    "value",
                    "91.52.62.137"
                ]
            ],
            "anchors": {
                "0": "cdd7bb46-f249-44f0-adba-05879ba89207",
                "30": "3340dca2-b9df-48b2-868b-1adee1553e1c",
                "60": "88e57350-851c-40bc-8326-3860a2d25fe1",
                "90": "a93b5b89-00bc-4fc0-a034-f633b1f65584",
                "120": "f322f67c-9289-469f-8302-3452c4287539",
                "150": "9f42895f-5316-4dec-afd3-40a97d2c5775",
                "180": "86013d68-0832-466f-8ce2-85dca5a10910",
                "210": "0ce5aa7e-553d-4d42-a081-0898257c9c3f",
                "240": "c81bae89-0435-4683-a708-52be3e99e07d",
                "270": "4ba4d00e-3cb4-4a2d-9426-530a90d75c9b",
                "300": "999f8780-db17-4a0e-962a-d28712a4c987",
                "330": "8d6876ea-42c9-4527-b51b-39d57b67a4aa"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "cdd7bb46-f249-44f0-adba-05879ba89207",
            "latches": [
                "dfe68874-3f62-4571-9647-912b2567dc65"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3340dca2-b9df-48b2-868b-1adee1553e1c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "88e57350-851c-40bc-8326-3860a2d25fe1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a93b5b89-00bc-4fc0-a034-f633b1f65584",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f322f67c-9289-469f-8302-3452c4287539",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9f42895f-5316-4dec-afd3-40a97d2c5775",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "86013d68-0832-466f-8ce2-85dca5a10910",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0ce5aa7e-553d-4d42-a081-0898257c9c3f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c81bae89-0435-4683-a708-52be3e99e07d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4ba4d00e-3cb4-4a2d-9426-530a90d75c9b",
            "latches": [
                "741c7d7a-a14f-44d8-a3b4-ddc7ec7721df"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "999f8780-db17-4a0e-962a-d28712a4c987",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8d6876ea-42c9-4527-b51b-39d57b67a4aa",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "9b6d7b74-c4a1-410b-9fc6-635881e3e4a4",
            "properties": [
                [
                    "name",
                    "winsas64.bat"
                ],
                [
                    "description",
                    "batch script file used to spray discovered domain accounts with weak passwords"
                ],
                [
                    "malware_types",
                    [
                        [
                            "d0f299fb3c2ff78a54aab8ab298549da",
                            "malicious-script"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "false"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "bee6c80516cea3a4787c814318689412",
                            "steals-authentication-credentials"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "defa6670-ceac-4fae-8a43-66fffbbb0413",
                "30": "d81c1262-1265-4aac-85e9-74f8341163fd",
                "60": "d1138446-9b93-4c5e-ad13-39018eb2c7b3",
                "90": "137fe003-156b-4971-9a95-0469c9bcb974",
                "120": "f0b35374-cb4d-4623-bcc5-a505020ed641",
                "150": "206f165d-90aa-4a4c-be96-34400303e718",
                "180": "4c5dc477-c9b4-4e1f-9ba7-9ca166e7e535",
                "210": "26cbbdec-50c1-4a2d-a486-57704ff52702",
                "240": "f12f4386-1d2c-4459-ae1f-2bc063266ea4",
                "270": "fac49b15-b861-409f-80a2-8e4916c8028a",
                "300": "b29c5cea-dfb6-458a-aed5-9b2aa623765f",
                "330": "bc48bee3-3399-4951-be4f-684ac866a875"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "defa6670-ceac-4fae-8a43-66fffbbb0413",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d81c1262-1265-4aac-85e9-74f8341163fd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d1138446-9b93-4c5e-ad13-39018eb2c7b3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "137fe003-156b-4971-9a95-0469c9bcb974",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f0b35374-cb4d-4623-bcc5-a505020ed641",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "206f165d-90aa-4a4c-be96-34400303e718",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4c5dc477-c9b4-4e1f-9ba7-9ca166e7e535",
            "latches": [
                "c79d9e3a-2984-437c-bf71-37ddacd8026e"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "26cbbdec-50c1-4a2d-a486-57704ff52702",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f12f4386-1d2c-4459-ae1f-2bc063266ea4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fac49b15-b861-409f-80a2-8e4916c8028a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b29c5cea-dfb6-458a-aed5-9b2aa623765f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bc48bee3-3399-4951-be4f-684ac866a875",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "54da6a33-0669-4e98-9d97-7456327d0ada",
            "properties": [
                [
                    "name",
                    "wmimetricsq.exe"
                ],
                [
                    "description",
                    "CARBON-DLL Installer - drops setuplst.xml, MSSVCCFG.dll, mressvc.dll, & msxhlp.dll"
                ],
                [
                    "malware_types",
                    [
                        [
                            "5b1765c2c07c7b278ecf25a22c30ff0f",
                            "dropper"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "09632d54b51934578a933f7f843e938d",
                            "installs-other-components"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "82b92ceb-b333-485c-a825-e5127f1eef8e",
                "30": "f345f14a-f632-45fc-aeb9-e90176a27451",
                "60": "b0f0a8c9-9bc2-4e0c-978a-afa55ef6922e",
                "90": "0100aa9b-e84e-49ca-8a5a-ae888d3eedf0",
                "120": "86d15ddd-2d1d-4fac-b8fd-82a471a5002d",
                "150": "0985e1e8-e465-4f51-9494-e7d5def1076f",
                "180": "620f1706-00c9-4663-93d2-de7d3f115e66",
                "210": "6e63fdd3-3dec-4051-b703-77647b901fef",
                "240": "00e70f3a-784f-48f3-b6b0-9676159e53e1",
                "270": "fc343a96-1450-4d6d-b048-456f7a22881c",
                "300": "3766baa9-1f30-42a6-aed9-ab4d8809b03e",
                "330": "62230307-428f-43a3-9490-53f949d6fd52"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "82b92ceb-b333-485c-a825-e5127f1eef8e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f345f14a-f632-45fc-aeb9-e90176a27451",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b0f0a8c9-9bc2-4e0c-978a-afa55ef6922e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0100aa9b-e84e-49ca-8a5a-ae888d3eedf0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "86d15ddd-2d1d-4fac-b8fd-82a471a5002d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0985e1e8-e465-4f51-9494-e7d5def1076f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "620f1706-00c9-4663-93d2-de7d3f115e66",
            "latches": [
                "f8af5778-36e2-4bab-bfa9-93963d9e68d4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "6e63fdd3-3dec-4051-b703-77647b901fef",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "00e70f3a-784f-48f3-b6b0-9676159e53e1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fc343a96-1450-4d6d-b048-456f7a22881c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3766baa9-1f30-42a6-aed9-ab4d8809b03e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "62230307-428f-43a3-9490-53f949d6fd52",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "0651ae75-6361-429d-94f9-4f079e43397e",
            "properties": [
                [
                    "name",
                    "BANNIK"
                ],
                [
                    "description",
                    "domain controller with Active Directory"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "4330e55d0d49728b883105c75c56ab88",
                            "red-team-model-network"
                        ],
                        [
                            "9bb666f24d95612ec5664290dd7c20c3",
                            "domain-controller"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "3939b8bc-2977-495a-a750-75912ec75cfb",
                "30": "f26b4fe1-7f37-4782-9794-1a9685242e7b",
                "60": "8158c805-423f-4d4a-91ac-4146c247154d",
                "90": "4a7433a2-9454-4fd0-90ac-5cf2c30350b3",
                "120": "ba164555-f0c9-4011-9594-da6ef7686680",
                "150": "bd4146ec-c167-42ca-ac74-fd4575197e4a",
                "180": "a4f6ca96-544a-457c-b4bf-8f6151f8e807",
                "210": "e2ff2e51-9768-4f64-8905-c2f7653de090",
                "240": "ee54887f-b887-4594-bcbd-30a4f4124378",
                "270": "c10a9006-5d1d-4ebd-8478-3c69cb3818ad",
                "300": "dbbc63a9-6764-452d-bd89-58756ef0ec9d",
                "330": "1f3e5cb4-af97-4359-bcae-76f10c1ab6e4"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "3939b8bc-2977-495a-a750-75912ec75cfb",
            "latches": [
                "7818fc9d-1913-4d2b-addd-bcb0500b94c5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "f26b4fe1-7f37-4782-9794-1a9685242e7b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8158c805-423f-4d4a-91ac-4146c247154d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4a7433a2-9454-4fd0-90ac-5cf2c30350b3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ba164555-f0c9-4011-9594-da6ef7686680",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bd4146ec-c167-42ca-ac74-fd4575197e4a",
            "latches": [
                "23a8996a-fe86-4764-b580-02153b9e6265"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a4f6ca96-544a-457c-b4bf-8f6151f8e807",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e2ff2e51-9768-4f64-8905-c2f7653de090",
            "latches": [
                "7eecd9ad-17bb-44b8-861f-3768458df4c7"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ee54887f-b887-4594-bcbd-30a4f4124378",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c10a9006-5d1d-4ebd-8478-3c69cb3818ad",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dbbc63a9-6764-452d-bd89-58756ef0ec9d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1f3e5cb4-af97-4359-bcae-76f10c1ab6e4",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "d92657d3-60dd-495b-bf8d-a602853ae9c1",
            "properties": [
                [
                    "value",
                    "10.20.10.9"
                ]
            ],
            "anchors": {
                "0": "9cd6b15d-cb74-4739-8732-400160e2f6ba",
                "30": "8bc5d3ae-6ba3-4464-b420-f6993283902f",
                "60": "d42ecea9-1b76-462b-8787-d5033f9a67bd",
                "90": "69a83d67-095a-4f09-9827-e294912de095",
                "120": "aa6bbf43-32a9-4c9f-b1bc-39463d2e3ce9",
                "150": "71376778-dc74-4a99-9b74-1c243fa55637",
                "180": "f52802ea-f1ca-4fbe-81f8-f0245b4503e3",
                "210": "fe64992c-eb3d-4ded-97e7-5c915fab4cc4",
                "240": "7cf6a9d2-da5d-46d6-88e6-89e82a726b86",
                "270": "37fda175-f2c0-4e9b-b81f-f6e5a878e8a4",
                "300": "5604b4d6-0225-4683-908a-d4b67e037aac",
                "330": "5f0f945e-3323-4b20-8e05-283401de37d3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "9cd6b15d-cb74-4739-8732-400160e2f6ba",
            "latches": [
                "4bca8695-70f7-4f14-b69a-253cfcac0c01"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "8bc5d3ae-6ba3-4464-b420-f6993283902f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d42ecea9-1b76-462b-8787-d5033f9a67bd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "69a83d67-095a-4f09-9827-e294912de095",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "aa6bbf43-32a9-4c9f-b1bc-39463d2e3ce9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "71376778-dc74-4a99-9b74-1c243fa55637",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f52802ea-f1ca-4fbe-81f8-f0245b4503e3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fe64992c-eb3d-4ded-97e7-5c915fab4cc4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7cf6a9d2-da5d-46d6-88e6-89e82a726b86",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "37fda175-f2c0-4e9b-b81f-f6e5a878e8a4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5604b4d6-0225-4683-908a-d4b67e037aac",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5f0f945e-3323-4b20-8e05-283401de37d3",
            "latches": []
        },
        {
            "id": "user_account",
            "instance": "b40d272d-17df-42f2-ba21-de0c9a460def",
            "properties": [
                [
                    "user_name",
                    null
                ],
                [
                    "credential",
                    "Password3!"
                ],
                [
                    "account_login",
                    "skt\\Frieda"
                ],
                [
                    "account_type",
                    "domain-administrator"
                ],
                [
                    "display_name",
                    "Frieda"
                ],
                [
                    "is_service_account",
                    null
                ],
                [
                    "is_privileged",
                    null
                ],
                [
                    "can_escalate_privs",
                    "true"
                ],
                [
                    "is_disabled",
                    null
                ],
                [
                    "account_created",
                    null
                ],
                [
                    "account_expires",
                    null
                ],
                [
                    "credential_last_changed",
                    null
                ],
                [
                    "account_first_login",
                    null
                ],
                [
                    "account_last_login",
                    null
                ]
            ],
            "anchors": {
                "0": "877ed6cb-3380-46f1-b33e-99766f1952a3",
                "30": "1487a0ce-753b-4517-8b49-cd804c155722",
                "60": "3a4d17e0-344d-455a-9396-b0e46ea345fc",
                "90": "4d3daebb-d648-470a-b36b-e0534d6e770d",
                "120": "98ebe8f9-8299-44b7-824b-b74326ec1e26",
                "150": "72ee13bb-28e5-4ce6-8558-1aab06540bfb",
                "180": "4d11526d-459d-4e81-87ab-3edc96e05d95",
                "210": "cb362ce8-8f6d-4c54-818d-ff5a7840f374",
                "240": "ab60e318-a139-42c0-98ba-36277f59e4e1",
                "270": "c8cc6d56-4797-443a-a957-54f79cdc3f1e",
                "300": "7d6f896c-b9ee-4f7c-8adb-14eaa8e3b8c3",
                "330": "f92b28d2-e970-43c3-b413-83a9bf7ddac0"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "877ed6cb-3380-46f1-b33e-99766f1952a3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1487a0ce-753b-4517-8b49-cd804c155722",
            "latches": [
                "b64f9d96-4d28-4d34-a399-1a23bb877160"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "3a4d17e0-344d-455a-9396-b0e46ea345fc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4d3daebb-d648-470a-b36b-e0534d6e770d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "98ebe8f9-8299-44b7-824b-b74326ec1e26",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "72ee13bb-28e5-4ce6-8558-1aab06540bfb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4d11526d-459d-4e81-87ab-3edc96e05d95",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cb362ce8-8f6d-4c54-818d-ff5a7840f374",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ab60e318-a139-42c0-98ba-36277f59e4e1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c8cc6d56-4797-443a-a957-54f79cdc3f1e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7d6f896c-b9ee-4f7c-8adb-14eaa8e3b8c3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f92b28d2-e970-43c3-b413-83a9bf7ddac0",
            "latches": []
        },
        {
            "id": "action",
            "instance": "67fcca2e-9d46-49aa-aef1-38099d0636c9",
            "properties": [
                [
                    "name",
                    "Dynamic-link Library Injection"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0004"
                        ],
                        [
                            "technique",
                            "T1055.001"
                        ]
                    ]
                ],
                [
                    "description",
                    "the CARBON DLL Installer injects the communications library DLL (msxhlp.dll) into msedge.exe"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "b689717e-52da-4b2e-ad61-b307e9362e57",
                "30": "5474c2d2-13fc-40ab-b17a-263b9fdfc396",
                "60": "c1395dad-7455-4ea9-b9f4-e99d1b0bb291",
                "90": "67e41cca-ae12-4f72-81d8-ab2767184225",
                "120": "c6a1b7c5-d1fa-4023-b99b-5d6c30168ab8",
                "150": "d6d81ee7-f682-4e23-b901-ec84e6c93938",
                "180": "c32683a7-aa50-44c0-a4ad-c884d3263461",
                "210": "e6f096ea-af4b-47b2-9373-6120bec8cc69",
                "240": "40839b24-5b16-420f-995e-b9d9a3d377ed",
                "270": "0727f6df-cf25-4ff4-b29e-09b7275a82ef",
                "300": "a7f2e556-9a1d-42bb-b5ec-0c923aac5c04",
                "330": "7b66d5b3-0aef-4ca3-8f83-1413d9710cc6"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b689717e-52da-4b2e-ad61-b307e9362e57",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5474c2d2-13fc-40ab-b17a-263b9fdfc396",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c1395dad-7455-4ea9-b9f4-e99d1b0bb291",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "67e41cca-ae12-4f72-81d8-ab2767184225",
            "latches": [
                "aa758216-9884-46bb-a17a-cfe2bf7076ed"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c6a1b7c5-d1fa-4023-b99b-5d6c30168ab8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d6d81ee7-f682-4e23-b901-ec84e6c93938",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c32683a7-aa50-44c0-a4ad-c884d3263461",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e6f096ea-af4b-47b2-9373-6120bec8cc69",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "40839b24-5b16-420f-995e-b9d9a3d377ed",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0727f6df-cf25-4ff4-b29e-09b7275a82ef",
            "latches": [
                "8b0fc84d-5c88-4bb9-a62a-e5e4997a9def"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "a7f2e556-9a1d-42bb-b5ec-0c923aac5c04",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7b66d5b3-0aef-4ca3-8f83-1413d9710cc6",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ffeafcc9-ac70-4466-b139-7c256e843e1d",
            "properties": [
                [
                    "name",
                    "Domain Account"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0007"
                        ],
                        [
                            "technique",
                            "T1087.002"
                        ]
                    ]
                ],
                [
                    "description",
                    "svchost.exe executes cmd.exe to enumerate discovered groups for their members"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "0d32e14f-aac7-4834-ac14-3ae8627174b4",
                "30": "f0dadeed-5103-4370-ad72-1dcd183df482",
                "60": "f271dd49-437e-44f0-9062-fb220116f97b",
                "90": "a7727c72-9a01-4279-94a1-104d6a6cb474",
                "120": "d03ab729-544d-488b-8180-14405a78a976",
                "150": "be7dd172-2f08-4ee3-9f25-2ec1cd8ef5f5",
                "180": "57ba16ae-d4a2-4a43-aca5-dbe926075b55",
                "210": "0bbdc5d6-3bd6-4674-8662-93cc69b5e842",
                "240": "c41d8953-45c9-4014-8bf5-87f5a35fd44b",
                "270": "d60f8106-25f0-4f33-a6db-a4876420f432",
                "300": "a21d6228-fa9e-4898-ad68-3737ede09ed5",
                "330": "ba0c57a2-ffb9-413e-b32c-a3403b7db442"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0d32e14f-aac7-4834-ac14-3ae8627174b4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f0dadeed-5103-4370-ad72-1dcd183df482",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f271dd49-437e-44f0-9062-fb220116f97b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a7727c72-9a01-4279-94a1-104d6a6cb474",
            "latches": [
                "e759fd35-248b-4f20-ae92-48a933524c54"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "d03ab729-544d-488b-8180-14405a78a976",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "be7dd172-2f08-4ee3-9f25-2ec1cd8ef5f5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "57ba16ae-d4a2-4a43-aca5-dbe926075b55",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0bbdc5d6-3bd6-4674-8662-93cc69b5e842",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c41d8953-45c9-4014-8bf5-87f5a35fd44b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d60f8106-25f0-4f33-a6db-a4876420f432",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a21d6228-fa9e-4898-ad68-3737ede09ed5",
            "latches": [
                "1da82f4a-cfe1-47a4-a07b-7dcb39335108"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ba0c57a2-ffb9-413e-b32c-a3403b7db442",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "08c7c377-56da-46dd-b99a-62c86d8c4ad6",
            "properties": [
                [
                    "name",
                    "KHABIBULIN"
                ],
                [
                    "description",
                    "Windows Workstation "
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "f278139df4a2dff56cfd2c493ad18f9e",
                            "red-team-model-network"
                        ],
                        [
                            "7382754934d5d18ee1d3f7a82bdbd037",
                            "workstation"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "497aec5b-a768-47db-b921-a1d75b3ddccd",
                "30": "4eca5e7c-a8b1-45dc-a988-feec182e39b9",
                "60": "4e3b650c-38a0-4908-a2a8-d74114cbae1e",
                "90": "a0be88b5-7942-4a4d-ac7e-1826056277f6",
                "120": "d70aa34b-6fca-43e1-8fbe-9f4ee215c10e",
                "150": "235407e0-2546-4ccc-969b-57f7aabefc96",
                "180": "99f733c3-faa4-406d-beca-a3f7f72020b7",
                "210": "e3553f45-0f74-4388-a57c-4be9669df8a4",
                "240": "75c1bea1-622c-4615-ae82-caa6b67ffd5a",
                "270": "4d6e2b3f-2ef1-424d-9c62-159547edf2d1",
                "300": "fc4694ce-9f9d-4bb0-8cdb-15bd58f75579",
                "330": "bbaa87fc-b9aa-4386-9ef6-829b5958a937"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "497aec5b-a768-47db-b921-a1d75b3ddccd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4eca5e7c-a8b1-45dc-a988-feec182e39b9",
            "latches": [
                "57b3e286-fbfa-4826-9bd2-84bbbd5c47f9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4e3b650c-38a0-4908-a2a8-d74114cbae1e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a0be88b5-7942-4a4d-ac7e-1826056277f6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d70aa34b-6fca-43e1-8fbe-9f4ee215c10e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "235407e0-2546-4ccc-969b-57f7aabefc96",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "99f733c3-faa4-406d-beca-a3f7f72020b7",
            "latches": [
                "5170a536-46f3-4b8c-823a-78e5000b9092"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "e3553f45-0f74-4388-a57c-4be9669df8a4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "75c1bea1-622c-4615-ae82-caa6b67ffd5a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4d6e2b3f-2ef1-424d-9c62-159547edf2d1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fc4694ce-9f9d-4bb0-8cdb-15bd58f75579",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bbaa87fc-b9aa-4386-9ef6-829b5958a937",
            "latches": [
                "9866ad5c-59e1-4749-ad53-0114ad1d7c0f"
            ]
        },
        {
            "id": "user_account",
            "instance": "53bda5b2-062d-4a60-a2b2-f8bb1018a954",
            "properties": [
                [
                    "user_name",
                    null
                ],
                [
                    "credential",
                    "\tPassword2!"
                ],
                [
                    "account_login",
                    "skt\\adalwolfa"
                ],
                [
                    "account_type",
                    "apache-administrator"
                ],
                [
                    "display_name",
                    "Adalwolfa"
                ],
                [
                    "is_service_account",
                    null
                ],
                [
                    "is_privileged",
                    null
                ],
                [
                    "can_escalate_privs",
                    null
                ],
                [
                    "is_disabled",
                    null
                ],
                [
                    "account_created",
                    null
                ],
                [
                    "account_expires",
                    null
                ],
                [
                    "credential_last_changed",
                    null
                ],
                [
                    "account_first_login",
                    null
                ],
                [
                    "account_last_login",
                    null
                ]
            ],
            "anchors": {
                "0": "9eda164e-9e13-46fb-afbc-234e9bbe0f39",
                "30": "935b28df-90b7-4f68-83c3-ebdb622d472f",
                "60": "1d483a73-dd53-43b2-af5c-995765acfe5b",
                "90": "b9f598c6-4697-4b2a-bb8f-d0473df96c45",
                "120": "980ff6c7-2f22-4be8-b11c-23c624045909",
                "150": "c34c5604-b2f8-4c42-aa85-09c4c8ab589b",
                "180": "060b11e4-d978-4446-827e-7a9314596a47",
                "210": "bb27683e-f033-4589-93e2-8ffdf6f66272",
                "240": "1a34a9db-1663-4470-a2db-18db9de475c0",
                "270": "dae29b84-bedb-46dd-8bb9-18dd4496cef2",
                "300": "87d72e2c-258e-4d2a-89ee-12fe19466706",
                "330": "bc9d487a-991f-4ff2-b611-d69973d2e700"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "9eda164e-9e13-46fb-afbc-234e9bbe0f39",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "935b28df-90b7-4f68-83c3-ebdb622d472f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1d483a73-dd53-43b2-af5c-995765acfe5b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b9f598c6-4697-4b2a-bb8f-d0473df96c45",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "980ff6c7-2f22-4be8-b11c-23c624045909",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c34c5604-b2f8-4c42-aa85-09c4c8ab589b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "060b11e4-d978-4446-827e-7a9314596a47",
            "latches": [
                "048dc396-e564-4e09-9d7a-f74a01f7e996"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb27683e-f033-4589-93e2-8ffdf6f66272",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1a34a9db-1663-4470-a2db-18db9de475c0",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dae29b84-bedb-46dd-8bb9-18dd4496cef2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "87d72e2c-258e-4d2a-89ee-12fe19466706",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bc9d487a-991f-4ff2-b611-d69973d2e700",
            "latches": []
        },
        {
            "id": "action",
            "instance": "995318be-bb91-48e9-8607-feef8a0322ec",
            "properties": [
                [
                    "name",
                    "Match Legitimate Name or Location"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0005"
                        ],
                        [
                            "technique",
                            "T1036.005"
                        ]
                    ]
                ],
                [
                    "description",
                    "cmd.exe moves wsqsp.exe and wsqmanager.exe to the system32 folder"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "ba3d71ab-e135-4af0-b926-c4ff8d6de212",
                "30": "7e474321-9915-4167-8224-ec412b43b2b4",
                "60": "c45b9fae-7170-4b30-8ed8-a3a8e20407c2",
                "90": "5c9b162d-c163-4339-918c-d555d83cabd9",
                "120": "ae18fee5-1482-4da7-9ad8-30b42e866af6",
                "150": "61783e38-588f-4f72-b9d7-46636063acf1",
                "180": "eb3e1d43-48a0-4854-9fdc-cb83944fa8e5",
                "210": "581d8d8e-b834-417d-80c1-07f89c8a1948",
                "240": "0512e369-fd6f-4cc4-8975-81d1a1ab6ab2",
                "270": "87c20ff8-3868-4b24-9230-37048721fcd8",
                "300": "1a9e06ba-e2b7-4d7d-a1a3-01580dba5967",
                "330": "8a84a05a-055a-4921-9ac1-094853b502c6"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ba3d71ab-e135-4af0-b926-c4ff8d6de212",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7e474321-9915-4167-8224-ec412b43b2b4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c45b9fae-7170-4b30-8ed8-a3a8e20407c2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5c9b162d-c163-4339-918c-d555d83cabd9",
            "latches": [
                "34d9f271-7249-4400-984f-700129f9c370"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ae18fee5-1482-4da7-9ad8-30b42e866af6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "61783e38-588f-4f72-b9d7-46636063acf1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb3e1d43-48a0-4854-9fdc-cb83944fa8e5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "581d8d8e-b834-417d-80c1-07f89c8a1948",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0512e369-fd6f-4cc4-8975-81d1a1ab6ab2",
            "latches": [
                "d5ec3be0-07fd-44e9-9cb1-cc8d02a8a241"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "87c20ff8-3868-4b24-9230-37048721fcd8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1a9e06ba-e2b7-4d7d-a1a3-01580dba5967",
            "latches": [
                "1e583ee1-98fd-4bbe-a0ef-98133735fac2"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "8a84a05a-055a-4921-9ac1-094853b502c6",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "06d9743e-3243-40eb-8448-7a56a11f44d7",
            "properties": [
                [
                    "value",
                    "10.20.20.104"
                ]
            ],
            "anchors": {
                "0": "507b0921-5694-47a9-9d2e-0daa9c5f7699",
                "30": "fe499f56-0675-4dc6-98d0-eada5233912a",
                "60": "cec0a4a9-b804-4158-a3ad-81336845e568",
                "90": "2f699337-6508-453e-a415-3f5251665ac3",
                "120": "f1759dc1-3c33-4b33-a57c-98f03090b2b1",
                "150": "c233ef5c-e80b-4cb2-9f9b-2017b8a5ebac",
                "180": "e7b6d124-6ccd-4588-9cbd-49429307983e",
                "210": "90834761-8e08-4886-a678-fcb2ad44dd39",
                "240": "4bb9e8d9-a3f3-431d-adf9-dfc57c1ab547",
                "270": "e241eaa2-ef68-4ba4-bdd3-f2e2eaa608af",
                "300": "751899e5-4e88-4c3c-9154-5a6777decc2c",
                "330": "71886efb-8b68-473c-b18a-d041d34de7ed"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "507b0921-5694-47a9-9d2e-0daa9c5f7699",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fe499f56-0675-4dc6-98d0-eada5233912a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cec0a4a9-b804-4158-a3ad-81336845e568",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2f699337-6508-453e-a415-3f5251665ac3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f1759dc1-3c33-4b33-a57c-98f03090b2b1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c233ef5c-e80b-4cb2-9f9b-2017b8a5ebac",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e7b6d124-6ccd-4588-9cbd-49429307983e",
            "latches": [
                "5e4439de-b066-43ac-b151-e80760297476"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "90834761-8e08-4886-a678-fcb2ad44dd39",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4bb9e8d9-a3f3-431d-adf9-dfc57c1ab547",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e241eaa2-ef68-4ba4-bdd3-f2e2eaa608af",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "751899e5-4e88-4c3c-9154-5a6777decc2c",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "71886efb-8b68-473c-b18a-d041d34de7ed",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "752470ae-25cb-4f37-b64b-2133f2d3284a",
            "properties": [
                [
                    "value",
                    "91.52.62.203"
                ]
            ],
            "anchors": {
                "0": "ed5a1ffb-c516-40ce-9c4e-07b42ec2a540",
                "30": "5e86520e-6970-4e9d-a773-0b40b74cd283",
                "60": "c68f9d76-9e46-43b3-a74f-c0d50dac37e4",
                "90": "a10ef57e-fc97-4cdf-9298-185de7843009",
                "120": "075e4480-5cfb-4a99-833e-bab477bfa267",
                "150": "1463f895-ec2e-46b0-bdc6-3248797b7ed0",
                "180": "9608655f-6b4d-4066-8301-47b2671cd831",
                "210": "ef1b88cf-0e9c-443a-9d39-7afb3ce6dc71",
                "240": "35ad9b25-e57b-4d28-999b-38e00ea58b2b",
                "270": "2021f864-7542-439d-9f05-6e12186b51b5",
                "300": "4a85f5f8-fa7b-43b9-a752-dae2ba4cbf11",
                "330": "5152ff25-854c-4412-a890-8c892e961a9a"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "ed5a1ffb-c516-40ce-9c4e-07b42ec2a540",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5e86520e-6970-4e9d-a773-0b40b74cd283",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c68f9d76-9e46-43b3-a74f-c0d50dac37e4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a10ef57e-fc97-4cdf-9298-185de7843009",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "075e4480-5cfb-4a99-833e-bab477bfa267",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1463f895-ec2e-46b0-bdc6-3248797b7ed0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9608655f-6b4d-4066-8301-47b2671cd831",
            "latches": [
                "34ca885b-13ac-4223-9831-0c8cbca3b391"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ef1b88cf-0e9c-443a-9d39-7afb3ce6dc71",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "35ad9b25-e57b-4d28-999b-38e00ea58b2b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2021f864-7542-439d-9f05-6e12186b51b5",
            "latches": [
                "cfc6fd21-cccb-49af-9b33-d0051689d318"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "4a85f5f8-fa7b-43b9-a752-dae2ba4cbf11",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5152ff25-854c-4412-a890-8c892e961a9a",
            "latches": []
        },
        {
            "id": "tool",
            "instance": "65fa3b8b-c3f5-4cf7-b4b3-85faf2fb4740",
            "properties": [
                [
                    "name",
                    "pscp.exe"
                ],
                [
                    "description",
                    "PuTTY Secure Copy Protocol; used for transferring files and folders from Windows to Linux"
                ],
                [
                    "tool_types",
                    [
                        [
                            "110c538ea92cd5eda5e71e9df521bb71",
                            "transfer-files"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "tool_version",
                    null
                ]
            ],
            "anchors": {
                "0": "b4c090fb-3426-4f84-9661-c92e48f2a377",
                "30": "bb185b48-b359-4698-9672-b122b1151b5d",
                "60": "6ba2f44c-b0ef-40b7-9658-8e3143f7b929",
                "90": "4bc3daa4-ea78-4cb9-9346-978000fa4d14",
                "120": "4899cac8-6c5c-449a-9db0-945a006e3600",
                "150": "f4d0d5b6-8a72-45c8-9703-06c08a0e89fd",
                "180": "bb3fe44d-7ba5-4056-bf9d-671c2bafaa7e",
                "210": "3b7ecc82-1885-4804-8ba7-89e563b1e6c6",
                "240": "6f093d1f-838e-4fde-b9fa-e0462ab726c1",
                "270": "15d4a25a-3708-499d-9f13-113d010b352f",
                "300": "db6a4b65-9bcc-4db2-9dae-5d26056bf3e6",
                "330": "6b859958-d381-43c9-9717-8baeca69ff70"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b4c090fb-3426-4f84-9661-c92e48f2a377",
            "latches": [
                "412ce29b-a6e4-46ea-80b7-c88a2ed1f184"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb185b48-b359-4698-9672-b122b1151b5d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6ba2f44c-b0ef-40b7-9658-8e3143f7b929",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4bc3daa4-ea78-4cb9-9346-978000fa4d14",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4899cac8-6c5c-449a-9db0-945a006e3600",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f4d0d5b6-8a72-45c8-9703-06c08a0e89fd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb3fe44d-7ba5-4056-bf9d-671c2bafaa7e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3b7ecc82-1885-4804-8ba7-89e563b1e6c6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6f093d1f-838e-4fde-b9fa-e0462ab726c1",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "15d4a25a-3708-499d-9f13-113d010b352f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "db6a4b65-9bcc-4db2-9dae-5d26056bf3e6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6b859958-d381-43c9-9717-8baeca69ff70",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "e5dac779-01a7-40c7-9bb8-9831ed0f8a7e",
            "properties": [
                [
                    "name",
                    "KAGAROV"
                ],
                [
                    "description",
                    "Apache server; Linux OS"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "3cc3ab968e69e71bf0dbee3a730bad85",
                            "red-team-model-network"
                        ],
                        [
                            "589e8933b4367acc8e9d3a1291e10935",
                            "apache-server"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "d694406f-b609-4d75-bc33-968e91a523c6",
                "30": "d1451ada-4e5c-474d-9943-156cff33e50c",
                "60": "5ec27881-0384-46f8-b69c-24ca1c1f3cad",
                "90": "520df998-7aed-4660-8b5e-6d7bbc97e735",
                "120": "5cca6af3-ef74-4134-8609-672c12a3a127",
                "150": "c25f1a5c-707a-4b3c-a55e-0e1ab6eedb34",
                "180": "5eecd029-11d0-46d9-aea4-aa63dfb857d3",
                "210": "a2751f49-b215-4f40-9f6d-213b699dcbe4",
                "240": "38660969-3530-4541-b165-303a55192a74",
                "270": "f331a494-d5a5-4026-a2aa-d8d45fa2e2eb",
                "300": "898c3e8e-f919-47bf-bd54-16e7d5ff76f8",
                "330": "736fb30a-9178-46c5-ab0e-895c6e6e82ea"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d694406f-b609-4d75-bc33-968e91a523c6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d1451ada-4e5c-474d-9943-156cff33e50c",
            "latches": [
                "52e87d32-b1b4-4baa-aff4-5c2dbc214c2d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "5ec27881-0384-46f8-b69c-24ca1c1f3cad",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "520df998-7aed-4660-8b5e-6d7bbc97e735",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5cca6af3-ef74-4134-8609-672c12a3a127",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c25f1a5c-707a-4b3c-a55e-0e1ab6eedb34",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5eecd029-11d0-46d9-aea4-aa63dfb857d3",
            "latches": [
                "9ddc8960-1d33-4cc0-ad1a-6fb45bbde650"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "a2751f49-b215-4f40-9f6d-213b699dcbe4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "38660969-3530-4541-b165-303a55192a74",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f331a494-d5a5-4026-a2aa-d8d45fa2e2eb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "898c3e8e-f919-47bf-bd54-16e7d5ff76f8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "736fb30a-9178-46c5-ab0e-895c6e6e82ea",
            "latches": [
                "aec16ba2-68e9-4668-98c2-f0b4da58026d"
            ]
        },
        {
            "id": "ipv4_addr",
            "instance": "74c3e5ab-823f-413b-b558-05e925ff290f",
            "properties": [
                [
                    "value",
                    "10.20.10.23"
                ]
            ],
            "anchors": {
                "0": "a839cd23-e302-4f53-a52a-077562de535d",
                "30": "fbc5bc08-fd7c-4ba3-9638-911fd40e87b5",
                "60": "67e4e530-5b86-4d78-9b62-bdbf6233ccf5",
                "90": "ce0b15d9-5b7d-42c9-8883-6d2ae3f11048",
                "120": "3c1add4a-0aa0-4f59-88a3-b0c471ce0b91",
                "150": "69d2a5d4-3019-42a5-ae5d-57bb5253fb27",
                "180": "601f1147-e1e4-4c26-a5a3-b384788bfb96",
                "210": "761de829-713f-4b6c-84af-f90241c48c1c",
                "240": "3cf5a28f-7c59-4192-9132-4f4bc14e277e",
                "270": "bd07fdae-3590-4f8d-b413-6be690ba8256",
                "300": "5f9f0ea0-2dd1-4d19-86cc-b0eddedf2396",
                "330": "3cfe763c-13cf-432a-ba36-d86f60646374"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "a839cd23-e302-4f53-a52a-077562de535d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fbc5bc08-fd7c-4ba3-9638-911fd40e87b5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "67e4e530-5b86-4d78-9b62-bdbf6233ccf5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ce0b15d9-5b7d-42c9-8883-6d2ae3f11048",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3c1add4a-0aa0-4f59-88a3-b0c471ce0b91",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "69d2a5d4-3019-42a5-ae5d-57bb5253fb27",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "601f1147-e1e4-4c26-a5a3-b384788bfb96",
            "latches": [
                "a7143654-e8ac-4946-8688-ea590499bac1"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "761de829-713f-4b6c-84af-f90241c48c1c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3cf5a28f-7c59-4192-9132-4f4bc14e277e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bd07fdae-3590-4f8d-b413-6be690ba8256",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5f9f0ea0-2dd1-4d19-86cc-b0eddedf2396",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3cfe763c-13cf-432a-ba36-d86f60646374",
            "latches": []
        },
        {
            "id": "user_account",
            "instance": "b8b80ae0-8d09-4f08-97ef-bbe475ff8b4d",
            "properties": [
                [
                    "user_name",
                    null
                ],
                [
                    "credential",
                    "Password2!"
                ],
                [
                    "account_login",
                    "skt\\adalwolfa"
                ],
                [
                    "account_type",
                    "server-administrator"
                ],
                [
                    "display_name",
                    "Adalwolfa"
                ],
                [
                    "is_service_account",
                    null
                ],
                [
                    "is_privileged",
                    null
                ],
                [
                    "can_escalate_privs",
                    null
                ],
                [
                    "is_disabled",
                    null
                ],
                [
                    "account_created",
                    null
                ],
                [
                    "account_expires",
                    null
                ],
                [
                    "credential_last_changed",
                    null
                ],
                [
                    "account_first_login",
                    null
                ],
                [
                    "account_last_login",
                    null
                ]
            ],
            "anchors": {
                "0": "3e8a400a-ab50-4961-99a8-e385fb4072ec",
                "30": "8be896ae-3f0c-49b7-88ee-076de0e94856",
                "60": "1a3f4228-5cb5-4293-9b1f-b9e455e7209c",
                "90": "a0649fc7-6ccb-4f1a-b403-5e0f88326b23",
                "120": "152b53a0-8023-4274-8427-e3f569c73ab3",
                "150": "9793146f-f803-4bf0-a5f4-8384051b3cff",
                "180": "9570936f-30d0-4250-8e8b-7a7d0c736869",
                "210": "437038bb-9c7a-4851-aa6b-78c2809df959",
                "240": "68184614-52ff-4e12-aa9e-da9737547989",
                "270": "99f5a4e5-d9ad-456f-b0a2-550491cbce9a",
                "300": "e3fb3234-66a2-4b85-8105-9c49062461d3",
                "330": "edeca83d-67bb-42ba-8f09-6c0625f63e42"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "3e8a400a-ab50-4961-99a8-e385fb4072ec",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8be896ae-3f0c-49b7-88ee-076de0e94856",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1a3f4228-5cb5-4293-9b1f-b9e455e7209c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a0649fc7-6ccb-4f1a-b403-5e0f88326b23",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "152b53a0-8023-4274-8427-e3f569c73ab3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9793146f-f803-4bf0-a5f4-8384051b3cff",
            "latches": [
                "e5ed4ce7-c97d-4145-9af5-13591dc90028"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "9570936f-30d0-4250-8e8b-7a7d0c736869",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "437038bb-9c7a-4851-aa6b-78c2809df959",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "68184614-52ff-4e12-aa9e-da9737547989",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "99f5a4e5-d9ad-456f-b0a2-550491cbce9a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e3fb3234-66a2-4b85-8105-9c49062461d3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "edeca83d-67bb-42ba-8f09-6c0625f63e42",
            "latches": []
        },
        {
            "id": "note",
            "instance": "45351783-5516-4524-a176-d8b8d9c48b10",
            "properties": [
                [
                    "abstract",
                    null
                ],
                [
                    "content",
                    "The system executes the fake cron before the system's real cron because files located in /etc/systemd/system/ are executed before files in the /usr/sbin/cron"
                ],
                [
                    "authors",
                    []
                ]
            ],
            "anchors": {
                "0": "0f09c399-c520-4256-aa32-49046efaa512",
                "30": "d2cf9f44-caf4-461a-a0ae-ee49d37d9dfd",
                "60": "0c65d54c-9fea-4aea-acca-21cf63af240b",
                "90": "ac310b01-ad05-45cf-938f-0d56fac28583",
                "120": "0764126d-e636-4282-ae8b-071cb7f89608",
                "150": "7844c692-b42b-4333-ae4f-03011ac14620",
                "180": "a165aa66-2b00-4263-9371-cd877d0d7c25",
                "210": "7e18cbaa-5518-4a9c-b5de-3336a152b472",
                "240": "19d8f457-5ffb-4efe-b100-e74a99a6fc21",
                "270": "23722491-14bb-442b-8a72-7b24032669f5",
                "300": "96f40b31-453d-4451-aac6-03c692bc93b0",
                "330": "68be7b57-9d5f-46b2-91f1-e6570d025642"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "0f09c399-c520-4256-aa32-49046efaa512",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d2cf9f44-caf4-461a-a0ae-ee49d37d9dfd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0c65d54c-9fea-4aea-acca-21cf63af240b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ac310b01-ad05-45cf-938f-0d56fac28583",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0764126d-e636-4282-ae8b-071cb7f89608",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7844c692-b42b-4333-ae4f-03011ac14620",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a165aa66-2b00-4263-9371-cd877d0d7c25",
            "latches": [
                "0646b1ec-ec87-434e-b6be-403345029dc6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "7e18cbaa-5518-4a9c-b5de-3336a152b472",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "19d8f457-5ffb-4efe-b100-e74a99a6fc21",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "23722491-14bb-442b-8a72-7b24032669f5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "96f40b31-453d-4451-aac6-03c692bc93b0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "68be7b57-9d5f-46b2-91f1-e6570d025642",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "ae138298-9a73-4237-b792-dc379f330ce9",
            "properties": [
                [
                    "description",
                    "cron is reloaded and restarted"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "bfb18abf-bb8b-4072-899d-45c61f5b2d51",
                "30": "dfa6bd2b-af9d-4db1-aa9a-985fb18dc2f3",
                "60": "04835aad-02c7-4098-a1f4-37072f0d1a24",
                "90": "a2f3526a-16a7-4678-8de0-d57d64f5ee82",
                "120": "6d2866e5-c104-43db-aeff-51a11f4291f3",
                "150": "78210b84-70ab-4b88-9fed-e5d6bceed586",
                "180": "20ee18a2-9f8f-4d07-9cf9-36e513a82936",
                "210": "a97f79c0-06d5-41af-87e8-9b12faaa4ed3",
                "330": "406ea19d-3849-4633-a187-060380869eaf",
                "branch:True": "825a671c-a830-4f88-bde9-e70bd9aba154",
                "branch:False": "ecd57044-aeb6-4fca-af51-3c153dabb5ac"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "bfb18abf-bb8b-4072-899d-45c61f5b2d51",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "dfa6bd2b-af9d-4db1-aa9a-985fb18dc2f3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "04835aad-02c7-4098-a1f4-37072f0d1a24",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a2f3526a-16a7-4678-8de0-d57d64f5ee82",
            "latches": [
                "a2b94a7e-3709-4415-8536-a38a0df48c00"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "6d2866e5-c104-43db-aeff-51a11f4291f3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "78210b84-70ab-4b88-9fed-e5d6bceed586",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "20ee18a2-9f8f-4d07-9cf9-36e513a82936",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a97f79c0-06d5-41af-87e8-9b12faaa4ed3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "406ea19d-3849-4633-a187-060380869eaf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "825a671c-a830-4f88-bde9-e70bd9aba154",
            "latches": [
                "5bda15bf-aee7-4148-89a9-eb4c91236ea8"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ecd57044-aeb6-4fca-af51-3c153dabb5ac",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "afb3f3c4-0ba7-4882-8c2c-ddc9b80b5674",
            "properties": [
                [
                    "description",
                    "PENQUIN (/tmp/tmp514f524f) is unzipped into /root/hsperfdata"
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "2ebf89b4-a682-4d65-a03c-14765c1f08d8",
                "30": "3fc27c27-bc3b-4ae4-ae40-b6d5c987626d",
                "60": "3cd5ae09-4ab9-4a45-b428-35dad01a9054",
                "90": "2955be3c-39ab-49fa-af4a-a9292cffc404",
                "120": "33f3b0d0-1ff1-4977-806b-1dbd12a6d518",
                "150": "79412497-8b2d-424d-b3e9-26fbb5e78807",
                "180": "cbe4f82a-9dc8-4be6-bad6-c8bff6a37952",
                "210": "e0beeb1f-9324-4a0b-a5a0-3c160741843d",
                "330": "a03e022b-0fc5-4f76-b760-7a133d743baf",
                "branch:True": "bcdb4766-97d4-42bd-b6ed-34ad2ace2f05",
                "branch:False": "57df044d-9895-4c3d-ab6e-719cfa5e21da"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "2ebf89b4-a682-4d65-a03c-14765c1f08d8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fc27c27-bc3b-4ae4-ae40-b6d5c987626d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3cd5ae09-4ab9-4a45-b428-35dad01a9054",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2955be3c-39ab-49fa-af4a-a9292cffc404",
            "latches": [
                "73f54f94-a0ec-465d-a72b-c770e782e641"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "33f3b0d0-1ff1-4977-806b-1dbd12a6d518",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "79412497-8b2d-424d-b3e9-26fbb5e78807",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cbe4f82a-9dc8-4be6-bad6-c8bff6a37952",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e0beeb1f-9324-4a0b-a5a0-3c160741843d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a03e022b-0fc5-4f76-b760-7a133d743baf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bcdb4766-97d4-42bd-b6ed-34ad2ace2f05",
            "latches": [
                "a0cc1967-2640-4aa0-8d99-5dac2cff190e"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "57df044d-9895-4c3d-ab6e-719cfa5e21da",
            "latches": []
        },
        {
            "id": "threat_actor",
            "instance": "54396e15-e40a-4d44-957e-134032ec8e30",
            "properties": [
                [
                    "name",
                    "Turla"
                ],
                [
                    "description",
                    "Russian-based threat group that targets multiple industries in over 45 countries"
                ],
                [
                    "threat_actor_types",
                    [
                        [
                            "7c7c8d339029e77ef645638355983404",
                            "nation-state"
                        ],
                        [
                            "cb075353144d8d379cd0fd4541550434",
                            "spy"
                        ]
                    ]
                ],
                [
                    "aliases",
                    [
                        [
                            "6c4cff8c96525acb50e3cbf48aeee1dd",
                            "IRON HUNTER"
                        ],
                        [
                            "13e742c74b4ff867442dacac5c16e4a6",
                            "Group 88"
                        ],
                        [
                            "3d4cb647a9971124107877337ba0c2bc",
                            "Belugasturgeon"
                        ],
                        [
                            "5a17fb071c46d44f58af511c2cae139a",
                            "Waterbug"
                        ],
                        [
                            "934dbde4e30abc45549ac82f76015c0b",
                            "WhiteBear"
                        ],
                        [
                            "073d695ffe1e962dd2184cf4c9e6b705",
                            "Snake"
                        ],
                        [
                            "8f9cbcd3e296276efbb90cd96ecc5292",
                            "Krypton"
                        ],
                        [
                            "ddfe882cd172f12be5983d33ad1328d3",
                            "Venomous Bear"
                        ]
                    ]
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "roles",
                    [
                        [
                            "1506517e9a032f145e8b9b77c38b97f4",
                            "director"
                        ]
                    ]
                ],
                [
                    "goals",
                    [
                        [
                            "4eb3634d9a1dd797b9e8bc568a598741",
                            "cyberespionage"
                        ]
                    ]
                ],
                [
                    "sophistication",
                    "innovator"
                ],
                [
                    "resource_level",
                    "government"
                ],
                [
                    "primary_motivation",
                    "organizational-gain"
                ],
                [
                    "secondary_motivations",
                    [
                        [
                            "ab90f85cf30b93f5517e3df57f4689f1",
                            "dominance"
                        ]
                    ]
                ],
                [
                    "personal_motivations",
                    []
                ]
            ],
            "anchors": {
                "0": "3fc1b13a-f6ac-49bb-895f-5a73c859e0d8",
                "30": "ef31fe2a-5bde-4a83-9edf-062ed9089012",
                "60": "82678f85-110a-4b67-a27d-54cb6c32bfb6",
                "90": "e8f118aa-4e73-4f0d-8cfd-ac28d2236598",
                "120": "6ad85517-d4cb-4ba1-b3cb-dc3148fcebfe",
                "150": "c6b44adb-72f6-4008-90cf-42609c398c7a",
                "180": "0985508d-1f16-4b33-a7d2-d2cdea1c914f",
                "210": "c0a3b566-806c-4f79-8bbe-2d1b02736d2d",
                "240": "91f41c3c-60a3-489e-ba97-6014931ab861",
                "270": "6432cd45-c431-4a5b-badb-b6f33fad7f01",
                "300": "43c9578f-cebe-482d-afac-fb1d31fb3d1b",
                "330": "1b6b708e-70fe-4ea3-9ead-f010e0c56557"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fc1b13a-f6ac-49bb-895f-5a73c859e0d8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ef31fe2a-5bde-4a83-9edf-062ed9089012",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "82678f85-110a-4b67-a27d-54cb6c32bfb6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e8f118aa-4e73-4f0d-8cfd-ac28d2236598",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6ad85517-d4cb-4ba1-b3cb-dc3148fcebfe",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c6b44adb-72f6-4008-90cf-42609c398c7a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0985508d-1f16-4b33-a7d2-d2cdea1c914f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c0a3b566-806c-4f79-8bbe-2d1b02736d2d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "91f41c3c-60a3-489e-ba97-6014931ab861",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6432cd45-c431-4a5b-badb-b6f33fad7f01",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "43c9578f-cebe-482d-afac-fb1d31fb3d1b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1b6b708e-70fe-4ea3-9ead-f010e0c56557",
            "latches": []
        },
        {
            "id": "windows_registry_key",
            "instance": "79e27662-752d-4321-8a4c-4e08b25d2d86",
            "properties": [
                [
                    "key",
                    "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon"
                ],
                [
                    "values",
                    [
                        [
                            "79a8d06dd81c91a42c5c9ec6c21437f7",
                            [
                                [
                                    "name",
                                    "Shell"
                                ],
                                [
                                    "data",
                                    "%TEMP%\\mxs_installer.exe"
                                ],
                                [
                                    "data_type",
                                    "REG_SZ"
                                ]
                            ]
                        ],
                        [
                            "5344182a73891bb9f8bf85a56dbd0137",
                            [
                                [
                                    "name",
                                    null
                                ],
                                [
                                    "data",
                                    "C:\\Windows\\explorer.exe"
                                ],
                                [
                                    "data_type",
                                    "REG_SZ"
                                ]
                            ]
                        ]
                    ]
                ],
                [
                    "modified_time",
                    null
                ],
                [
                    "number_of_subkeys",
                    null
                ]
            ],
            "anchors": {
                "0": "e0877685-f32d-4eb1-a07d-69b360b8973f",
                "30": "5d0f2b4b-ca9d-46d9-a4c4-af0efbbadca8",
                "60": "64bfe9d7-6607-4c8e-925e-f5ee9924c689",
                "90": "7bfdfcd1-9c90-43a3-94a1-ed1b5eb68f81",
                "120": "2fa16ad3-288e-4098-b24f-76a2f671f39b",
                "150": "6db31131-f9dc-40c7-97c3-08235bf3db54",
                "180": "218f59a3-c6d9-4555-b2bd-64c2c28a464a",
                "210": "6abe774a-b47e-4f54-8809-da6b0119c6b3",
                "240": "b925d873-fa62-4a14-9690-7cb38f6318de",
                "270": "6a7a4d7d-8013-4c5c-813d-1d73d2eb14fa",
                "300": "c1e1311b-9ef8-45c0-ae6a-a5289621c80b",
                "330": "49c501d2-0997-4113-8100-357fbe917e1b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "e0877685-f32d-4eb1-a07d-69b360b8973f",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5d0f2b4b-ca9d-46d9-a4c4-af0efbbadca8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "64bfe9d7-6607-4c8e-925e-f5ee9924c689",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7bfdfcd1-9c90-43a3-94a1-ed1b5eb68f81",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2fa16ad3-288e-4098-b24f-76a2f671f39b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6db31131-f9dc-40c7-97c3-08235bf3db54",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "218f59a3-c6d9-4555-b2bd-64c2c28a464a",
            "latches": [
                "eaa8d91c-4d52-4a27-9e89-4e696829a38a"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "6abe774a-b47e-4f54-8809-da6b0119c6b3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b925d873-fa62-4a14-9690-7cb38f6318de",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6a7a4d7d-8013-4c5c-813d-1d73d2eb14fa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c1e1311b-9ef8-45c0-ae6a-a5289621c80b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "49c501d2-0997-4113-8100-357fbe917e1b",
            "latches": []
        },
        {
            "id": "windows_registry_key",
            "instance": "120f5102-986c-4ad5-921b-087c52e84827",
            "properties": [
                [
                    "key",
                    "HKEY_LOCAL_MACHINE\\system\\currentcontrolset\\services\\ViperVPNSvc"
                ],
                [
                    "values",
                    [
                        [
                            "2a031bcd7bc0b5b2148aebed7740a375",
                            [
                                [
                                    "name",
                                    "ImagePath"
                                ],
                                [
                                    "data",
                                    "cmd.exe /c %TEMP%\\mxs_installer.exe"
                                ],
                                [
                                    "data_type",
                                    "REG_EXPAND_SZ"
                                ]
                            ]
                        ]
                    ]
                ],
                [
                    "modified_time",
                    null
                ],
                [
                    "number_of_subkeys",
                    null
                ]
            ],
            "anchors": {
                "0": "33f19223-335d-41ec-9ede-77cd3ecd6c3c",
                "30": "5b1d29d6-b0df-41b1-8219-2f9266bab769",
                "60": "db2376a1-b7d7-4901-95c5-6a5976fbe1b5",
                "90": "5459c6f2-c0c2-44bf-9fa3-6a4da52c7581",
                "120": "4c8fc52b-d38c-47ed-aeff-a869adf311b2",
                "150": "85407b14-14ec-4d1a-b68a-81c5ba10fc81",
                "180": "bad80ea4-3bb4-47ff-8a29-1a327a609461",
                "210": "3fe02f95-0ae0-4a5d-9970-d25fe0fc6e1e",
                "240": "2b5e6edd-72dc-4e18-84ba-0c34728cb526",
                "270": "cca51e3a-0873-4573-8d1a-49105228a3b8",
                "300": "bfc3c8dd-70e9-4b9c-af2a-db3685a5e9a6",
                "330": "1c879fe5-e2e2-4fa5-9ea1-5278d0c8f40f"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "33f19223-335d-41ec-9ede-77cd3ecd6c3c",
            "latches": [
                "6d87fccb-3f74-48e6-b86a-ab180886bf90"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "5b1d29d6-b0df-41b1-8219-2f9266bab769",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "db2376a1-b7d7-4901-95c5-6a5976fbe1b5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5459c6f2-c0c2-44bf-9fa3-6a4da52c7581",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4c8fc52b-d38c-47ed-aeff-a869adf311b2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "85407b14-14ec-4d1a-b68a-81c5ba10fc81",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bad80ea4-3bb4-47ff-8a29-1a327a609461",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3fe02f95-0ae0-4a5d-9970-d25fe0fc6e1e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2b5e6edd-72dc-4e18-84ba-0c34728cb526",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cca51e3a-0873-4573-8d1a-49105228a3b8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bfc3c8dd-70e9-4b9c-af2a-db3685a5e9a6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1c879fe5-e2e2-4fa5-9ea1-5278d0c8f40f",
            "latches": []
        },
        {
            "id": "windows_registry_key",
            "instance": "cdea0282-b3f6-4e1b-afa3-ff01a05a1451",
            "properties": [
                [
                    "key",
                    "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\WinResSvc\\Parameters"
                ],
                [
                    "values",
                    [
                        [
                            "d2552610c8580c02b2752f01e43cd758",
                            [
                                [
                                    "name",
                                    "ServiceDll"
                                ],
                                [
                                    "data",
                                    "%systemroot%\\System32\\mressvc.dll"
                                ],
                                [
                                    "data_type",
                                    "REG_EXPAND_SZ"
                                ]
                            ]
                        ]
                    ]
                ],
                [
                    "modified_time",
                    null
                ],
                [
                    "number_of_subkeys",
                    null
                ]
            ],
            "anchors": {
                "0": "83418516-058e-4294-9e8b-e75b3a8b98c5",
                "30": "6faa44f3-1b76-46dc-a7a8-6ff15eaf993d",
                "60": "90dd8152-2c11-4a48-bc29-ffebec7d1802",
                "90": "21ef0ac9-4757-4846-aff7-dd9f0de26732",
                "120": "21baf4cc-01b8-450c-9314-b7d43534bbc7",
                "150": "288a58d6-124e-4419-ac50-8f2442fe6157",
                "180": "c965180b-d7c5-46b8-827b-a1c93011794a",
                "210": "17052a42-5b4a-4f22-8ce6-4c07218d2493",
                "240": "a6589680-d638-49ee-b53f-64b022d9392b",
                "270": "8e7c6012-e3c2-4765-bfaf-93d894b2fdeb",
                "300": "f709cb1d-bd97-4f10-be51-f01f454452ed",
                "330": "3732a8ba-1cff-44be-9bce-8b6bdf28ff0d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "83418516-058e-4294-9e8b-e75b3a8b98c5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6faa44f3-1b76-46dc-a7a8-6ff15eaf993d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "90dd8152-2c11-4a48-bc29-ffebec7d1802",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "21ef0ac9-4757-4846-aff7-dd9f0de26732",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "21baf4cc-01b8-450c-9314-b7d43534bbc7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "288a58d6-124e-4419-ac50-8f2442fe6157",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c965180b-d7c5-46b8-827b-a1c93011794a",
            "latches": [
                "7fdced2d-fca7-43a5-bca6-2bfe89339cad"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "17052a42-5b4a-4f22-8ce6-4c07218d2493",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a6589680-d638-49ee-b53f-64b022d9392b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8e7c6012-e3c2-4765-bfaf-93d894b2fdeb",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f709cb1d-bd97-4f10-be51-f01f454452ed",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3732a8ba-1cff-44be-9bce-8b6bdf28ff0d",
            "latches": []
        },
        {
            "id": "windows_registry_key",
            "instance": "d532a295-2d21-44ed-b9da-ce699b2a22c4",
            "properties": [
                [
                    "key",
                    "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Svchost"
                ],
                [
                    "values",
                    [
                        [
                            "a82a963e2ef33603236d3186316c9525",
                            [
                                [
                                    "name",
                                    "WinSysRestoreGroup"
                                ],
                                [
                                    "data",
                                    "WinResSvc"
                                ],
                                [
                                    "data_type",
                                    "REG_MULTI_SZ"
                                ]
                            ]
                        ]
                    ]
                ],
                [
                    "modified_time",
                    null
                ],
                [
                    "number_of_subkeys",
                    null
                ]
            ],
            "anchors": {
                "0": "f37c75fd-05ac-4b66-ac88-2c9cf0c0e9ff",
                "30": "b45d633d-8879-46a9-8f1d-4fb67b64ad9a",
                "60": "ea89d8fd-48db-4ac1-a5d1-822be649403c",
                "90": "d204abd6-da17-4fda-9ed7-fd58325bfb08",
                "120": "8eab8998-99cb-4cbd-bd86-b76822a07499",
                "150": "1d4b80b6-9797-4b6f-b1fb-5344c7b4dac0",
                "180": "c9aee2be-e6a5-4bd7-8009-c6fddbd06307",
                "210": "6ce01793-746e-465a-b042-70fb57c2f229",
                "240": "820a7450-0f7a-46de-a5f4-9e893eb5c77e",
                "270": "53685e2b-f215-4145-aac7-a4253df01e15",
                "300": "32771065-0fcb-41e0-a9ff-e2e6099da2f0",
                "330": "eb0778fd-d40e-436d-8080-42d9d8d83ce6"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "f37c75fd-05ac-4b66-ac88-2c9cf0c0e9ff",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b45d633d-8879-46a9-8f1d-4fb67b64ad9a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ea89d8fd-48db-4ac1-a5d1-822be649403c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d204abd6-da17-4fda-9ed7-fd58325bfb08",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8eab8998-99cb-4cbd-bd86-b76822a07499",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "1d4b80b6-9797-4b6f-b1fb-5344c7b4dac0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c9aee2be-e6a5-4bd7-8009-c6fddbd06307",
            "latches": [
                "9638e9d5-ae3a-43bf-bfc4-41ac765c8016"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "6ce01793-746e-465a-b042-70fb57c2f229",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "820a7450-0f7a-46de-a5f4-9e893eb5c77e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "53685e2b-f215-4145-aac7-a4253df01e15",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "32771065-0fcb-41e0-a9ff-e2e6099da2f0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "eb0778fd-d40e-436d-8080-42d9d8d83ce6",
            "latches": []
        },
        {
            "id": "condition",
            "instance": "05fcf90d-0427-43a9-9fb4-138e2386f169",
            "properties": [
                [
                    "description",
                    "The Loader DLL (mressvc.dll) runs as a service and executes the Orchestrator DLL (MSSVCCFG.dll). svchost.exe injects the communications DLL (msxhlp.dll) into msedge.exe."
                ],
                [
                    "pattern",
                    null
                ],
                [
                    "pattern_type",
                    null
                ],
                [
                    "pattern_version",
                    null
                ],
                [
                    "date",
                    null
                ]
            ],
            "anchors": {
                "0": "616183d0-4e82-446c-9e5e-e14fb38025ee",
                "30": "66899aef-a1c2-491c-a1fc-6566ba09e8ad",
                "60": "a46d70d9-d528-444d-ada5-6ef8db2e0295",
                "90": "9cb8011c-9aff-4692-a56a-a2fd2ac8a7ec",
                "120": "efec100e-6044-4b9c-b8f9-977e68ea3668",
                "150": "bc093662-279d-443e-be2f-e96edb60b61e",
                "180": "a027d387-2630-4ac0-80eb-df8fcc882675",
                "210": "888126b2-9b20-4d63-91eb-a38c88e7c760",
                "330": "56b06741-8885-4643-b00c-66700beef78d",
                "branch:True": "46a4d2f6-377a-4e2c-97a7-54a204da591a",
                "branch:False": "66569b98-1a69-46d6-b06f-47490d59bd9e"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "616183d0-4e82-446c-9e5e-e14fb38025ee",
            "latches": [
                "b361eeb1-b90f-41db-b152-a68839a407f3"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "66899aef-a1c2-491c-a1fc-6566ba09e8ad",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a46d70d9-d528-444d-ada5-6ef8db2e0295",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9cb8011c-9aff-4692-a56a-a2fd2ac8a7ec",
            "latches": [
                "b9d99ad4-7e99-45c2-90f0-b6e8bec30d59"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "efec100e-6044-4b9c-b8f9-977e68ea3668",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bc093662-279d-443e-be2f-e96edb60b61e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a027d387-2630-4ac0-80eb-df8fcc882675",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "888126b2-9b20-4d63-91eb-a38c88e7c760",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "56b06741-8885-4643-b00c-66700beef78d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "46a4d2f6-377a-4e2c-97a7-54a204da591a",
            "latches": [
                "05eb45d1-68ee-4631-9236-f8279d8ff78a",
                "a94ef12d-26db-4164-bdb6-ffc71a0dd463"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "66569b98-1a69-46d6-b06f-47490d59bd9e",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "ff98a1f7-4540-4092-9e6c-a6eb804842b6",
            "properties": [
                [
                    "name",
                    "eunewswire.eu"
                ],
                [
                    "description",
                    "compromised website proxying C2 communications to the adversary C2 server (MODIN)"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "0b1b55784e3a4c19e64443f21fb5ca61",
                            "red-team-infrastructure"
                        ],
                        [
                            "2fecbdc96fcdeea61e6a62697e6e8f59",
                            "anonymization"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "e64d0684-85bd-4fa2-b8f8-8ff56be6c291",
                "30": "911ade1c-9f84-489b-94ab-3b32bd656152",
                "60": "4e63dc48-351e-4e11-bbe1-c9a281a24c09",
                "90": "21e22207-ee7e-443e-9532-c51efd152e53",
                "120": "cf4338ae-0c84-4a5d-ba83-40049bd49a79",
                "150": "54241ba3-5f52-4a47-afaf-2ab14de21403",
                "180": "a1839a11-fdbe-4aee-889f-f30476d97adc",
                "210": "8d5059a2-a50b-4380-bcfe-1cf3c0422eb2",
                "240": "a078e4c7-1b4e-4a31-93f7-b469e1430215",
                "270": "b92d04f8-14d4-448c-a43d-45ec3d1d4043",
                "300": "7653f5ab-9dfc-4f07-a221-f8702b39cacb",
                "330": "12a32ff5-ded5-483a-a69a-36dee4cb6245"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "e64d0684-85bd-4fa2-b8f8-8ff56be6c291",
            "latches": [
                "e716cdb6-ffc6-4467-83bb-a9e84cd3f692"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "911ade1c-9f84-489b-94ab-3b32bd656152",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4e63dc48-351e-4e11-bbe1-c9a281a24c09",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "21e22207-ee7e-443e-9532-c51efd152e53",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cf4338ae-0c84-4a5d-ba83-40049bd49a79",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "54241ba3-5f52-4a47-afaf-2ab14de21403",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a1839a11-fdbe-4aee-889f-f30476d97adc",
            "latches": [
                "a56f351e-4d1d-433b-9d04-f88d2a9015c3"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "8d5059a2-a50b-4380-bcfe-1cf3c0422eb2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a078e4c7-1b4e-4a31-93f7-b469e1430215",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b92d04f8-14d4-448c-a43d-45ec3d1d4043",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7653f5ab-9dfc-4f07-a221-f8702b39cacb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "12a32ff5-ded5-483a-a69a-36dee4cb6245",
            "latches": []
        },
        {
            "id": "file",
            "instance": "38bf3079-a747-4c6d-9a57-5856b5cc5e53",
            "properties": [
                [
                    "name",
                    "C:\\Windows\\Temp\\tmp504e.tmp"
                ],
                [
                    "name_enc",
                    null
                ],
                [
                    "size",
                    null
                ],
                [
                    "hashes",
                    []
                ],
                [
                    "magic_number_hex",
                    null
                ],
                [
                    "mime_type",
                    null
                ],
                [
                    "ctime",
                    null
                ],
                [
                    "mtime",
                    null
                ],
                [
                    "atime",
                    null
                ]
            ],
            "anchors": {
                "0": "4b2916e3-ff43-4dc2-9b2e-e1f9d31e4957",
                "30": "e2c5b009-4eda-468a-a301-80dad93cdb8c",
                "60": "c668b793-d867-4f05-a20f-41ec0c769f44",
                "90": "ea23c62c-98de-4081-82e6-bba6e0b7aac9",
                "120": "d6567c74-4fab-43dd-ac47-59766f2eecf7",
                "150": "04e4fdb3-edd0-4171-8e4b-6ea44890b842",
                "180": "10fdbe6e-3131-4d3e-8df9-f0abd7c03696",
                "210": "ec5f1840-0991-46e9-849f-22f1a9ce81fa",
                "240": "17dae41f-429c-44c0-ae2b-a3bf4573f037",
                "270": "c318be11-db4e-4804-8b59-885290fbc390",
                "300": "179486fd-ee69-4da8-9e18-8d4c116e98c0",
                "330": "0fd60c0c-55a8-4b9c-92ac-68fa8c535dcc"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "4b2916e3-ff43-4dc2-9b2e-e1f9d31e4957",
            "latches": [
                "f87ca05c-9d98-4990-bee1-81431545b494"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "e2c5b009-4eda-468a-a301-80dad93cdb8c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c668b793-d867-4f05-a20f-41ec0c769f44",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ea23c62c-98de-4081-82e6-bba6e0b7aac9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d6567c74-4fab-43dd-ac47-59766f2eecf7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "04e4fdb3-edd0-4171-8e4b-6ea44890b842",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "10fdbe6e-3131-4d3e-8df9-f0abd7c03696",
            "latches": [
                "c97de860-7247-441e-81b3-15d0cff7cce6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "ec5f1840-0991-46e9-849f-22f1a9ce81fa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "17dae41f-429c-44c0-ae2b-a3bf4573f037",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c318be11-db4e-4804-8b59-885290fbc390",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "179486fd-ee69-4da8-9e18-8d4c116e98c0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0fd60c0c-55a8-4b9c-92ac-68fa8c535dcc",
            "latches": []
        },
        {
            "id": "infrastructure",
            "instance": "e6b45aff-e2e3-45e6-9dd0-6e6765250772",
            "properties": [
                [
                    "name",
                    "MODIN"
                ],
                [
                    "description",
                    "C2 server; hosts anto-int.com; Kali Linux OS"
                ],
                [
                    "infrastructure_types",
                    [
                        [
                            "20611ad793c305151e6fb0c4611a2be8",
                            "red-team-infrastructure"
                        ],
                        [
                            "fda8b62bdcb1a09824427f48a6b8baa8",
                            "command-and-control"
                        ],
                        [
                            "b7968f47402b75a37d4bd772f718ef72",
                            "exfiltration"
                        ],
                        [
                            "3000443f223d6757e5be51c49587fe05",
                            "hosting-malware"
                        ],
                        [
                            "28dc6ad221dafa0e9af365fabcc5ddf3",
                            "phishing"
                        ]
                    ]
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ]
            ],
            "anchors": {
                "0": "019ccf6f-09ae-4014-93d6-0a79e8610f52",
                "30": "255ff110-82c7-4c00-9c99-73c79917d4aa",
                "60": "980a2671-271e-4a2b-a2a7-6b78ae603065",
                "90": "0bd8ba83-b9b4-455d-a9a7-953b6d81a7d8",
                "120": "1edca774-f4e2-4813-b0b3-55328d71f158",
                "150": "d101d7db-30df-408b-b227-4746b7b0ef69",
                "180": "c107e031-d412-4ec3-b8bd-c67d5cfca37c",
                "210": "c481dced-f5de-47f8-9457-6aadad3d63c8",
                "240": "8ffecc36-f75d-46a5-a7ec-d10ed3d30e06",
                "270": "56ce0a3f-cf71-4785-9a1a-27a3ca477e63",
                "300": "8793ea5d-a657-4b2a-958d-a191ad249198",
                "330": "bbe2392b-eef1-4e21-ac29-a66044b9194e"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "019ccf6f-09ae-4014-93d6-0a79e8610f52",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "255ff110-82c7-4c00-9c99-73c79917d4aa",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "980a2671-271e-4a2b-a2a7-6b78ae603065",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0bd8ba83-b9b4-455d-a9a7-953b6d81a7d8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1edca774-f4e2-4813-b0b3-55328d71f158",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d101d7db-30df-408b-b227-4746b7b0ef69",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c107e031-d412-4ec3-b8bd-c67d5cfca37c",
            "latches": [
                "416eeeaa-ed38-44bb-a817-7d65925bcebd",
                "fa6d86f9-2436-494f-9ce0-7dfe5f6e4132"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "c481dced-f5de-47f8-9457-6aadad3d63c8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8ffecc36-f75d-46a5-a7ec-d10ed3d30e06",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "56ce0a3f-cf71-4785-9a1a-27a3ca477e63",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8793ea5d-a657-4b2a-958d-a191ad249198",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bbe2392b-eef1-4e21-ac29-a66044b9194e",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "157b0ffd-b909-488c-99f4-214bd97c91b7",
            "properties": [
                [
                    "value",
                    "176.59.15.33"
                ]
            ],
            "anchors": {
                "0": "d1ef409c-c20b-4a1a-bd3e-1198357ff9e4",
                "30": "3a72d7b4-0968-46ab-b33d-0f1f3d69905c",
                "60": "0b7b8bc2-2073-4fe1-8f22-aefca8d47763",
                "90": "e1afcc21-8d28-4608-9c6c-986b8895747f",
                "120": "2d16fd9b-acb5-4ecd-a996-b61c597bb659",
                "150": "ab68bf0a-eadc-4645-b2b9-9b4207bb1ea9",
                "180": "9747c323-3852-4485-a3f4-a63fba675202",
                "210": "cd1445f7-4b3e-4e63-a7f3-bc1ac978f8dc",
                "240": "511b39d9-c5ad-4f23-aefa-aa79de1c3d0a",
                "270": "66824b5c-509d-4d8e-b169-9eda3cacbaa9",
                "300": "12bf74e2-1866-4a2f-b201-870b3f634d3b",
                "330": "e16f4b23-9783-46ae-b668-c503a815cb2e"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "d1ef409c-c20b-4a1a-bd3e-1198357ff9e4",
            "latches": [
                "67b15c23-3148-451f-9033-b1c0cd4e8142"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3a72d7b4-0968-46ab-b33d-0f1f3d69905c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0b7b8bc2-2073-4fe1-8f22-aefca8d47763",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "e1afcc21-8d28-4608-9c6c-986b8895747f",
            "latches": [
                "f1bb6f4a-1604-4ecc-8ea2-8d4afc01e990"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2d16fd9b-acb5-4ecd-a996-b61c597bb659",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ab68bf0a-eadc-4645-b2b9-9b4207bb1ea9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9747c323-3852-4485-a3f4-a63fba675202",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "cd1445f7-4b3e-4e63-a7f3-bc1ac978f8dc",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "511b39d9-c5ad-4f23-aefa-aa79de1c3d0a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "66824b5c-509d-4d8e-b169-9eda3cacbaa9",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "12bf74e2-1866-4a2f-b201-870b3f634d3b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e16f4b23-9783-46ae-b668-c503a815cb2e",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "b5c7cf55-2fe5-4bb8-a8e9-75643619c5e7",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "8ec96cc7-8164-45cf-825c-6b94d41a92fb",
                "30": "034e48c3-441f-4833-a16b-3cab4c874d68",
                "60": "fdf13efe-8509-4f3f-9ad4-a7ccb5164b2b",
                "90": "dd41fe5c-42cf-4a6f-a7d9-c782f1043770",
                "120": "1e606a49-a13a-44d8-8edb-b8dd57b0f2be",
                "150": "65df5024-c375-4351-8228-bde1c757953e",
                "180": "ebc9ae98-8cdc-4294-b35a-064c799589cc",
                "210": "fcc3a60a-e8a4-4982-af0c-72e85380bdd7",
                "240": "c9659b77-0458-4d7f-875a-92055230f460",
                "270": "5f880194-c40c-486f-8867-9db01ce52e6a",
                "300": "fee61c7a-3c9b-4a84-81ee-b615ce4b27be",
                "330": "bb94c641-9c1e-465f-b3a7-3274b072c3df"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "8ec96cc7-8164-45cf-825c-6b94d41a92fb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "034e48c3-441f-4833-a16b-3cab4c874d68",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "fdf13efe-8509-4f3f-9ad4-a7ccb5164b2b",
            "latches": [
                "fd039b52-4e66-4511-b601-09a330275b91"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "dd41fe5c-42cf-4a6f-a7d9-c782f1043770",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1e606a49-a13a-44d8-8edb-b8dd57b0f2be",
            "latches": [
                "1fc1de62-9c33-488b-a5df-11de954f42a5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "65df5024-c375-4351-8228-bde1c757953e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ebc9ae98-8cdc-4294-b35a-064c799589cc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fcc3a60a-e8a4-4982-af0c-72e85380bdd7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c9659b77-0458-4d7f-875a-92055230f460",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "5f880194-c40c-486f-8867-9db01ce52e6a",
            "latches": [
                "cf714220-8586-4a01-8eeb-d9776a1d20c5"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "fee61c7a-3c9b-4a84-81ee-b615ce4b27be",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb94c641-9c1e-465f-b3a7-3274b072c3df",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "38437399-99d3-4f58-bf9e-0b53efc45c7d",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "c1164f89-89ce-4a0f-bb44-aceb9a4cefb8",
                "30": "c392930d-cfcc-4940-8f2a-5f8a4e86fd67",
                "60": "c5e1492d-f1c3-47d4-b2dd-33f2bcf30086",
                "90": "eed4e4dc-0a8f-4732-b999-52b1ee6e94be",
                "120": "f5fc8918-8079-4661-942e-872b184a3dc3",
                "150": "d689dc94-410d-4fdc-82d1-859e74d240e7",
                "180": "f7fb56d8-45e7-462a-891b-42531d3347c7",
                "210": "9a2bb00c-225f-4263-b485-179974b63b43",
                "240": "1f65b5e3-b355-4a1e-8ddd-e63e5a6aadd8",
                "270": "d38df2f7-218a-4245-a3a2-3ff0cdf2d7dc",
                "300": "94197c27-3aca-47b2-bc02-30a7c51c26ce",
                "330": "195b41b8-4e98-4bbf-bb0c-0fa60b861b05"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c1164f89-89ce-4a0f-bb44-aceb9a4cefb8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c392930d-cfcc-4940-8f2a-5f8a4e86fd67",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "c5e1492d-f1c3-47d4-b2dd-33f2bcf30086",
            "latches": [
                "cc195c8d-effd-460f-a877-cdabfd6323e1"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "eed4e4dc-0a8f-4732-b999-52b1ee6e94be",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f5fc8918-8079-4661-942e-872b184a3dc3",
            "latches": [
                "b0dd97c7-28c6-4d86-a750-092941865913"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "d689dc94-410d-4fdc-82d1-859e74d240e7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "f7fb56d8-45e7-462a-891b-42531d3347c7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9a2bb00c-225f-4263-b485-179974b63b43",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1f65b5e3-b355-4a1e-8ddd-e63e5a6aadd8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d38df2f7-218a-4245-a3a2-3ff0cdf2d7dc",
            "latches": [
                "c3386bb7-1ecf-4391-b0ec-eebb42e32fe8"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "94197c27-3aca-47b2-bc02-30a7c51c26ce",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "195b41b8-4e98-4bbf-bb0c-0fa60b861b05",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "faf0efde-ca45-4b89-9e31-c783da3d8fed",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "e3f50f41-d448-4f6c-b4e9-22b2bbb0f50a",
                "30": "bef6c4e4-525a-4061-a51e-d3879f12b9af",
                "60": "4aa558a2-2fe2-4e27-83d1-4c823b2147e5",
                "90": "b4803867-5254-4ee3-8f4d-018e7b4c4ec6",
                "120": "43e9b7ed-49c1-4a68-9415-6e50f970f020",
                "150": "dba1fb75-83c7-45c9-854b-6c834291a85a",
                "180": "7baede88-761e-4880-a300-3d873bb41695",
                "210": "0982c998-7d1c-47cc-bcd2-ec77d32a93c2",
                "240": "48587c5a-244e-4cf8-9cac-6bde09e0026d",
                "270": "31032276-a2e3-4894-a122-c1e9255b1596",
                "300": "be02449b-7e29-4428-aa12-7fd51c7c2291",
                "330": "8f37bedc-65ff-4953-bf34-9cfbd5adc183"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "e3f50f41-d448-4f6c-b4e9-22b2bbb0f50a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bef6c4e4-525a-4061-a51e-d3879f12b9af",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4aa558a2-2fe2-4e27-83d1-4c823b2147e5",
            "latches": [
                "a6885a20-4332-4cf2-9748-cdd22b623900"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b4803867-5254-4ee3-8f4d-018e7b4c4ec6",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "43e9b7ed-49c1-4a68-9415-6e50f970f020",
            "latches": [
                "28b38a3e-63c5-4c17-8cba-743a25e8da01"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "dba1fb75-83c7-45c9-854b-6c834291a85a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7baede88-761e-4880-a300-3d873bb41695",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0982c998-7d1c-47cc-bcd2-ec77d32a93c2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "48587c5a-244e-4cf8-9cac-6bde09e0026d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "31032276-a2e3-4894-a122-c1e9255b1596",
            "latches": [
                "14bbfb05-4f21-4c3a-baaa-2fb147b2afed"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "be02449b-7e29-4428-aa12-7fd51c7c2291",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8f37bedc-65ff-4953-bf34-9cfbd5adc183",
            "latches": []
        },
        {
            "id": "action",
            "instance": "ed222435-f461-4810-b389-a4aef702098d",
            "properties": [
                [
                    "name",
                    "Service Restart"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            null
                        ],
                        [
                            "technique",
                            null
                        ]
                    ]
                ],
                [
                    "description",
                    "The service is restarted manually by a domain admin from the domain controller. This emulates the service being restarted via machine reboot."
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "e4c56c4c-f063-4f83-a4d1-c0c642d9502e",
                "30": "ff012768-8308-41a0-b30e-06b394d2749d",
                "60": "068afedc-2a25-4094-8f69-f6c5f7543977",
                "90": "9009a579-982a-4837-9e96-36e1c5bdce62",
                "120": "9b2afa2c-23db-4190-8f10-3bae8f5d8fd0",
                "150": "18bf639d-1ce8-4f83-bcb9-7efaf6c59db6",
                "180": "4baee722-ebc8-4beb-adec-66226ad711c9",
                "210": "b9ee5cc6-fa8b-48fc-9483-f36177757764",
                "240": "81cbfd21-c9f5-489e-8cf9-0b0b1367e0e5",
                "270": "00ba421a-34d7-44d2-8b42-2fc87dc55280",
                "300": "8e46d27a-472a-447b-93f3-2921b7ac5852",
                "330": "4af22a6d-fb49-40c9-9b7a-afd17b23c6f7"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "e4c56c4c-f063-4f83-a4d1-c0c642d9502e",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ff012768-8308-41a0-b30e-06b394d2749d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "068afedc-2a25-4094-8f69-f6c5f7543977",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9009a579-982a-4837-9e96-36e1c5bdce62",
            "latches": [
                "b676e638-b8d1-424c-b26a-899bca68f67d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9b2afa2c-23db-4190-8f10-3bae8f5d8fd0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "18bf639d-1ce8-4f83-bcb9-7efaf6c59db6",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4baee722-ebc8-4beb-adec-66226ad711c9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b9ee5cc6-fa8b-48fc-9483-f36177757764",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "81cbfd21-c9f5-489e-8cf9-0b0b1367e0e5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "00ba421a-34d7-44d2-8b42-2fc87dc55280",
            "latches": [
                "8131a6c8-8257-431e-86a0-ca16b2eae989"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "8e46d27a-472a-447b-93f3-2921b7ac5852",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "4af22a6d-fb49-40c9-9b7a-afd17b23c6f7",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "0bc5eaa1-2786-4c72-a27b-afd2b62e8599",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "51972e33-b7f8-4142-b227-113465a0e553",
                "30": "b85f3882-b1be-4ad0-aa42-bbf9fb3bb332",
                "60": "ee8ba074-34b8-4833-b7f7-6a8f5a7ba5d7",
                "90": "9637dc4f-6f31-4496-b1c1-efa19bbf46c7",
                "120": "523e6535-7b19-4929-8e51-3eb5937d65ed",
                "150": "9f523d01-362d-4d36-a632-4b1655f4d3a2",
                "180": "376acc9c-775c-4392-836c-779ad8873bda",
                "210": "2591e918-1ba7-4dc3-aaf0-1d860f1ae73f",
                "240": "1984effa-7fdc-4a8e-8f30-1ef9c64bc36b",
                "270": "8faa1910-5deb-4d69-861f-ccbe2bb65424",
                "300": "384945a2-fb35-4eae-b12e-47a8c49100b3",
                "330": "addf83e3-ccfb-412f-92da-eda62db861e1"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "51972e33-b7f8-4142-b227-113465a0e553",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "b85f3882-b1be-4ad0-aa42-bbf9fb3bb332",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ee8ba074-34b8-4833-b7f7-6a8f5a7ba5d7",
            "latches": [
                "2bdf57df-b2fe-4ff0-92e5-9e98b8664d41"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9637dc4f-6f31-4496-b1c1-efa19bbf46c7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "523e6535-7b19-4929-8e51-3eb5937d65ed",
            "latches": [
                "749bb519-b158-46f3-a48e-e6366b676088"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "9f523d01-362d-4d36-a632-4b1655f4d3a2",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "376acc9c-775c-4392-836c-779ad8873bda",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "2591e918-1ba7-4dc3-aaf0-1d860f1ae73f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1984effa-7fdc-4a8e-8f30-1ef9c64bc36b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "8faa1910-5deb-4d69-861f-ccbe2bb65424",
            "latches": [
                "13ee0976-d72d-47b2-a44b-a19b593ce7b6"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "384945a2-fb35-4eae-b12e-47a8c49100b3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "addf83e3-ccfb-412f-92da-eda62db861e1",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "ac066ffd-c979-4436-bd84-d6738a189ca0",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "5dced279-eade-4235-bc7e-d2045ca2c100",
                "30": "04de67c2-31f6-482f-873e-a4166519850f",
                "60": "a62f0b4a-e774-4114-8728-48edcf1e769a",
                "90": "492ddd25-f2ea-4082-a275-db60641ea44c",
                "120": "7da76a11-0776-4260-ac3b-ab29f458fc55",
                "150": "bf835783-e7b6-4449-8177-a17ea58bdc49",
                "180": "3acfacad-0f9b-4d41-bd3e-fd6b9da7f9fc",
                "210": "a98cf2bf-779b-4c09-acee-452d70ca5454",
                "240": "56c735c5-de18-41a9-889b-44fec73fe901",
                "270": "1aa03ffa-8730-413e-a5ae-ea5e68c4bb4f",
                "300": "f18f66fc-47e1-4961-8efe-9a17891bb720",
                "330": "9ee4a6df-1c59-4eb2-8097-edb2f5de4cfb"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5dced279-eade-4235-bc7e-d2045ca2c100",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "04de67c2-31f6-482f-873e-a4166519850f",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a62f0b4a-e774-4114-8728-48edcf1e769a",
            "latches": [
                "e4ad2014-c30e-4bce-9730-6b6e6fddae21"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "492ddd25-f2ea-4082-a275-db60641ea44c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7da76a11-0776-4260-ac3b-ab29f458fc55",
            "latches": [
                "8b41de9d-99c4-4a17-9d0a-a3ffdb43e648"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "bf835783-e7b6-4449-8177-a17ea58bdc49",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3acfacad-0f9b-4d41-bd3e-fd6b9da7f9fc",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a98cf2bf-779b-4c09-acee-452d70ca5454",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "56c735c5-de18-41a9-889b-44fec73fe901",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1aa03ffa-8730-413e-a5ae-ea5e68c4bb4f",
            "latches": [
                "bddebe1c-ac15-40ba-9121-6b2849d759c2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "f18f66fc-47e1-4961-8efe-9a17891bb720",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9ee4a6df-1c59-4eb2-8097-edb2f5de4cfb",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "7ac5824b-8781-4153-a825-ba58dacca717",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "b943cc94-18c6-4d94-b444-950c602f3617",
                "30": "7f552d72-d737-40e9-9d26-e58400a15316",
                "60": "d0906682-88ce-45e6-b56d-4afca330eb72",
                "90": "81dd069c-086d-4be5-82d5-b9f34b469e7b",
                "120": "06d176ee-9234-47e3-a683-89844bbd5aa2",
                "150": "00738cc1-54a2-4ece-a1cd-d60d1aeadbce",
                "180": "fba984a3-2c28-42e8-b9fd-b9b0f1be285b",
                "210": "c660cd80-7ad5-453d-aa69-e1a74ceb3874",
                "240": "4acadd70-5b19-40fd-ac6f-1636df87023d",
                "270": "63d02df7-fc8a-4d1a-b86a-6f54af69e1c0",
                "300": "c912d17c-6849-4b23-971a-632f5019ece7",
                "330": "5eafa7a1-1537-4bcf-b07b-4e227fa2c78d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "b943cc94-18c6-4d94-b444-950c602f3617",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7f552d72-d737-40e9-9d26-e58400a15316",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d0906682-88ce-45e6-b56d-4afca330eb72",
            "latches": [
                "a707bfa7-7e58-4513-9ef8-0c4f09820d89"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "81dd069c-086d-4be5-82d5-b9f34b469e7b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "06d176ee-9234-47e3-a683-89844bbd5aa2",
            "latches": [
                "808bfa11-6d4a-4e0a-bbdf-82ab4f6a8603"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "00738cc1-54a2-4ece-a1cd-d60d1aeadbce",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fba984a3-2c28-42e8-b9fd-b9b0f1be285b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c660cd80-7ad5-453d-aa69-e1a74ceb3874",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "4acadd70-5b19-40fd-ac6f-1636df87023d",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "63d02df7-fc8a-4d1a-b86a-6f54af69e1c0",
            "latches": [
                "a6bc2b5c-844a-4bc3-85fc-846bc7d93d9d"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "c912d17c-6849-4b23-971a-632f5019ece7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5eafa7a1-1537-4bcf-b07b-4e227fa2c78d",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "3f41358e-f23d-4325-bcff-0ca7d7dc0284",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "070def0a-c954-4178-ad57-af75394644fd",
                "30": "9d64a349-3bc1-4d74-aa38-1de05baa35a5",
                "60": "783e6a47-6205-4922-aaca-b2282411414f",
                "90": "43551bef-f0de-4e69-94a7-0469f80bb097",
                "120": "2589bcf1-83f9-4685-a9d1-d628fe8aa7bf",
                "150": "4235c93b-d195-4317-8908-f4da99ba6406",
                "180": "25bb1565-9c15-4f46-80ed-c43ec37fd017",
                "210": "393507c7-d12d-4c71-a3b5-de8b3e983cbe",
                "240": "316c60e3-f278-45cc-a279-22757fb71231",
                "270": "3ba74f92-a64b-4cf2-83e1-206cc7ea9df3",
                "300": "27b753cf-4c92-4d6b-83d0-b006487c186b",
                "330": "212dad67-be23-4c85-96db-75248a4c9ef0"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "070def0a-c954-4178-ad57-af75394644fd",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9d64a349-3bc1-4d74-aa38-1de05baa35a5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "783e6a47-6205-4922-aaca-b2282411414f",
            "latches": [
                "e69a0766-3ecf-449a-988f-60e9dce41f41"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "43551bef-f0de-4e69-94a7-0469f80bb097",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2589bcf1-83f9-4685-a9d1-d628fe8aa7bf",
            "latches": [
                "aceba2ef-205d-4198-9ef2-fd3c0a2ab9b4"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "4235c93b-d195-4317-8908-f4da99ba6406",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "25bb1565-9c15-4f46-80ed-c43ec37fd017",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "393507c7-d12d-4c71-a3b5-de8b3e983cbe",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "316c60e3-f278-45cc-a279-22757fb71231",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3ba74f92-a64b-4cf2-83e1-206cc7ea9df3",
            "latches": [
                "8f02e345-d365-4192-822a-20dd838eb409"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "27b753cf-4c92-4d6b-83d0-b006487c186b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "212dad67-be23-4c85-96db-75248a4c9ef0",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "3aaf6319-be0f-45b8-8f80-2dd103c51f83",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "5b2074f0-80c1-49fd-ab42-0f6a440efd35",
                "30": "d5b972be-1729-44a4-9442-cd4b2c4502b2",
                "60": "1934576c-436d-49b1-ab53-1c27780ce0d1",
                "90": "de649f9f-3f90-4bcd-b8f4-de9aec720f39",
                "120": "0922004a-a792-4da3-946f-8205faaa9011",
                "150": "99cc4dcd-c1b0-499c-b2bf-accf67a218fa",
                "180": "ca059383-39b1-470c-b72c-b0eb1b21db56",
                "210": "5bd46bbb-3cde-4d11-b541-1b1a5d5a6081",
                "240": "f9285df4-823f-443c-9063-7ad5e84eaea5",
                "270": "344e812d-3925-49f1-8d08-0a78e4d4c7ae",
                "300": "cc1719f4-98ea-42bb-b3dc-133688c75031",
                "330": "3b8139b9-9d8e-41a5-8465-eb5a187a7da4"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "5b2074f0-80c1-49fd-ab42-0f6a440efd35",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d5b972be-1729-44a4-9442-cd4b2c4502b2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "1934576c-436d-49b1-ab53-1c27780ce0d1",
            "latches": [
                "4c57c1e3-302a-4b2c-8a6c-769ee62afedc"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "de649f9f-3f90-4bcd-b8f4-de9aec720f39",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0922004a-a792-4da3-946f-8205faaa9011",
            "latches": [
                "906100a8-55c5-427f-85ff-341095b0386c"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "99cc4dcd-c1b0-499c-b2bf-accf67a218fa",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ca059383-39b1-470c-b72c-b0eb1b21db56",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5bd46bbb-3cde-4d11-b541-1b1a5d5a6081",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f9285df4-823f-443c-9063-7ad5e84eaea5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "344e812d-3925-49f1-8d08-0a78e4d4c7ae",
            "latches": [
                "628ff7cc-23b6-49ca-aacf-cff00d3371c3"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "cc1719f4-98ea-42bb-b3dc-133688c75031",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3b8139b9-9d8e-41a5-8465-eb5a187a7da4",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "471df515-f143-4759-bafb-75252ccfb896",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "c2b8e6a0-abae-4e13-b7fa-4db53e0a14b8",
                "30": "db4ae16e-7161-4ca9-8965-a2f6e850ddfe",
                "60": "b071a16b-f7ab-494d-9ba9-db1ff377dbfb",
                "90": "45e4438b-810c-4ba7-848e-a6a16aae1b33",
                "120": "a8e3ffc0-85e8-422c-afd1-91fddc37c89f",
                "150": "bb2ff166-6b66-41a6-a62a-7f1f418afc16",
                "180": "d0b3be48-a448-4441-a690-766f91e142a3",
                "210": "88082b5a-4229-4306-83d6-7293934cf47c",
                "240": "6335497b-36d5-46de-8a58-6e432f7df78e",
                "270": "960bd481-dba4-42e6-9398-fc9a06938165",
                "300": "2b5a601c-4f6a-40fc-83d9-a4f312844d91",
                "330": "c2a626f3-8d17-4d4d-a874-4b95fb31da5a"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "c2b8e6a0-abae-4e13-b7fa-4db53e0a14b8",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "db4ae16e-7161-4ca9-8965-a2f6e850ddfe",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b071a16b-f7ab-494d-9ba9-db1ff377dbfb",
            "latches": [
                "b1f04d14-0cb2-448a-a696-35898401ab54"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "45e4438b-810c-4ba7-848e-a6a16aae1b33",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a8e3ffc0-85e8-422c-afd1-91fddc37c89f",
            "latches": [
                "2e1b76c2-d67b-45df-ad44-e2f0e0192954"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "bb2ff166-6b66-41a6-a62a-7f1f418afc16",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "d0b3be48-a448-4441-a690-766f91e142a3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "88082b5a-4229-4306-83d6-7293934cf47c",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6335497b-36d5-46de-8a58-6e432f7df78e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "960bd481-dba4-42e6-9398-fc9a06938165",
            "latches": [
                "bbebd20e-04e8-4a04-9fab-7ef80421e029"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "2b5a601c-4f6a-40fc-83d9-a4f312844d91",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c2a626f3-8d17-4d4d-a874-4b95fb31da5a",
            "latches": []
        },
        {
            "id": "AND_operator",
            "instance": "ca852f01-e5e0-4635-be05-30c93ef7bfc8",
            "properties": [
                [
                    "operator",
                    "AND"
                ]
            ],
            "anchors": {
                "0": "1d1bd1ee-5c50-4cf2-946d-fd21aeb553d0",
                "30": "219981f5-1609-4b48-aa6c-9d5b8f1b1099",
                "60": "2bcacc2b-5501-43e7-acc9-5e4253400471",
                "90": "61d828a0-b3d0-4ecd-8248-2b07c58c8b5e",
                "120": "2cc3f6a4-7f56-48dc-afca-9f6caec7d98e",
                "150": "56bb3137-53df-4467-8cb3-0ed59a4cd629",
                "180": "bae44dc6-0b2f-4c3f-8d69-f0326cd8c5b1",
                "210": "0ba9a2ee-3af3-4603-94f7-80cdfcdd7baf",
                "240": "adc338ca-f821-4be6-a2f1-7b1b39080e06",
                "270": "7062d0a7-4317-471a-81e8-de7923857346",
                "300": "441d407a-c0f6-4f46-9271-51a24ef80a74",
                "330": "123d8959-1a2a-4b32-a731-d4fdbb31754c"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "1d1bd1ee-5c50-4cf2-946d-fd21aeb553d0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "219981f5-1609-4b48-aa6c-9d5b8f1b1099",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2bcacc2b-5501-43e7-acc9-5e4253400471",
            "latches": [
                "f4cd1509-12d0-48ea-9aea-57d3bfb5a6a8"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "61d828a0-b3d0-4ecd-8248-2b07c58c8b5e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "2cc3f6a4-7f56-48dc-afca-9f6caec7d98e",
            "latches": [
                "5f95c5de-a362-49f9-97f7-69b74d6641e6"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "56bb3137-53df-4467-8cb3-0ed59a4cd629",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bae44dc6-0b2f-4c3f-8d69-f0326cd8c5b1",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0ba9a2ee-3af3-4603-94f7-80cdfcdd7baf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "adc338ca-f821-4be6-a2f1-7b1b39080e06",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7062d0a7-4317-471a-81e8-de7923857346",
            "latches": [
                "63e9174d-75a4-4ef7-acce-96dc592dd33c"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "441d407a-c0f6-4f46-9271-51a24ef80a74",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "123d8959-1a2a-4b32-a731-d4fdbb31754c",
            "latches": []
        },
        {
            "id": "file",
            "instance": "91e662e8-b64f-4a57-8f9c-2f1ce06cb673",
            "properties": [
                [
                    "name",
                    "/tmp/tmp514f524f"
                ],
                [
                    "name_enc",
                    null
                ],
                [
                    "size",
                    null
                ],
                [
                    "hashes",
                    []
                ],
                [
                    "magic_number_hex",
                    null
                ],
                [
                    "mime_type",
                    null
                ],
                [
                    "ctime",
                    null
                ],
                [
                    "mtime",
                    null
                ],
                [
                    "atime",
                    null
                ]
            ],
            "anchors": {
                "0": "366c026a-3ea8-44cc-8704-945062577349",
                "30": "14b51cd6-a348-4800-af6f-2b3ddc9fca0e",
                "60": "685a455c-8fbe-41b6-bb35-9be2c6ca19d8",
                "90": "61e00d40-6b3e-4871-9e2f-8abab8a31c3a",
                "120": "d3ecb1cd-add9-4a59-8120-1009661fb5e5",
                "150": "307c9123-6cb8-4f86-96a3-7e9a93a1c265",
                "180": "fc96742e-e7ed-4279-a945-646001292a75",
                "210": "a3f64892-ef01-4274-9938-780305566159",
                "240": "94c5ef90-c142-4232-9163-5bfe20a09b20",
                "270": "97509e59-39ed-47f6-9383-7f653d06b42b",
                "300": "d085476f-5a54-4dfe-9c7d-8377bacc5190",
                "330": "0008a934-9960-4d16-96fb-bd88d00c079b"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "366c026a-3ea8-44cc-8704-945062577349",
            "latches": [
                "40681add-6a01-47d4-99f8-3655d9a99dca"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "14b51cd6-a348-4800-af6f-2b3ddc9fca0e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "685a455c-8fbe-41b6-bb35-9be2c6ca19d8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "61e00d40-6b3e-4871-9e2f-8abab8a31c3a",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d3ecb1cd-add9-4a59-8120-1009661fb5e5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "307c9123-6cb8-4f86-96a3-7e9a93a1c265",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "fc96742e-e7ed-4279-a945-646001292a75",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "a3f64892-ef01-4274-9938-780305566159",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "94c5ef90-c142-4232-9163-5bfe20a09b20",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "97509e59-39ed-47f6-9383-7f653d06b42b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d085476f-5a54-4dfe-9c7d-8377bacc5190",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "0008a934-9960-4d16-96fb-bd88d00c079b",
            "latches": []
        },
        {
            "id": "ipv4_addr",
            "instance": "fa22dc7f-a275-470e-ae30-3cd85ed9c6e0",
            "properties": [
                [
                    "value",
                    "176.59.15.33"
                ]
            ],
            "anchors": {
                "0": "03c0c463-67c9-4e29-ae9e-61fde3518031",
                "30": "e460f190-ee77-499c-8fc4-c0d44360d849",
                "60": "a90a081e-2a7f-42fc-b078-50e0f5f2861e",
                "90": "6c92032c-6892-4c1f-9d8e-3877977ca9b3",
                "120": "ace44dc9-bf68-4f9a-a75a-226e5ebc5ec9",
                "150": "417cff4d-17df-41b4-895c-ca83b3defe03",
                "180": "5e41f052-5261-4b50-b951-76e2ecdaa89e",
                "210": "c8c70816-6813-4e3b-83d8-dffdbe413eaf",
                "240": "90d0fc9d-8e74-4530-9d1b-fd6dbe09e202",
                "270": "804f7a55-8096-423f-ab8a-a222fb4e6d32",
                "300": "0d0267bc-a95b-475b-8ff3-8b67203ec334",
                "330": "c8a9d045-7ef4-4c55-973c-8a96517428fe"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "03c0c463-67c9-4e29-ae9e-61fde3518031",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e460f190-ee77-499c-8fc4-c0d44360d849",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "a90a081e-2a7f-42fc-b078-50e0f5f2861e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6c92032c-6892-4c1f-9d8e-3877977ca9b3",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ace44dc9-bf68-4f9a-a75a-226e5ebc5ec9",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "417cff4d-17df-41b4-895c-ca83b3defe03",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "5e41f052-5261-4b50-b951-76e2ecdaa89e",
            "latches": [
                "b07aee79-6eab-4b45-a3eb-f07032b413a5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "c8c70816-6813-4e3b-83d8-dffdbe413eaf",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "90d0fc9d-8e74-4530-9d1b-fd6dbe09e202",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "804f7a55-8096-423f-ab8a-a222fb4e6d32",
            "latches": [
                "dd9d5021-1c39-4b53-b074-c18ddf60d9d9"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "0d0267bc-a95b-475b-8ff3-8b67203ec334",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c8a9d045-7ef4-4c55-973c-8a96517428fe",
            "latches": []
        },
        {
            "id": "network_traffic",
            "instance": "eedb256d-67bf-4295-9c7e-4f9632e5dd00",
            "properties": [
                [
                    "start",
                    null
                ],
                [
                    "end",
                    null
                ],
                [
                    "is_active",
                    null
                ],
                [
                    "src_port",
                    null
                ],
                [
                    "dst_port",
                    8081
                ],
                [
                    "protocols",
                    [
                        [
                            "eec81be82fc81d13094bed97bca0fd76",
                            "TCP"
                        ]
                    ]
                ],
                [
                    "src_byte_count",
                    null
                ],
                [
                    "dst_byte_count",
                    null
                ],
                [
                    "src_packets",
                    null
                ],
                [
                    "dst_packets",
                    null
                ],
                [
                    "ipfix",
                    null
                ]
            ],
            "anchors": {
                "0": "a57a6c48-df22-4433-aedf-e801141596b3",
                "30": "8e81da04-8865-4c0f-8329-859aa023440e",
                "60": "219135c0-275a-4522-a18d-63ff56383057",
                "90": "42536057-e728-4860-bc33-c04b1c639673",
                "120": "608e4dc7-59dd-4a8e-bf89-05896a5ea7a7",
                "150": "e61449ae-a94e-49c9-85b7-bb4164f657da",
                "180": "47ef08e7-b4c0-4025-bcd9-6cf3a08b8126",
                "210": "306a9b66-28af-4097-8c3a-475d6060275b",
                "240": "7630928d-a434-48ba-b289-7aef2cdebea8",
                "270": "0b4d0b1d-405e-4f67-a052-ea03266ac793",
                "300": "d1c891ab-dcfe-4115-9dab-4930d0986f99",
                "330": "02b656df-4b04-4c5c-9bf3-af3282300fbb"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "a57a6c48-df22-4433-aedf-e801141596b3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "8e81da04-8865-4c0f-8329-859aa023440e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "219135c0-275a-4522-a18d-63ff56383057",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "42536057-e728-4860-bc33-c04b1c639673",
            "latches": [
                "4efc74e4-2330-4944-b3ca-689e179f5166"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "608e4dc7-59dd-4a8e-bf89-05896a5ea7a7",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e61449ae-a94e-49c9-85b7-bb4164f657da",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "47ef08e7-b4c0-4025-bcd9-6cf3a08b8126",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "306a9b66-28af-4097-8c3a-475d6060275b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "7630928d-a434-48ba-b289-7aef2cdebea8",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0b4d0b1d-405e-4f67-a052-ea03266ac793",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d1c891ab-dcfe-4115-9dab-4930d0986f99",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "02b656df-4b04-4c5c-9bf3-af3282300fbb",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "4bc8e909-ba9d-4574-a1ec-f730f13ba77d",
            "properties": [
                [
                    "name",
                    "/root/hsperfdata"
                ],
                [
                    "description",
                    "PENQUIN malware installer; installs persistence for PENQUIN's packet sniffer by masquerading as cron"
                ],
                [
                    "malware_types",
                    [
                        [
                            "c2edea9ff5fec6f447365c4a970f61da",
                            "dropper"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "a47c0ece4c41bb499071cc163ea1cfec",
                            "installs-other-components"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "eadf74c4-21a2-4ea3-8885-adb77cec1f5b",
                "30": "bce9ce53-f4cf-4b9c-9636-3e6cafc8a553",
                "60": "dafe5d85-3ed0-4a97-8bdb-61c0df005371",
                "90": "ab18b25c-6c12-43f5-a382-cea9dc3aea97",
                "120": "22948f7f-0b04-4bab-98e9-a23b1558ce3a",
                "150": "e6dc8229-db6a-4946-81b1-e9b6ad103e4d",
                "180": "3f7a063b-4428-4d38-9bf1-80f3875a148e",
                "210": "1b83ad96-f06e-4c80-a5dd-084bdc9f2d6e",
                "240": "0c208d09-558d-4234-8a3e-f9a5c2d46ffe",
                "270": "71939f7f-fe92-4edf-9fbf-b9b343b590ba",
                "300": "f209e2c9-6c80-44c7-8557-12f44a6e1bd3",
                "330": "53d46ff5-f5fc-41f8-9bae-54515373805d"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "eadf74c4-21a2-4ea3-8885-adb77cec1f5b",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "bce9ce53-f4cf-4b9c-9636-3e6cafc8a553",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dafe5d85-3ed0-4a97-8bdb-61c0df005371",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ab18b25c-6c12-43f5-a382-cea9dc3aea97",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "22948f7f-0b04-4bab-98e9-a23b1558ce3a",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "e6dc8229-db6a-4946-81b1-e9b6ad103e4d",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "3f7a063b-4428-4d38-9bf1-80f3875a148e",
            "latches": [
                "49c352db-7c8a-45e1-8767-9521dbfe2eba"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "1b83ad96-f06e-4c80-a5dd-084bdc9f2d6e",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "0c208d09-558d-4234-8a3e-f9a5c2d46ffe",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "71939f7f-fe92-4edf-9fbf-b9b343b590ba",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "f209e2c9-6c80-44c7-8557-12f44a6e1bd3",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "53d46ff5-f5fc-41f8-9bae-54515373805d",
            "latches": []
        },
        {
            "id": "malware",
            "instance": "a04b91f8-0c84-49d4-ad15-b64ae2b3be0c",
            "properties": [
                [
                    "name",
                    "/usr/bin/cron"
                ],
                [
                    "description",
                    "PENQUIN malware sniffer; installs a BPF filter and sniffs for a magic packet. Once the magic packet is received, PENQUIN initiates a reverse shell to the address contained within the magic packet."
                ],
                [
                    "malware_types",
                    [
                        [
                            "8f326563a5da5299730ab1fb83fe866c",
                            "backdoor"
                        ]
                    ]
                ],
                [
                    "is_family",
                    "true"
                ],
                [
                    "aliases",
                    []
                ],
                [
                    "kill_chain_phases",
                    []
                ],
                [
                    "first_seen",
                    null
                ],
                [
                    "last_seen",
                    null
                ],
                [
                    "os_execution_envs",
                    []
                ],
                [
                    "architecture_execution_envs",
                    []
                ],
                [
                    "implementation_languages",
                    []
                ],
                [
                    "capabilities",
                    [
                        [
                            "7e327b8ed0d820d51a39a60bd7cd130d",
                            "persists-after-system-reboot"
                        ],
                        [
                            "504ffbdb302a08e529617ed499d296de",
                            "communicates-with-c2"
                        ]
                    ]
                ]
            ],
            "anchors": {
                "0": "074775c3-d0b7-4ce8-bb35-eb1522751c77",
                "30": "c5bf0eac-eb8e-411b-950a-41405c8045e2",
                "60": "d1375815-32ad-4303-ab02-2681c7c5f32b",
                "90": "9410d140-acee-417b-9621-0f3238197f57",
                "120": "cd63bcd0-c00e-4aee-b98a-9f92f4173365",
                "150": "12a4e16c-af2b-478a-976a-e18cbf073389",
                "180": "17851352-a0c4-4052-be17-5a329e283ef8",
                "210": "136c1696-8a2c-4833-9434-cf9b4a0254d7",
                "240": "b6fc2e4c-70d9-463c-9b99-64deb8376756",
                "270": "3ab468f5-597b-4e40-b79d-2762dfaeaeca",
                "300": "48139b6e-edf2-4e2e-9f32-212fb839c225",
                "330": "75f97bd5-cf19-4578-b999-73b44dab7be3"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "074775c3-d0b7-4ce8-bb35-eb1522751c77",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c5bf0eac-eb8e-411b-950a-41405c8045e2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "d1375815-32ad-4303-ab02-2681c7c5f32b",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "9410d140-acee-417b-9621-0f3238197f57",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "cd63bcd0-c00e-4aee-b98a-9f92f4173365",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "12a4e16c-af2b-478a-976a-e18cbf073389",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "17851352-a0c4-4052-be17-5a329e283ef8",
            "latches": [
                "76a00f4a-5275-4af5-afbe-957ae1ea15b5"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "136c1696-8a2c-4833-9434-cf9b4a0254d7",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "b6fc2e4c-70d9-463c-9b99-64deb8376756",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "3ab468f5-597b-4e40-b79d-2762dfaeaeca",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "48139b6e-edf2-4e2e-9f32-212fb839c225",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "75f97bd5-cf19-4578-b999-73b44dab7be3",
            "latches": []
        },
        {
            "id": "action",
            "instance": "9f7b9f48-6c23-4c2b-8bf5-f6fa222d7ce5",
            "properties": [
                [
                    "name",
                    "Native API"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0104"
                        ],
                        [
                            "technique",
                            "T0834"
                        ]
                    ]
                ],
                [
                    "description",
                    "uses CreateRemoteThread and CreateToolhelp32Snapshot API functions"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "73cc2fc3-b0a7-4e5c-9802-9c0300e62cc0",
                "30": "c74054c0-db3f-4cec-ae64-78dbd5332ce4",
                "60": "890531e1-dbb1-46c5-a8fc-6a979014f2cd",
                "90": "6b65dfdb-4dbe-4284-9e08-ef280fce159c",
                "120": "b66fab82-4905-4c7c-81cf-ffe43852dfb4",
                "150": "aa0e8680-02e6-4178-9b38-6f1ffdbd56d4",
                "180": "af0a12c3-bb66-4eaf-b8e5-e304c0c1aa43",
                "210": "7a0dea48-62fe-4bcf-9185-62ad9766d574",
                "240": "dffa02c4-0395-4697-8975-cf371c1a3402",
                "270": "ac901bec-ceb3-4e30-8473-f5f9ed597609",
                "300": "bb5adf7e-e70a-41d0-8208-a71cde6dbc58",
                "330": "0f92c026-0a0d-4515-bdb9-4d490ca97e55"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "73cc2fc3-b0a7-4e5c-9802-9c0300e62cc0",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "c74054c0-db3f-4cec-ae64-78dbd5332ce4",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "890531e1-dbb1-46c5-a8fc-6a979014f2cd",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "6b65dfdb-4dbe-4284-9e08-ef280fce159c",
            "latches": [
                "152913d7-175f-451e-9e68-a1439c0d0f52"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "b66fab82-4905-4c7c-81cf-ffe43852dfb4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "aa0e8680-02e6-4178-9b38-6f1ffdbd56d4",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "af0a12c3-bb66-4eaf-b8e5-e304c0c1aa43",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "7a0dea48-62fe-4bcf-9185-62ad9766d574",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "dffa02c4-0395-4697-8975-cf371c1a3402",
            "latches": [
                "687e45dd-43a5-46aa-8ad0-be4a3ff496f2"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "ac901bec-ceb3-4e30-8473-f5f9ed597609",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "bb5adf7e-e70a-41d0-8208-a71cde6dbc58",
            "latches": [
                "d31473b5-be93-46e2-9db5-656b26cff261"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "0f92c026-0a0d-4515-bdb9-4d490ca97e55",
            "latches": []
        },
        {
            "id": "action",
            "instance": "2eea001b-b702-4109-b1e8-9ee0b503304c",
            "properties": [
                [
                    "name",
                    "Native API"
                ],
                [
                    "ttp",
                    [
                        [
                            "tactic",
                            "TA0104"
                        ],
                        [
                            "technique",
                            "T0834"
                        ]
                    ]
                ],
                [
                    "description",
                    "uses OpenSCManager, CreateService, RegCreateKey and RegSetValue APIs"
                ],
                [
                    "confidence",
                    null
                ],
                [
                    "execution_start",
                    null
                ],
                [
                    "execution_end",
                    null
                ]
            ],
            "anchors": {
                "0": "300d8a42-4f37-4a90-a7e6-40312fdcc5df",
                "30": "6fdd933b-7ae1-4c32-895b-1df4f49a6bf5",
                "60": "076716ef-aaff-4f3a-b1a3-06bb7cca0da2",
                "90": "82d9df31-6c97-4059-aea1-551dd6fceb72",
                "120": "04cc6854-5866-4e23-b275-4637e68c34bb",
                "150": "9b6ffeb0-764e-400c-875e-925d009dfbb5",
                "180": "ad2f17a6-c039-43c4-a075-7af3bb4112a4",
                "210": "3866d411-fad6-488f-80d3-0aa49eaf0840",
                "240": "ba5d5a21-5f29-47f8-9b08-ed2112cbe477",
                "270": "32160517-0f65-4d80-9df6-638428e99dde",
                "300": "9dc381c1-2138-43d5-8472-83e339614458",
                "330": "138b17a5-3ff7-43bf-9a7d-ea6f83f97c92"
            }
        },
        {
            "id": "horizontal_anchor",
            "instance": "300d8a42-4f37-4a90-a7e6-40312fdcc5df",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "6fdd933b-7ae1-4c32-895b-1df4f49a6bf5",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "076716ef-aaff-4f3a-b1a3-06bb7cca0da2",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "82d9df31-6c97-4059-aea1-551dd6fceb72",
            "latches": [
                "5b1f116f-3977-49d5-abe9-ddaabddfa9ba"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "04cc6854-5866-4e23-b275-4637e68c34bb",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "9b6ffeb0-764e-400c-875e-925d009dfbb5",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "ad2f17a6-c039-43c4-a075-7af3bb4112a4",
            "latches": [
                "f0a3cb06-9bcd-4951-af3f-18076f08d720"
            ]
        },
        {
            "id": "horizontal_anchor",
            "instance": "3866d411-fad6-488f-80d3-0aa49eaf0840",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "ba5d5a21-5f29-47f8-9b08-ed2112cbe477",
            "latches": []
        },
        {
            "id": "vertical_anchor",
            "instance": "32160517-0f65-4d80-9df6-638428e99dde",
            "latches": [
                "e5159617-9698-4262-8116-3aa62c0547e4"
            ]
        },
        {
            "id": "vertical_anchor",
            "instance": "9dc381c1-2138-43d5-8472-83e339614458",
            "latches": []
        },
        {
            "id": "horizontal_anchor",
            "instance": "138b17a5-3ff7-43bf-9a7d-ea6f83f97c92",
            "latches": []
        }
    ],
    "layout": {
        "0e541791-394b-4162-be03-9f9278f7e1d5": [
            -170,
            -1090
        ],
        "8316a0b4-66de-499a-8a42-d9065d3c4ba7": [
            -180,
            -520
        ],
        "cf2612ab-902d-4fd2-a7b5-8e7b244af462": [
            -180,
            -210
        ],
        "5162318e-a7a9-4698-ab0a-48c88a29d8fc": [
            -170,
            -820
        ],
        "8f81b5c7-c419-4703-a4e4-e51a6ba22b97": [
            -690,
            -690
        ],
        "48d3c8fb-6780-4a10-a3e6-fcd1cc1c1b32": [
            -660,
            -240
        ],
        "bf51d484-632c-4317-b8ab-021acafe0b05": [
            -510,
            270
        ],
        "077ec5e3-8e89-4ac3-8a01-d0d057a4d24d": [
            90,
            200
        ],
        "a5584fbf-3d2c-4d39-8543-dbef40f285d3": [
            -230,
            990
        ],
        "77373e64-f955-49d3-842d-28e0dfd6d087": [
            -190,
            700
        ],
        "ce56fffa-e517-4459-b7b8-6ff58a77a6ad": [
            -80,
            1660
        ],
        "893ab53f-f8d5-417a-868e-4532bdb94b06": [
            230,
            980
        ],
        "582da220-1362-4c1b-ac1e-8edac4e3a7ca": [
            -550,
            1950
        ],
        "87584b53-b48f-44dd-8d01-e317a9e62c87": [
            10,
            1950
        ],
        "899b222b-c41c-4463-85b5-a337d7476660": [
            720,
            1940
        ],
        "0d577233-2b2e-4e32-8e78-cf20e4d129d3": [
            -150,
            2330
        ],
        "c357365c-fe30-49dd-8da6-de60ccb7724e": [
            -150,
            2610
        ],
        "40e9b8d4-100b-4aa3-9123-82392dba9232": [
            -170,
            2880
        ],
        "405ecdfd-6a8e-46cd-b514-2293b790636f": [
            -150,
            3410
        ],
        "c3d7f29b-68f2-4089-bf41-6e3d94bffcd2": [
            -150,
            3670
        ],
        "d1046ea8-e7db-4fcf-bef9-77c585d92f35": [
            -140,
            3930
        ],
        "6fb1e1b0-2388-4bea-954c-858549a0fb2b": [
            -1120,
            3830
        ],
        "6b067335-70fd-474d-9394-4ca443039fbb": [
            -890,
            3830
        ],
        "29ef7edf-5438-415f-a10f-27d79cb39bac": [
            -1120,
            4040
        ],
        "7e0bfe12-467b-481c-a190-bc2f2b81ebe9": [
            -180,
            3150
        ],
        "76634d34-e225-4ac5-a1a1-707cde424e46": [
            280,
            3130
        ],
        "d19d7718-a9cd-4c88-8930-c25ac023a994": [
            -140,
            5090
        ],
        "3c0ec891-3e2e-4b65-a968-6ea52b554b13": [
            -380,
            5700
        ],
        "c50397e5-bbb5-433d-8123-2f466680a675": [
            -140,
            4500
        ],
        "22d2c2e4-0e4d-4b4c-868b-8056fe634d32": [
            -140,
            4790
        ],
        "703e7750-2856-464f-9040-c9c25574db64": [
            150,
            5690
        ],
        "b1749e1b-dc2c-4c19-a5e3-70cd794c9b8c": [
            80,
            5990
        ],
        "152d7662-47d4-46cf-9819-72c430757abb": [
            -100,
            6580
        ],
        "5eb36921-dd1b-4de5-96b0-9d0ef2058749": [
            -100,
            7080
        ],
        "639eb5ef-fceb-4ca5-ba61-14eed316c97f": [
            -100,
            7330
        ],
        "748a674a-72bf-457d-aae1-516434fa31a6": [
            -100,
            7620
        ],
        "c01cfa4d-64b6-437d-b270-092f381577eb": [
            1090,
            7200
        ],
        "3c3b7ca1-60a0-4286-ad11-1232a8c30269": [
            710,
            7600
        ],
        "59203da5-73ed-4cac-9ab2-13e1e6cb26e7": [
            -570,
            7930
        ],
        "d6fe7e2d-42e1-41f0-a142-0561e733d5b8": [
            60,
            8240
        ],
        "889d521d-57fb-4bf2-9fe2-9f78818afa1d": [
            -110,
            8560
        ],
        "ac437e61-2f2e-4ac9-9daa-cf12d3399527": [
            700,
            7180
        ],
        "0dc5ed20-eec4-409e-8a4f-912fa3bfbb0a": [
            -100,
            8890
        ],
        "7ff0b240-1fe8-46e8-ab47-49b705864b96": [
            -100,
            9210
        ],
        "d0b1c8fe-13a6-41e7-96fe-e08b37febccb": [
            -860,
            9160
        ],
        "57583f62-d4fb-42a0-946e-5bf039dd23eb": [
            -1100,
            9390
        ],
        "f84e56b2-d28d-4200-985c-39688f12bfc5": [
            -330,
            9600
        ],
        "ceb33404-38f3-489f-9ed8-676d389836ad": [
            1130,
            7610
        ],
        "5a6daf1e-b3c2-4cb2-bb0f-a6a2ba99f52c": [
            120,
            9600
        ],
        "a0002de1-4df1-4c78-bf76-407bbf551e6e": [
            -100,
            10080
        ],
        "01a24a01-0891-495f-b2bf-2faf24a1c0b2": [
            -100,
            10360
        ],
        "a9f72a14-7e67-4bda-b3f1-fc8febe5d5ce": [
            -100,
            10620
        ],
        "465b48e0-0c8a-43bd-8e90-3f33b4d55341": [
            -100,
            10880
        ],
        "71dd65f1-45e6-4f6f-8249-6a7909eb4b13": [
            -130,
            11150
        ],
        "df9288f1-4d96-49f7-9a5a-963fa77d0389": [
            -100,
            11450
        ],
        "b235d21a-daba-487e-a5fe-4f034056c50e": [
            -100,
            11750
        ],
        "ddad5941-ff0d-4104-927d-9a5cd88d7189": [
            -100,
            12030
        ],
        "1115ca53-8e01-450f-9b08-372af94613ce": [
            -300,
            12370
        ],
        "a12b4799-1f17-4b8c-9497-8d12a29e76bf": [
            130,
            12390
        ],
        "e29d1661-7554-4e82-a89f-450acb5c18bb": [
            -90,
            13410
        ],
        "9f9c3ab6-12a8-44de-8fb8-19a2a5a53dfa": [
            -320,
            13750
        ],
        "76f1da1f-d530-4eab-a283-9457194f3baa": [
            140,
            13740
        ],
        "3bfa8d52-32c9-4001-a213-7ef9ff06e74b": [
            -90,
            12810
        ],
        "af046f51-6908-474e-9cf0-3796d37d6b0d": [
            -90,
            14420
        ],
        "6a6ab413-862c-499c-873a-ff97ece68044": [
            -80,
            14680
        ],
        "9ba17838-ce01-45a9-a8e7-9795724ade94": [
            260,
            14680
        ],
        "ff604248-f53b-4a3c-921e-c337f6faf6a2": [
            -80,
            14960
        ],
        "48c31894-6b07-46e7-889b-c49ab0d78b03": [
            -80,
            15230
        ],
        "331f943a-95a2-49c1-894a-36b28656e112": [
            -80,
            15490
        ],
        "78054e85-b18f-487b-8770-23b5e23f5edf": [
            -310,
            15830
        ],
        "f6a360e9-017f-4e9e-a622-b244e580dc7b": [
            -620,
            15830
        ],
        "964e994c-a8f0-41e0-a951-7d6df4b9a9f1": [
            150,
            15830
        ],
        "7e5c41d5-df6f-49ea-84cf-1fe900b9fd6f": [
            540,
            15830
        ],
        "3c222ff8-ceb3-4a48-9beb-b4862857541b": [
            310,
            7340
        ],
        "02db09d2-4a6b-4822-93cf-3356185a4de8": [
            -320,
            16620
        ],
        "b3dc5a50-e699-4327-a06f-700e54b1c00c": [
            130,
            16620
        ],
        "93fc9ea4-a42d-4608-a066-2ba72ef81743": [
            170,
            17410
        ],
        "114ce8e7-5f14-49ed-a14b-8b975574928f": [
            950,
            17410
        ],
        "37225277-74cf-4fdc-ad3c-cf909b5665d9": [
            1170,
            17620
        ],
        "54504110-d800-434e-ac35-b393c0d04358": [
            -340,
            17410
        ],
        "b43c700d-47de-4c38-a6d7-f414c7c0d030": [
            -80,
            17870
        ],
        "d61bcea4-01b9-4f5b-9adf-f5d5a2275013": [
            -80,
            18140
        ],
        "b2dc5abb-7d7c-473d-b124-0aaf23c3ea47": [
            330,
            17870
        ],
        "8b005c54-e446-4a17-99d0-1892ad4d7373": [
            -410,
            18140
        ],
        "24d2e486-abd9-4790-bb36-4eea0a8cfaa2": [
            -80,
            18390
        ],
        "53900fc1-afff-4a2e-8cfa-cfefdd352e1b": [
            -90,
            18650
        ],
        "ea1020dc-aabc-4753-bced-1f83782d01c0": [
            120,
            18970
        ],
        "fb9dad2d-28d4-409b-9384-6fa3aff37a5a": [
            540,
            18970
        ],
        "c1220c75-3597-4fd3-a340-550b6863bd1b": [
            -260,
            18970
        ],
        "68f92163-215b-40b0-8ab3-c2d1a245ae59": [
            -90,
            19420
        ],
        "0beed176-56c8-4154-81b6-be13da211109": [
            -80,
            19950
        ],
        "83918801-3f6c-46cf-bcfb-2526b51bf5fb": [
            -80,
            20250
        ],
        "89675195-dd60-4fd8-83e7-d96ad314ea6c": [
            -80,
            20550
        ],
        "4d164140-e60b-4f01-8430-38062b07ba8c": [
            -80,
            20840
        ],
        "2908b72e-f062-4601-a536-edef7a910279": [
            -80,
            21130
        ],
        "22f5e129-2c9f-4b79-8317-7a3178a071d8": [
            -80,
            21440
        ],
        "74453d46-eb96-4e82-a676-76b644e272f3": [
            -80,
            21720
        ],
        "d616c7b8-ec33-4ff5-be7a-3033154731f6": [
            -80,
            22010
        ],
        "eb09b9be-8a82-4a2e-b5c6-8746b13f48c8": [
            -70,
            22470
        ],
        "aab5ecac-d592-4c87-9e77-10f3e0a1df38": [
            -70,
            22730
        ],
        "d9f0fdcc-8fac-4ea2-b11f-88302030dfb5": [
            -70,
            23000
        ],
        "c9109f42-c087-4ede-8709-a26b7e954fcf": [
            -70,
            23290
        ],
        "a32a6261-8469-4912-87a1-b5153f4a2ee9": [
            -70,
            23580
        ],
        "0ba9c654-32a5-4853-9a27-e1b583ccb159": [
            -60,
            24370
        ],
        "307e5d85-a676-44f0-a4d9-d8efb5853225": [
            -70,
            24100
        ],
        "8d609ef9-3ae8-4c1a-9e30-b79dc45eb661": [
            -70,
            23860
        ],
        "d03f66c8-1f90-43f5-9150-5b3c09046dfd": [
            270,
            24370
        ],
        "2ceffd16-c580-4ba1-9462-c8719934e244": [
            -150,
            4180
        ],
        "1f51e091-f984-44b9-9de4-f4d53c43cc90": [
            -140,
            5450
        ],
        "27da13a9-09bf-4dfd-846e-b7beea16fbe4": [
            -120,
            6320
        ],
        "79ca06c8-3229-4d41-9160-c228830522dc": [
            220,
            -540
        ],
        "7f60addd-0e7f-4218-acdb-e0ebe5c514f0": [
            540,
            -670
        ],
        "b354ba41-073f-46a0-83e5-9c11992bf441": [
            530,
            -480
        ],
        "c786d46f-cd49-4ec0-a972-bcd5d55cfd04": [
            -570,
            3890
        ],
        "b3a66965-1879-4861-a4cf-3bca5b896604": [
            -510,
            9210
        ],
        "f5f760aa-365f-44dc-88ca-4fa4d27463cb": [
            -1100,
            9160
        ],
        "9b6d7b74-c4a1-410b-9fc6-635881e3e4a4": [
            290,
            10880
        ],
        "54da6a33-0669-4e98-9d97-7456327d0ada": [
            320,
            12030
        ],
        "0651ae75-6361-429d-94f9-4f079e43397e": [
            -680,
            12370
        ],
        "d92657d3-60dd-495b-bf8d-a602853ae9c1": [
            -1040,
            12300
        ],
        "b40d272d-17df-42f2-ba21-de0c9a460def": [
            -1040,
            12550
        ],
        "67fcca2e-9d46-49aa-aef1-38099d0636c9": [
            -90,
            13090
        ],
        "ffeafcc9-ac70-4466-b139-7c256e843e1d": [
            -320,
            14040
        ],
        "08c7c377-56da-46dd-b99a-62c86d8c4ad6": [
            300,
            17050
        ],
        "53bda5b2-062d-4a60-a2b2-f8bb1018a954": [
            640,
            17140
        ],
        "995318be-bb91-48e9-8607-feef8a0322ec": [
            -90,
            16280
        ],
        "06d9743e-3243-40eb-8448-7a56a11f44d7": [
            630,
            16930
        ],
        "752470ae-25cb-4f37-b64b-2133f2d3284a": [
            1170,
            17410
        ],
        "65fa3b8b-c3f5-4cf7-b4b3-85faf2fb4740": [
            -620,
            18970
        ],
        "e5dac779-01a7-40c7-9bb8-9831ed0f8a7e": [
            290,
            19420
        ],
        "74c3e5ab-823f-413b-b558-05e925ff290f": [
            630,
            19320
        ],
        "b8b80ae0-8d09-4f08-97ef-bbe475ff8b4d": [
            630,
            19560
        ],
        "45351783-5516-4524-a176-d8b8d9c48b10": [
            350,
            22010
        ],
        "ae138298-9a73-4237-b792-dc379f330ce9": [
            -80,
            22250
        ],
        "afb3f3c4-0ba7-4882-8c2c-ddc9b80b5674": [
            -90,
            19700
        ],
        "54396e15-e40a-4d44-957e-134032ec8e30": [
            -190,
            -1860
        ],
        "79e27662-752d-4321-8a4c-4e08b25d2d86": [
            540,
            200
        ],
        "120f5102-986c-4ad5-921b-087c52e84827": [
            -520,
            6580
        ],
        "cdea0282-b3f6-4e1b-afa3-ff01a05a1451": [
            800,
            8490
        ],
        "d532a295-2d21-44ed-b9da-ce699b2a22c4": [
            770,
            8260
        ],
        "05fcf90d-0427-43a9-9fb4-138e2386f169": [
            -100,
            17050
        ],
        "ff98a1f7-4540-4092-9e6c-a6eb804842b6": [
            620,
            17410
        ],
        "38bf3079-a747-4c6d-9a57-5856b5cc5e53": [
            -500,
            19420
        ],
        "e6b45aff-e2e3-45e6-9dd0-6e6765250772": [
            630,
            24460
        ],
        "157b0ffd-b909-488c-99f4-214bd97c91b7": [
            270,
            24550
        ],
        "b5c7cf55-2fe5-4bb8-a8e9-75643619c5e7": [
            -190,
            550
        ],
        "38437399-99d3-4f58-bf9e-0b53efc45c7d": [
            -260,
            2160
        ],
        "faf0efde-ca45-4b89-9e31-c783da3d8fed": [
            -120,
            6180
        ],
        "ed222435-f461-4810-b389-a4aef702098d": [
            -100,
            6840
        ],
        "0bc5eaa1-2786-4c72-a27b-afd2b62e8599": [
            -100,
            9880
        ],
        "ac066ffd-c979-4436-bd84-d6738a189ca0": [
            -90,
            12650
        ],
        "7ac5824b-8781-4153-a825-ba58dacca717": [
            -90,
            14240
        ],
        "3f41358e-f23d-4325-bcff-0ca7d7dc0284": [
            -90,
            16060
        ],
        "3aaf6319-be0f-45b8-8f80-2dd103c51f83": [
            -80,
            17670
        ],
        "471df515-f143-4759-bafb-75252ccfb896": [
            -90,
            19190
        ],
        "ca852f01-e5e0-4635-be05-30c93ef7bfc8": [
            -100,
            16850
        ],
        "91e662e8-b64f-4a57-8f9c-2f1ce06cb673": [
            -820,
            19420
        ],
        "fa22dc7f-a275-470e-ae30-3cd85ed9c6e0": [
            270,
            23520
        ],
        "eedb256d-67bf-4295-9c7e-4f9632e5dd00": [
            270,
            23760
        ],
        "4bc8e909-ba9d-4574-a1ec-f730f13ba77d": [
            380,
            20250
        ],
        "a04b91f8-0c84-49d4-ad15-b64ae2b3be0c": [
            410,
            21120
        ],
        "9f7b9f48-6c23-4c2b-8bf5-f6fa222d7ce5": [
            -240,
            1330
        ],
        "2eea001b-b702-4109-b1e8-9ee0b503304c": [
            -70,
            7900
        ],
        "b61fc0dd-63b4-485c-9ec7-d3a50615c18d": [
            -302,
            65
        ],
        "71af88a1-9866-4bf0-9978-129bbaa2b5fb": [
            -25,
            18830
        ],
        "bf68db11-5bf5-4b85-93b6-2cac16f74216": [
            -50,
            17240
        ],
        "e2c34c1a-c3e2-4d98-bf19-46f702b0a002": [
            380,
            24505
        ],
        "a50a99d6-133c-4da1-87c9-79d5ddf05aa3": [
            380,
            24415
        ],
        "0e8ee4f3-6784-4bd9-a5c9-6bbc848b949e": [
            -322,
            470
        ],
        "ceaa4c24-1909-4e07-a3d3-bfb047c00378": [
            -77,
            465
        ],
        "c3fdb641-475e-4e9a-a27f-137565231156": [
            -75,
            1780
        ],
        "3137028c-1aea-4c92-9fef-1b20c470d5ac": [
            -377,
            2085
        ],
        "2ca4ced2-fd49-47d7-801d-07ad7bab4256": [
            -150,
            2095
        ],
        "51d9f072-cc36-4a5d-866a-487173c4de04": [
            -222,
            5925
        ],
        "5d60bbf7-73ca-4a06-9993-051df6abdc87": [
            -17,
            9795
        ],
        "ce701713-71ce-44d9-8c94-77c739ad2277": [
            -192,
            9795
        ],
        "102118e4-d675-41cd-ab49-6899ac89a0f2": [
            -172,
            12570
        ],
        "e788e120-8ac9-49e9-953e-2c4c80102cd7": [
            -7,
            12570
        ],
        "f32ee47d-fa7d-45a0-967f-0c7e44e52ee1": [
            -222,
            17240
        ],
        "812a53cf-fb4d-43ed-8369-b05bd9b7a1d2": [
            -145,
            18830
        ],
        "b210de54-309f-484f-9c5a-04db3b93ef3b": [
            -160,
            19115
        ],
        "b104634a-7423-446b-b449-c864fbab756f": [
            -10,
            19115
        ],
        "c6981b39-307b-47bf-8b99-f139669e34e5": [
            910,
            7270
        ],
        "2c54d6e3-faf7-4fec-98ec-0aaff115dbd1": [
            -255,
            8100
        ],
        "eaf309c9-8834-4c9f-a494-b4b7c2588962": [
            910,
            7433
        ]
    },
    "camera": {
        "x": -235,
        "y": -1372,
        "k": 0.715201027064853
    }
}