{
  "ts": "2020-07-10T03:37:26.731657",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "8 не отработала, профу я про неё сказал"
}
{
  "ts": "2020-07-10T06:20:19.437587",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-07-10T06:21:28.728386",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Сегодня прокладки будут меняться?"
}
{
  "ts": "2020-07-10T07:00:08.857756",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "возьми у профа семпл локера maze"
}
{
  "ts": "2020-07-10T07:33:02.934985",
  "from": "8383@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T07:33:02.946507",
  "from": "8383@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "я подвыпал из работы\nпо семейным вопросам\nпока не обновились"
}
{
  "ts": "2020-07-10T07:34:24.004730",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "alarm@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-07-10T07:38:48.951792",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "mentos@q3mcco35auwcstmt.onion",
  "body": "а где сам архив с инсталятором лежит?"
}
{
  "ts": "2020-07-10T08:07:21.377406",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-07-10T08:07:32.304540",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T08:07:36.219326",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "bd2:\nDownload: https://qaz.im/load/TsQiiy/52zsF6   \nDelete: https://qaz.im/index.php?a=delete&q=3718966"
}
{
  "ts": "2020-07-10T08:18:15.499055",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Добрый день."
}
{
  "ts": "2020-07-10T08:18:17.405406",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Линки"
}
{
  "ts": "2020-07-10T08:18:18.636442",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://dubaidreamsadventure.com/Document_Aerlingus.exe"
}
{
  "ts": "2020-07-10T08:22:13.250704",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.shiningshadowllc.com/Document_BritishAirways.exe"
}
{
  "ts": "2020-07-10T08:22:30.221389",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "dl2:\nDownload: https://qaz.im/load/3eh4YS/7a3QKn   \nDelete: https://qaz.im/index.php?a=delete&q=808261987"
}
{
  "ts": "2020-07-10T08:23:09.904841",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Смарта нет."
}
{
  "ts": "2020-07-10T08:24:44.169360",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T08:33:51.451235",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет, ну что глянул отчет?"
}
{
  "ts": "2020-07-10T08:35:25.326327",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T08:40:16.418517",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "пробежимся?"
}
{
  "ts": "2020-07-10T08:40:38.945319",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T08:41:03.413664",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Привет ))"
}
{
  "ts": "2020-07-10T08:41:09.834886",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет))"
}
{
  "ts": "2020-07-10T08:41:12.486573",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Работаем?"
}
{
  "ts": "2020-07-10T08:42:14.502806",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-07-10T08:42:22.036254",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Замечательно!"
}
{
  "ts": "2020-07-10T08:42:39.150739",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт chil65.dll со свободной строкой"
}
{
  "ts": "2020-07-10T08:42:48.897261",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T08:50:30.994358",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет)"
}
{
  "ts": "2020-07-10T08:50:54.438141",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Привет ))"
}
{
  "ts": "2020-07-10T08:51:11.000003",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "привет, втотрая впс\nroot 51.81.112.144 FF984J598NWEE vpsroom.com tadamom@protonmail.com popo00--"
}
{
  "ts": "2020-07-10T08:51:58.006003",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T08:52:04.906199",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Серьезно? 3 дня делалась?"
}
{
  "ts": "2020-07-10T08:52:29.601314",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "нет, я оплачивал их вчера"
}
{
  "ts": "2020-07-10T08:52:40.512774",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "А пароли не прислал."
}
{
  "ts": "2020-07-10T08:52:45.372220",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "\n» *** 2020-07-07\n» [11:46:27] <keykey> постараюсь до конца дня выдать"
}
{
  "ts": "2020-07-10T08:52:49.026662",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "\n» *** 2020-07-10\n» [04:51:01] <keykey> привет, втотрая впс"
}
{
  "ts": "2020-07-10T08:53:29.553372",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "\n(09.07.2020 22:09:22] <carter> да, привет, одна впс готова, втотрая пока пендинг, оплатить только сегодня смог \nroot 51.81.112.137 895489HHH34 vpsroom.com 88teo@tutanota.com popo00--"
}
{
  "ts": "2020-07-10T08:53:42.022630",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вечером 7го уже закончились деньги"
}
{
  "ts": "2020-07-10T08:54:01.816286",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт лоадреа бк дял тестов"
}
{
  "ts": "2020-07-10T08:54:02.361195",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Какие у какой хар-ки?"
}
{
  "ts": "2020-07-10T08:54:02.969338",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/ndS3Sk/bHS76y   \n    Delete: https://qaz.im/index.php?a=delete&q=2010947747"
}
{
  "ts": "2020-07-10T08:54:04.461507",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "123321"
}
{
  "ts": "2020-07-10T08:54:21.204993",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T08:54:55.081013",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Круто. Сейчас перешлю, я пароли сам не знаю. Удали пока эти файлы по ссылке."
}
{
  "ts": "2020-07-10T08:55:57.230792",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "\n4 CORES\n2.6 GHz Core\n4GB/4GB\t240GB\n\nу обеих, стоят по 30$"
}
{
  "ts": "2020-07-10T08:57:00.174085",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "bd2:\nDownload: https://qaz.im/load/eGA3Hz/hQrirK   \nDelete: https://qaz.im/index.php?a=delete&q=1655536051\nПароль: dt\"t9pMpd`k#CG_~{"
}
{
  "ts": "2020-07-10T08:58:41.009420",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "dl2:\nDownload: https://qaz.im/load/TYSy5r/4izQZ4   \nDelete: https://qaz.im/index.php?a=delete&q=1098278610\nПароль: DQ?`<[Pd|QNyF$~A?"
}
{
  "ts": "2020-07-10T08:58:47.536228",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T08:59:17.031871",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "насчет талара надо поговорить"
}
{
  "ts": "2020-07-10T09:00:44.740357",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуста, крипт лоадера Бк с обычной иконкой"
}
{
  "ts": "2020-07-10T09:00:46.392087",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/5KYb7k/ztTzHF   \n    Delete: https://qaz.im/index.php?a=delete&q=2065306140"
}
{
  "ts": "2020-07-10T09:00:48.690333",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "123321"
}
{
  "ts": "2020-07-10T09:01:07.765047",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T09:01:24.008497",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Окей"
}
{
  "ts": "2020-07-10T09:01:25.258394",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Спасибо"
}
{
  "ts": "2020-07-10T09:05:23.349879",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил chil65.dll"
}
{
  "ts": "2020-07-10T09:06:00.630890",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "нихао"
}
{
  "ts": "2020-07-10T09:07:57.715262",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T09:09:20.229958",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. Я несколько запросов на слияние сделал. Посмотри как будет возможность."
}
{
  "ts": "2020-07-10T09:09:31.236611",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "https://n4iaacb37wmqclht.onion/fast/graber/merge_requests/8"
}
{
  "ts": "2020-07-10T09:09:37.776901",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "https://n4iaacb37wmqclht.onion/fast/graber/merge_requests/7"
}
{
  "ts": "2020-07-10T09:11:47.177262",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "fast@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T09:23:42.873061",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет! Есть несколько вопросов.\nКогда генерируется имя домена на основе текущей даты получается последовательность символов (по алгоритму в ТЗ, там есть функция для этого). Как эту последовательность преобразовать в IP-адрес?\n\nКак делать переподключение? В ТЗ сказано:\n\"Если в течение трех попыток был таймаут передачи, бот удваивает интервалы отправки, вплоть до достижения интервала в 30 минут.\"\nСколько времени (или сколько попыток) пытаться подключится к конкретному IP-адресу и когда начинать искать другой сервер?\n\nСейчас только HTTP-код 200 считается успешным. В ТЗ говорится про HTTP-коды 40*, 50* тоже. И как быть, если не удаётся отправить файл?"
}
{
  "ts": "2020-07-10T09:24:04.100770",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "ky"
}
{
  "ts": "2020-07-10T09:24:05.048946",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "bro"
}
{
  "ts": "2020-07-10T09:24:07.911841",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "a track dali?"
}
{
  "ts": "2020-07-10T09:30:10.575355",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "К этой последовательности добавь .bazaar"
}
{
  "ts": "2020-07-10T09:30:17.835385",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Это адрес emercoin"
}
{
  "ts": "2020-07-10T09:34:34.014554",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Одна попытка, подключиться к одному адресу. Прошёл все адреса во всех списках, уснул. Опять идёшь по списку адресов всех, только теперь между списками засыпаешь на 30 минут."
}
{
  "ts": "2020-07-10T09:35:17.708852",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Опять не получилось, завершение работы."
}
{
  "ts": "2020-07-10T09:35:54.415850",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "3 попытки отправить запрос, не получилось, переподключение, опять идешь по спискам, как я писал выше."
}
{
  "ts": "2020-07-10T09:36:46.693427",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Успешно только код 200, всё остальное не успешно считается, ещё две попытки тогда делаешь, не удачно и пять переподключение."
}
{
  "ts": "2020-07-10T09:39:33.379538",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Я тебе пришлю пример обфускации строк и WinApi вызовов. Там просто вставишь в к себе. У тебя же всё сделано можно сказать. Твой комплект в работу пускать пора Буза сказал. Допиливай шероховатости что остались."
}
{
  "ts": "2020-07-10T09:42:31.520625",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/6YnkTy/a8rKD7   \nDelete: https://qaz.im/index.php?a=delete&q=70564758    \nПароль: 6#qspX.rR8@1-Y8$S"
}
{
  "ts": "2020-07-10T09:43:51.325059",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Обфускация строк _STR(\"Анси строка\"), WCHAR[] wstr; lstrcpyW(wstr, L\"Юникод\"); используешь потом wstr где нужен юникод."
}
{
  "ts": "2020-07-10T09:44:42.318288",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Обфускация строк включается макросом OBFUSCATED_STRINGS, его надо включить в Release_nologs."
}
{
  "ts": "2020-07-10T09:44:48.177864",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Лоадер отправил"
}
{
  "ts": "2020-07-10T09:45:02.502038",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T09:46:44.624973",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Обфускация WinApi там и так понятно. Глобальные переменные kernel32 и т.д. это объекты классов обёрток над библиотеками WinApi, у них загрузка и получение адреса функции WinApi, и её вызов происходит на лету, по этому в бинарном файле нету следов этих функций."
}
{
  "ts": "2020-07-10T09:48:24.298860",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Добавляешь заголовок winapiproxy.h и используешь объекты kernel32 и т.д. Например kernel32.getTempPath, wininet.internetOpen, wininet.internetClose."
}
{
  "ts": "2020-07-10T09:49:08.920148",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Добавление новых функций для обфускации делай так же как там, просто как метод класса, там не сложно."
}
{
  "ts": "2020-07-10T09:49:48.482594",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, ono55"
}
{
  "ts": "2020-07-10T09:49:56.017773",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Позаменяй все строки статические у себя на _STR(\"строка\")\\_WCS(\"Строка\")\\_TSTR(\"Строка\")."
}
{
  "ts": "2020-07-10T09:50:27.371984",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет, пару минут"
}
{
  "ts": "2020-07-10T09:50:34.721171",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "_TSTR превращается в _STR если не указан макрос UNICODE, и в _WCS если указан, сделано для удобства."
}
{
  "ts": "2020-07-10T09:52:05.712980",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Потом проверь импорт получившегося файла, и строки в нём. Их не должно быть. Удобная утилита для просмотра exe файла http://www.mitec.cz/exe.html если надо."
}
{
  "ts": "2020-07-10T09:52:06.950701",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил"
}
{
  "ts": "2020-07-10T09:52:58.985374",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Сделаешь. Пиши, дам тебе логин\\пароль на dyncheck, там проверишь на антивирусы."
}
{
  "ts": "2020-07-10T09:55:19.178278",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "А в GetApi.h как можно добавить функции, которых там нет?"
}
{
  "ts": "2020-07-10T09:58:40.022435",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Там больше писанины:\nHMODULE lib = LoadLibrary(\"...\");\ntypedef void(WINAPI* functype)(void)\nfunctype ptr = (functype)GetProcAddress(lib, \"func\");\nptr()"
}
{
  "ts": "2020-07-10T09:59:13.010049",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "В том что я тебе послал это уже сделано для большого числа функций."
}
{
  "ts": "2020-07-10T10:00:22.318347",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Вот например как у меня подключение к серверу сделано:\nbool Commander::connect()\n{\n    if (addressListConnect())\n        return true;\n\n    if (emercoinListConnect())\n        return true;\n\n    if (dateListConnect())\n        return true;\n\n    debug_printf(TEXT(\"Sleep %u msecs\\n\"), TRY_CONNECT_INTERVAL);\n    kernel32.sleep(TRY_CONNECT_INTERVAL);\n\n    if (addressListConnect())\n        return true;\n\n    debug_printf(TEXT(\"Sleep %u msecs\\n\"), TRY_LIST_CONNECT_INTERVAL);\n    kernel32.sleep(TRY_LIST_CONNECT_INTERVAL);\n\n    if (emercoinListConnect())\n        return true;\n\n    debug_printf(TEXT(\"Sleep %u msecs\\n\"), TRY_LIST_CONNECT_INTERVAL);\n    kernel32.sleep(TRY_LIST_CONNECT_INTERVAL);\n\n    if (dateListConnect())\n        return true;\n\n    return false;\n}"
}
{
  "ts": "2020-07-10T10:01:06.335705",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "По всем спискам прошёл, не прокатило, уснул, опять по всем спискам, только между списками интервал 30 минут. Не прокатило завершение."
}
{
  "ts": "2020-07-10T10:03:25.224165",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "TRY_CONNECT_INTERVAL - 5 мин., TRY_LIST_CONNECT_INTERVAL 30 мин."
}
{
  "ts": "2020-07-10T10:03:26.884435",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "спс"
}
{
  "ts": "2020-07-10T10:26:02.515663",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "насчет талара надо поговорить"
}
{
  "ts": "2020-07-10T10:26:19.766633",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "lf"
}
{
  "ts": "2020-07-10T10:26:20.770594",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T10:26:22.589929",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "что там"
}
{
  "ts": "2020-07-10T10:26:25.088536",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "с таларом"
}
{
  "ts": "2020-07-10T10:27:52.074759",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T10:27:52.947541",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "дай кош"
}
{
  "ts": "2020-07-10T10:28:16.751407",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет. 3 мин"
}
{
  "ts": "2020-07-10T10:28:46.804039",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "staff@q3mcco35auwcstmt.onion",
  "body": "съездили?"
}
{
  "ts": "2020-07-10T10:29:06.211914",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-07-10T10:29:34.767510",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил бк"
}
{
  "ts": "2020-07-10T10:29:35.994959",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "17Yq9fkbPSyCRbsn8UDywQXWG3jADf1RkQ"
}
{
  "ts": "2020-07-10T10:30:33.571115",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "скинул"
}
{
  "ts": "2020-07-10T10:31:58.775848",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T10:32:04.213901",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "как дела с поиском новых?"
}
{
  "ts": "2020-07-10T10:32:06.440795",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "админов и кодеров"
}
{
  "ts": "2020-07-10T10:35:19.594984",
  "from": "electronic@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "по БА у меня не осталось сохраненного AD дампа"
}
{
  "ts": "2020-07-10T10:35:19.597806",
  "from": "electronic@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "он умер вместе с впс-кой на которой он был"
}
{
  "ts": "2020-07-10T10:35:19.599561",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Добрый день."
}
{
  "ts": "2020-07-10T10:35:19.600938",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Линки"
}
{
  "ts": "2020-07-10T10:35:19.602099",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://dubaidreamsadventure.com/Document_Aerlingus.exe"
}
{
  "ts": "2020-07-10T10:35:19.603381",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.shiningshadowllc.com/Document_BritishAirways.exe"
}
{
  "ts": "2020-07-10T10:35:19.604159",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Смарта нет."
}
{
  "ts": "2020-07-10T10:35:30.886993",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T10:35:33.350594",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-07-10T10:36:07.862123",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "вообщем буза"
}
{
  "ts": "2020-07-10T10:36:09.173852",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T10:36:11.599753",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "давай подумем"
}
{
  "ts": "2020-07-10T10:36:14.195861",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "голову поломаем"
}
{
  "ts": "2020-07-10T10:39:51.209344",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "прогонишь"
}
{
  "ts": "2020-07-10T10:39:54.047796",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на ав?"
}
{
  "ts": "2020-07-10T10:39:56.421087",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или он ок"
}
{
  "ts": "2020-07-10T10:39:56.422165",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или он ок"
}
{
  "ts": "2020-07-10T10:41:45.255381",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T10:42:48.864181",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "ща скидываю"
}
{
  "ts": "2020-07-10T10:43:14.923786",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T10:43:20.085417",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет. Сделал получение информации о системе для загрузчика?"
}
{
  "ts": "2020-07-10T10:43:29.650620",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Прогнал ок"
}
{
  "ts": "2020-07-10T10:46:18.585584",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Опять появился детект Windows Defender Antivirus Win32/Atosev.gen!A&threatid=2147729392&enterprise=0\n \tName: Behavior:Win32/Atosev.gen!A\n \tID: 2147729392\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: behavior:_pid:4692:51347961044742; process:_pid:4692,ProcessStart:132388473300674643\n \tDetection Origin: Unknown\n \tDetection Type: Generic\n \tDetection Source: Unknown\n \tUser: \n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.319.1169.0, AS: 1.319.1169.0, NIS: 1.319.1169.0\n \tEngine Version: AM: 1.1.17200.2, NIS: 1.1.17200.2"
}
{
  "ts": "2020-07-10T10:46:24.740623",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "через 20 минут после запуска"
}
{
  "ts": "2020-07-10T10:49:34.051101",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 1 уник ono55"
}
{
  "ts": "2020-07-10T10:49:37.440548",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок, там плавающий детект на модуле tabDll, напишу биллу"
}
{
  "ts": "2020-07-10T10:49:50.567879",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T10:50:01.368633",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-07-10T10:50:06.260585",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": " <bentley> Опять появился детект Windows Defender Antivirus Win32/Atosev.gen!A&threatid=2147729392&enterprise=0\n    Name: Behavior:Win32/Atosev.gen!A\n    ID: 2147729392\n    Severity: Severe\n    Category: Suspicious Behavior\n    Path: behavior:_pid:4692:51347961044742; process:_pid:4692,ProcessStart:132388473300674643\n    Detection Origin: Unknown\n    Detection Type: Generic\n    Detection Source: Unknown\n    User: \n    Process Name: C:\\Windows\\System32\\svchost.exe\n    Signature Version: AV: 1.319.1169.0, AS: 1.319.1169.0, NIS: 1.319.1169.0\n    Engine Version: AM: 1.1.17200.2, NIS: 1.1.17200.2\n[17:46:24] <bentley> через 20 минут после запуска\n\n[17:49:37] <hof> ок, там плавающий детект на модуле tabDll, напишу биллу"
}
{
  "ts": "2020-07-10T10:50:27.066265",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T10:50:36.476429",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T10:59:28.938989",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "CHIL65DSD.dll дляПола у деплоя"
}
{
  "ts": "2020-07-10T10:59:44.579164",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T10:59:57.157776",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "поговори"
}
{
  "ts": "2020-07-10T10:59:58.763893",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с бузой"
}
{
  "ts": "2020-07-10T11:00:00.404229",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "как  длл"
}
{
  "ts": "2020-07-10T11:00:01.893814",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кобы тестить"
}
{
  "ts": "2020-07-10T11:00:03.192685",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тебе"
}
{
  "ts": "2020-07-10T11:00:04.895699",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в будущем"
}
{
  "ts": "2020-07-10T11:00:13.884197",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и потом дай отчет"
}
{
  "ts": "2020-07-10T11:00:26.025276",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Поясни что значит тестить?"
}
{
  "ts": "2020-07-10T11:00:31.603872",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Просто провеять на детект?"
}
{
  "ts": "2020-07-10T11:00:39.330582",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на отстук"
}
{
  "ts": "2020-07-10T11:00:40.959180",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и детекты"
}
{
  "ts": "2020-07-10T11:00:42.726025",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и рантайм"
}
{
  "ts": "2020-07-10T11:00:48.191213",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "прямо так"
}
{
  "ts": "2020-07-10T11:00:49.996067",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ему скопируй"
}
{
  "ts": "2020-07-10T11:00:50.756418",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "он поймет"
}
{
  "ts": "2020-07-10T11:00:53.017021",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "о чем речь"
}
{
  "ts": "2020-07-10T11:00:53.855400",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок."
}
{
  "ts": "2020-07-10T11:00:58.659183",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "он же это и говорил"
}
{
  "ts": "2020-07-10T11:00:59.797350",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что это надо"
}
{
  "ts": "2020-07-10T11:02:47.968155",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет, закинь плиз строку на чил"
}
{
  "ts": "2020-07-10T11:03:13.780892",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mavemat@q3mcco35auwcstmt.onion",
  "body": "Привет. Крипотпанель перестала запускать тесты NEwBK. Просто машины не стартуют на сервере виртуалок. Можешь помочь?"
}
{
  "ts": "2020-07-10T11:03:22.745973",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T11:03:28.587284",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сек."
}
{
  "ts": "2020-07-10T11:04:26.727772",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "U0R7dDqpLzjDSi0suVZ7yfGrpQw0l3wez5AjOfKrn34CWZESEG"
}
{
  "ts": "2020-07-10T11:04:34.569354",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок, спс"
}
{
  "ts": "2020-07-10T11:06:25.750839",
  "from": "mavemat@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет, сейчас перезапущу все, может поможет"
}
{
  "ts": "2020-07-10T11:06:48.389729",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mavemat@q3mcco35auwcstmt.onion",
  "body": "Ага спс"
}
{
  "ts": "2020-07-10T11:11:14.728699",
  "from": "mavemat@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "попробуй сейчас"
}
{
  "ts": "2020-07-10T11:13:29.573724",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Оно55 отправил лоадер перезалил"
}
{
  "ts": "2020-07-10T11:13:42.519313",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T11:13:44.864290",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T11:16:55.516773",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты сказал чекнул файл"
}
{
  "ts": "2020-07-10T11:16:58.683261",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а это вирус"
}
{
  "ts": "2020-07-10T11:16:58.919840",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://dubaidreamsadventure.com/Document_Aerlingus.exe"
}
{
  "ts": "2020-07-10T11:17:08.404492",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хром блокирует пишет this file is dangerous"
}
{
  "ts": "2020-07-10T11:17:47.079432",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "блядь"
}
{
  "ts": "2020-07-10T11:17:50.284877",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и второй так же"
}
{
  "ts": "2020-07-10T11:17:57.828071",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и крипт ждать новый пару часов"
}
{
  "ts": "2020-07-10T11:23:14.163089",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "hey"
}
{
  "ts": "2020-07-10T11:23:59.303688",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "band@q3mcco35auwcstmt.onion",
  "body": "привет дай кош"
}
{
  "ts": "2020-07-10T11:24:16.910359",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "many@q3mcco35auwcstmt.onion",
  "body": "я в понедельник платил тебе"
}
{
  "ts": "2020-07-10T11:24:31.168422",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "many@q3mcco35auwcstmt.onion",
  "body": "ты когда послдений раз был онлайн"
}
{
  "ts": "2020-07-10T11:24:32.404238",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "many@q3mcco35auwcstmt.onion",
  "body": "криптовал"
}
{
  "ts": "2020-07-10T11:26:29.662679",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": ":-|"
}
{
  "ts": "2020-07-10T11:28:22.931929",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T11:28:53.316136",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да в течении часа будет"
}
{
  "ts": "2020-07-10T11:30:51.076102",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "({)"
}
{
  "ts": "2020-07-10T11:36:26.156972",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "ky"
}
{
  "ts": "2020-07-10T11:36:26.164796",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "bro"
}
{
  "ts": "2020-07-10T11:36:26.167510",
  "from": "tilar@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "a track dali?"
}
{
  "ts": "2020-07-10T11:38:13.863273",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет, у вас связки нет никакой? траффик потестить на денек"
}
{
  "ts": "2020-07-10T11:43:46.881401",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-07-10T11:49:30.284404",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T11:49:36.806268",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "неа"
}
{
  "ts": "2020-07-10T11:49:54.012102",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "связка помоему не актуальна ща"
}
{
  "ts": "2020-07-10T11:49:56.630129",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "насколько я видел"
}
{
  "ts": "2020-07-10T11:49:57.370449",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а как вы лом траффик сливаете?"
}
{
  "ts": "2020-07-10T11:50:02.889309",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "никак"
}
{
  "ts": "2020-07-10T11:50:08.883797",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "у нас со спама только и сплоитов"
}
{
  "ts": "2020-07-10T11:50:11.644894",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "сетевых"
}
{
  "ts": "2020-07-10T11:51:00.428078",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "у меня вот у типа попалась сетка хостеров небольшая и с нее де траффик есть 30 40к в день по идее но потестить не на чем("
}
{
  "ts": "2020-07-10T11:51:20.669118",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я думаю может что то отфильтровать на связку что то на ленд но чето не могу найти"
}
{
  "ts": "2020-07-10T11:51:38.996794",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "там поидее надо сразу ехе выдавать на скачивание"
}
{
  "ts": "2020-07-10T11:51:40.134787",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "как-то так"
}
{
  "ts": "2020-07-10T11:51:44.175957",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "или док файл в зипе"
}
{
  "ts": "2020-07-10T11:51:46.451883",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "[07:08:13] <target> ясно \n[07:08:21] <target> сгрузил еще 30 сеток от 80-100кк оборотом \n[07:09:13] <target> а зачем вы сетки в закреп перекидываете? \n[07:09:18] <target> в anchor"
}
{
  "ts": "2020-07-10T11:52:04.871284",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ну это нужен ленд, и чтобы файл в песочницу не залетал его надо еще скачать и разрешить 100 раз)"
}
{
  "ts": "2020-07-10T11:52:22.851476",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и серфитикат"
}
{
  "ts": "2020-07-10T11:52:30.762562",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "вот я думал может вам кто то льет так"
}
{
  "ts": "2020-07-10T12:03:37.063414",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Хотел уточнить:\nЕсли так случиться, что имя домена и имя компьютера будет одинаковым у двух компьютеров, то и id будут совпадать.\nВставил в id ещё дату создания папки Windows, но и эта дата может совпадать у разных машин.  Что в этом случае делать?"
}
{
  "ts": "2020-07-10T12:04:13.578534",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-07-10T12:04:46.803580",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Дата создания с точность до 1 мсек используй, чтобы максимально избежать этого."
}
{
  "ts": "2020-07-10T12:05:40.730469",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Тогда вероятность что всё совпадёт будет стремиться к нулю."
}
{
  "ts": "2020-07-10T12:08:37.920411",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Как пример:\nTCHAR sysPath[MAX_PATH + 1];\n    if (!kernel32.getSystemWindowsDirectory(sysPath, MAX_PATH + 1))\n    {\n        debug_printf(TEXT(\"Can't get system windows directory, error: %u\\n\"), GetLastError());\n        *size = 0;\n        return FALSE;\n    }\n\n    HANDLE sysFolder = kernel32.createFile(sysPath, GENERIC_READ, FILE_SHARE_READ, NULL,\n        OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS, NULL);\n    if (sysFolder == INVALID_HANDLE_VALUE)\n    {\n        debug_printf(TEXT(\"Can't open system windows directory, error: %u\\n\"), GetLastError());\n        *size = 0;\n        return FALSE;\n    }\n\n    FILETIME sysFolderFileTime = { 0 };\n    if (!kernel32.getFileTime(sysFolder, &sysFolderFileTime, NULL, NULL))\n    {\n        debug_printf(TEXT(\"Can't get system windows directory file time, error: %u\\n\"),\n            GetLastError());\n        kernel32.closeHandle(sysFolder);\n        *size = 0;\n        return FALSE;\n    }\n    kernel32.closeHandle(sysFolder);\n\n    SYSTEMTIME sysFolderSystemTime = { 0 };\n    if (!kernel32.fileTimeToSystemTime(&sysFolderFileTime, &sysFolderSystemTime))\n    {\n        debug_printf(\n            TEXT(\"Can't convert system windows directory file time to system time, error: %u\\n\"),\n            GetLastError());\n        *size = 0;\n        return FALSE;\n    }\n\n    TCHAR creationDateStr[19];\n    wsprintf(creationDateStr, _TSTR(TEXT(\"%u%u%u%u%u%u%u\")), sysFolderSystemTime.wMonth,\n        sysFolderSystemTime.wDay, sysFolderSystemTime.wYear, sysFolderSystemTime.wHour,\n        sysFolderSystemTime.wMinute, sysFolderSystemTime.wSecond,\n        sysFolderSystemTime.wMilliseconds);"
}
{
  "ts": "2020-07-10T12:10:46.966828",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Где-то читал, что эта дата фиксируется при сборке ОС, а не при установке (для некоторых версий Windows). У меня, например, дата создания папки Windows \"14 ‎июля ‎2009 ‎г\", хотя на самом деле установлена намного позже."
}
{
  "ts": "2020-07-10T12:13:10.142836",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Проверь. Что получается, там можно брать дату создания или дату последнего изменения."
}
{
  "ts": "2020-07-10T12:13:25.077473",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "У меня дата создания нормальная."
}
{
  "ts": "2020-07-10T12:14:12.625376",
  "from": "shell@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "hi man , zakin' plz pryam v prioritete eti zayavki na prozvon\n\nhttps://privnote.com/g4gQLS36#AOTc58qvX"
}
{
  "ts": "2020-07-10T12:14:15.857092",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "getFileTime(sysFolder, &sysFolderFileTime, NULL, NULL) вот здесь можно брать где NULL даты последнего изменения и т.д."
}
{
  "ts": "2020-07-10T12:14:28.268643",
  "from": "shell@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "i eshe , est' news po proshlii zayavkam ?"
}
{
  "ts": "2020-07-10T12:19:10.777208",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Оба крипта - ок"
}
{
  "ts": "2020-07-10T12:19:17.595743",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт gi12.dll"
}
{
  "ts": "2020-07-10T12:21:11.813231",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ok"
}
{
  "ts": "2020-07-10T12:27:10.388456",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T12:27:19.465551",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T12:29:14.993655",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, еще крипт лоадера БК"
}
{
  "ts": "2020-07-10T12:29:18.632339",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/BsSFiY/RbT2k4   \n    Delete: https://qaz.im/index.php?a=delete&q=833676777"
}
{
  "ts": "2020-07-10T12:29:20.375206",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "123321"
}
{
  "ts": "2020-07-10T12:29:42.054088",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T12:37:10.944103",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Пока оставь дату создания с большой точностью, пока не было косяков с id ботов. Надо будет уточнить когда эта дата ставится."
}
{
  "ts": "2020-07-10T12:40:12.005968",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T12:40:21.885382",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T12:40:33.000549",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Там с иконкой pdf или без?"
}
{
  "ts": "2020-07-10T12:41:06.404799",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Без просто"
}
{
  "ts": "2020-07-10T12:41:09.736140",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Это тест"
}
{
  "ts": "2020-07-10T12:41:25.280299",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T12:45:33.039779",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T12:45:56.666326",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Пожалуйста проплати вот эту:"
}
{
  "ts": "2020-07-10T12:46:03.850764",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "root 185.236.202.249 hkD8@9vmcS\nmonovm.com ballao@list.ru cxcx11!!\nпроплатить 10-го числа"
}
{
  "ts": "2020-07-10T12:46:30.214983",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "уже отрубилась -- сегодня ее прозевал :("
}
{
  "ts": "2020-07-10T12:48:17.440662",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": " вот эту к понедельнику:"
}
{
  "ts": "2020-07-10T12:48:21.040270",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "root 45.43.21.90 77OREACE0110\nionswitch.com wandone@protonmail.com cxcx11!!\nпроплатить 13 числа"
}
{
  "ts": "2020-07-10T12:50:11.638878",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "и вот эту к вторнику:"
}
{
  "ts": "2020-07-10T12:50:14.307907",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "root 156.96.46.27 UpK6sN8wF5f7oXGd03\nclientarea.ihostvps.net badroom@keemail.me asdqwe123!!\nоплатить около 14 числа"
}
{
  "ts": "2020-07-10T12:51:46.876889",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "привент, хорошо, спасибо"
}
{
  "ts": "2020-07-10T12:58:03.897718",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "2 часа"
}
{
  "ts": "2020-07-10T13:01:07.884680",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "залиты файлы звса, сегодня 765 по счету, линк не менялся\nhttp://66.70.218.46/images/imgpaper.png (lib)\nhttp://66.70.218.46/images/cursor.png  (tot)\nhttp://66.70.218.46/images/redcar.png (jim)"
}
{
  "ts": "2020-07-10T13:04:03.155652",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Файл готов но трасты становяться не трастами уже 10 проверил и везде жопа"
}
{
  "ts": "2020-07-10T13:11:47.576536",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "так"
}
{
  "ts": "2020-07-10T13:11:47.897751",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "пол"
}
{
  "ts": "2020-07-10T13:11:50.664894",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "мне идти нужно"
}
{
  "ts": "2020-07-10T13:11:53.494344",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "когда"
}
{
  "ts": "2020-07-10T13:11:54.007752",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "там"
}
{
  "ts": "2020-07-10T13:11:55.335546",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "гттово будет"
}
{
  "ts": "2020-07-10T13:18:10.533636",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт ld1.exe с другим стабом"
}
{
  "ts": "2020-07-10T13:18:20.893986",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "GI12RTFC.dll - ок"
}
{
  "ts": "2020-07-10T13:18:35.434257",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T13:20:59.927732",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T13:21:46.918099",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T13:22:17.724230",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Панель зависла"
}
{
  "ts": "2020-07-10T13:22:21.525951",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-07-10T13:22:34.733517",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Все файл загрузился"
}
{
  "ts": "2020-07-10T13:22:40.750558",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Спс )"
}
{
  "ts": "2020-07-10T13:22:51.657004",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T13:22:52.066059",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не поднялись права, сессий локал админа нет"
}
{
  "ts": "2020-07-10T13:23:05.374334",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не поднялись права. 35 серверов. по возможности вызвать другого агента. локальных\nссесий администратора нет. паролей тоже."
}
{
  "ts": "2020-07-10T13:23:14.223792",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T13:23:17.658398",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "нет прав администратора. выполнил одну команду на поднятие прав- агент умер."
}
{
  "ts": "2020-07-10T13:23:18.345802",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Не тому пишешь?"
}
{
  "ts": "2020-07-10T13:23:29.340813",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не тебе"
}
{
  "ts": "2020-07-10T13:23:30.778663",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "объясни плз"
}
{
  "ts": "2020-07-10T13:23:34.472626",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это часто так"
}
{
  "ts": "2020-07-10T13:23:38.037499",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и что делется в таком случае"
}
{
  "ts": "2020-07-10T13:24:30.143012",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет.\nрелиз backdoor готов для тестирования.\nD:\\Project\\backdoor\\Bin\\publish\\b10.07.2020\nDowload URL:\nhttps://www.sendspace.com/file/zp644i\nDelete URL:\nhttps://www.sendspace.com/delete/zp644i/d945c0163e9609f71a54260eac0c6ae2\nPass:\nhh+{g_0@*"
}
{
  "ts": "2020-07-10T13:24:56.675923",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Ок. Проверю."
}
{
  "ts": "2020-07-10T13:24:57.472472",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n» [09:23:28] <target> не тебе \nтут запятая?"
}
{
  "ts": "2020-07-10T13:25:43.429370",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "у тебя есть дока, как тестить?"
}
{
  "ts": "2020-07-10T13:25:54.110119",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "до сих пор?"
}
{
  "ts": "2020-07-10T13:25:57.518864",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и длл"
}
{
  "ts": "2020-07-10T13:25:59.222413",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тесты"
}
{
  "ts": "2020-07-10T13:26:05.513363",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "помнишь?"
}
{
  "ts": "2020-07-10T13:26:17.198051",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сегдоня задачу закрой эту вчерашнюю"
}
{
  "ts": "2020-07-10T13:27:24.412998",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Которую Буза делал?"
}
{
  "ts": "2020-07-10T13:27:33.645451",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да помню."
}
{
  "ts": "2020-07-10T13:27:47.507067",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сейчас сделаем с другим стабом и буду грузить"
}
{
  "ts": "2020-07-10T13:27:53.970470",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да, во всяком случае выдал"
}
{
  "ts": "2020-07-10T13:28:14.636196",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Продублируй, плиз, может что-то у меня другое"
}
{
  "ts": "2020-07-10T13:29:42.886790",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Спс."
}
{
  "ts": "2020-07-10T13:29:49.450948",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Да то"
}
{
  "ts": "2020-07-10T13:32:33.226809",
  "from": "shell@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "hi man , zakin' plz pryam v prioritete eti zayavki na prozvon\n\nhttps://privnote.com/g4gQLS36#AOTc58qvX"
}
{
  "ts": "2020-07-10T13:32:33.227947",
  "from": "shell@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "i eshe , est' news po proshlii zayavkam ?"
}
{
  "ts": "2020-07-10T13:34:52.160649",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-07-10T13:34:58.406965",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "grant@q3mcco35auwcstmt.onion",
  "body": "lf"
}
{
  "ts": "2020-07-10T13:35:03.611194",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "grant@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T13:36:46.041261",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Добрый день!"
}
{
  "ts": "2020-07-10T13:36:54.457734",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Ошибки открытия чата: https://prnt.sc/tfdoga"
}
{
  "ts": "2020-07-10T13:38:08.093039",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "бро"
}
{
  "ts": "2020-07-10T13:38:09.289211",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "отклик"
}
{
  "ts": "2020-07-10T13:41:21.688415",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "При обновлении рековери, не обновляется его пароль: https://prnt.sc/tfdtfi"
}
{
  "ts": "2020-07-10T14:02:52.813662",
  "from": "clickclack@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "привет расскажи что с прозвоном не так"
}
{
  "ts": "2020-07-10T14:06:50.902754",
  "from": "licor@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "привет\nможно получить тз?"
}
{
  "ts": "2020-07-10T14:25:59.871123",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "о, ты уже проплалил сегодняшний"
}
{
  "ts": "2020-07-10T14:26:02.169286",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "класс"
}
{
  "ts": "2020-07-10T14:26:05.584012",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-07-10T14:30:47.058021",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "тебе"
}
{
  "ts": "2020-07-10T14:30:49.693556",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это вопрос"
}
{
  "ts": "2020-07-10T14:30:51.090224",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "по сеткам"
}
{
  "ts": "2020-07-10T14:30:52.121972",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "отчетам"
}
{
  "ts": "2020-07-10T14:30:54.042947",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "часто ли"
}
{
  "ts": "2020-07-10T14:30:55.889666",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "такое бывает"
}
{
  "ts": "2020-07-10T14:30:58.291518",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и чт оделается"
}
{
  "ts": "2020-07-10T14:31:00.759527",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "в таком случае"
}
{
  "ts": "2020-07-10T14:31:02.768913",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "обычно"
}
{
  "ts": "2020-07-10T14:31:28.118999",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "грин"
}
{
  "ts": "2020-07-10T14:31:30.283112",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "свой человек?"
}
{
  "ts": "2020-07-10T14:31:36.671391",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "стерна нет"
}
{
  "ts": "2020-07-10T14:31:54.874346",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "чтобы спросить"
}
{
  "ts": "2020-07-10T14:35:28.028071",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Привет. Напомни обфусцированный загрузчик это persist-loader.obf.ps1?"
}
{
  "ts": "2020-07-10T14:36:26.211422",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Текущая версия что делает? Загружает чего нибудь, как понять что он отработвл?"
}
{
  "ts": "2020-07-10T14:37:30.472800",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста,  yas43"
}
{
  "ts": "2020-07-10T14:37:42.068813",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-07-10T14:37:42.739663",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ok"
}
{
  "ts": "2020-07-10T14:38:51.105831",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "привет. да, он самый.\nс прошлого твоего теста изменений не было. так же загружает тестовый dll с сообщением"
}
{
  "ts": "2020-07-10T14:39:09.029707",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "OK."
}
{
  "ts": "2020-07-10T14:39:52.161083",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну как"
}
{
  "ts": "2020-07-10T14:39:53.190535",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вышло?"
}
{
  "ts": "2020-07-10T14:39:53.892753",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "длл"
}
{
  "ts": "2020-07-10T14:40:25.136059",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Грин сделает только в понеделник сервак с кобой"
}
{
  "ts": "2020-07-10T14:40:36.857927",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты о чем"
}
{
  "ts": "2020-07-10T14:40:44.324379",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я попросил тебя"
}
{
  "ts": "2020-07-10T14:40:45.965512",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "протстить длл"
}
{
  "ts": "2020-07-10T14:40:47.147693",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в буере"
}
{
  "ts": "2020-07-10T14:40:49.776530",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты ехе протестил"
}
{
  "ts": "2020-07-10T14:40:51.430662",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "теперь длл"
}
{
  "ts": "2020-07-10T14:40:53.862842",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "длл у кого ты взять можешь"
}
{
  "ts": "2020-07-10T14:40:55.880674",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил"
}
{
  "ts": "2020-07-10T14:40:58.149906",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "у грина крипт попросить длл"
}
{
  "ts": "2020-07-10T14:40:59.959821",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или бк длл"
}
{
  "ts": "2020-07-10T14:41:02.459666",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "запросить у бузы"
}
{
  "ts": "2020-07-10T14:41:04.044914",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не важно какой"
}
{
  "ts": "2020-07-10T14:41:10.390061",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в чем проблема у кого то запросить длл"
}
{
  "ts": "2020-07-10T14:41:12.296407",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ааа."
}
{
  "ts": "2020-07-10T14:41:23.228513",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я про кобу. Что сервак"
}
{
  "ts": "2020-07-10T14:41:28.394579",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Думал ты это"
}
{
  "ts": "2020-07-10T14:41:30.783371",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сделаю."
}
{
  "ts": "2020-07-10T14:41:39.485629",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подожди"
}
{
  "ts": "2020-07-10T14:41:41.780480",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "задача какая"
}
{
  "ts": "2020-07-10T14:41:42.601187",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "длл"
}
{
  "ts": "2020-07-10T14:41:45.292756",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "протестить"
}
{
  "ts": "2020-07-10T14:41:51.486568",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подгурзку"
}
{
  "ts": "2020-07-10T14:42:03.831034",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так грин уже может дать длл (позже) от кобы текущей"
}
{
  "ts": "2020-07-10T14:42:10.332614",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Какую длл не было сказано. Все длл разные. У них разная технология запуска"
}
{
  "ts": "2020-07-10T14:42:23.209827",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "возьми длл от бк"
}
{
  "ts": "2020-07-10T14:42:24.791050",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ее запусти"
}
{
  "ts": "2020-07-10T14:42:37.707171",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и длл от кобы - криптованную запроси от меня у грина от текущей кобы и ее"
}
{
  "ts": "2020-07-10T14:42:59.518840",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я могу длл сделать от бота Трика. Запрошу длл кобы"
}
{
  "ts": "2020-07-10T14:43:23.928789",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хорошо давай от трика протстим\n+ от кобы протестим"
}
{
  "ts": "2020-07-10T14:43:28.392265",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и еще момент"
}
{
  "ts": "2020-07-10T14:43:30.755899",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с 13 30"
}
{
  "ts": "2020-07-10T14:43:31.897788",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ехе"
}
{
  "ts": "2020-07-10T14:43:33.636419",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ждем"
}
{
  "ts": "2020-07-10T14:43:39.128049",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что с ним"
}
{
  "ts": "2020-07-10T14:44:00.764544",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": " 1 ехе рабочий?"
}
{
  "ts": "2020-07-10T14:44:02.006365",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T14:44:03.301844",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "так ван"
}
{
  "ts": "2020-07-10T14:44:04.771884",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "отвлеку тебя"
}
{
  "ts": "2020-07-10T14:44:09.573389",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "опиши что должен делать тестировщик плз"
}
{
  "ts": "2020-07-10T14:44:11.925045",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "и где его нйти"
}
{
  "ts": "2020-07-10T14:44:12.938403",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "найти"
}
{
  "ts": "2020-07-10T14:44:14.363297",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "нам"
}
{
  "ts": "2020-07-10T14:44:21.041622",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ты смышленый"
}
{
  "ts": "2020-07-10T14:44:24.371716",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "должен знать"
}
{
  "ts": "2020-07-10T14:44:39.390542",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": ")) бентли"
}
{
  "ts": "2020-07-10T14:44:42.140831",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "мы же аерлингус"
}
{
  "ts": "2020-07-10T14:44:43.434090",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и ральф"
}
{
  "ts": "2020-07-10T14:44:46.172092",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так и не атаковали"
}
{
  "ts": "2020-07-10T14:44:48.430412",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T14:44:53.458244",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Сервер регал?"
}
{
  "ts": "2020-07-10T14:45:03.924864",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и они в подвешенным состоянии им даже не звонили чтобы перенести"
}
{
  "ts": "2020-07-10T14:46:12.159959",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сделали новый крипт буду грузить"
}
{
  "ts": "2020-07-10T14:46:21.222714",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "куда"
}
{
  "ts": "2020-07-10T14:46:22.046973",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кого"
}
{
  "ts": "2020-07-10T14:46:27.442716",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "привет, с деньгами получилось только сегодня зарегать, сделал пару часов назад пока пендинг, выдам сразу как готовы будут"
}
{
  "ts": "2020-07-10T14:46:43.463230",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Бк С именами который ты просил с прямыми линками"
}
{
  "ts": "2020-07-10T14:56:15.198221",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "doloto@q3mcco35auwcstmt.onion",
  "body": "ky ky"
}
{
  "ts": "2020-07-10T14:59:30.229475",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Добрый день!"
}
{
  "ts": "2020-07-10T14:59:30.231811",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Ошибки открытия чата: https://prnt.sc/tfdoga"
}
{
  "ts": "2020-07-10T14:59:30.232706",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "При обновлении рековери, не обновляется его пароль: https://prnt.sc/tfdtfi"
}
{
  "ts": "2020-07-10T15:01:41.684322",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ты кому-то кроме меня давал пароль к вот этому?"
}
{
  "ts": "2020-07-10T15:01:46.133304",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "170.130.55.100"
}
{
  "ts": "2020-07-10T15:02:13.605399",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "чет у него отпечаток ключа изменился и больше не хочет пускать по ссх"
}
{
  "ts": "2020-07-10T15:03:01.962447",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "да, я выдавал его грину 25.05"
}
{
  "ts": "2020-07-10T15:03:41.316002",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "а зачем? я просил под бекапы"
}
{
  "ts": "2020-07-10T15:04:12.102218",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "он его уже под что-то заюзал другое?"
}
{
  "ts": "2020-07-10T15:04:12.767099",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "погоди"
}
{
  "ts": "2020-07-10T15:05:00.587847",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "я у тебя его просил несколько дней назад"
}
{
  "ts": "2020-07-10T15:05:18.180871",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "тут такой же ип присвоили, я со сттарым спутал, а выданный вчера больше никому не отправлял"
}
{
  "ts": "2020-07-10T15:05:33.759955",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "странно"
}
{
  "ts": "2020-07-10T15:05:43.777501",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "такая панель раньше была \n<poll> green bro kidai \nroot 170.130.55.100 d8899d19a9 my.vps2day.com dandau@ro.ru 74b0edbadc"
}
{
  "ts": "2020-07-10T15:06:04.722383",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "чет опять пускать не хочет, и отпечаток ключа поменялся"
}
{
  "ts": "2020-07-10T15:06:10.359784",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "а вчера пускал"
}
{
  "ts": "2020-07-10T15:07:19.797604",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "не, мне незачем другим его отправлять было, могу другой взять"
}
{
  "ts": "2020-07-10T15:09:25.971377",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "root@170.130.55.100: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password)."
}
{
  "ts": "2020-07-10T15:09:44.147813",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "откуда там еще и ключ взялся?"
}
{
  "ts": "2020-07-10T15:10:02.233584",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ни старый ни новый пароль не подходят"
}
{
  "ts": "2020-07-10T15:10:55.327843",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "может в суппорт обратиться чтобы пароль сбросили? Или лучше новый взять?"
}
{
  "ts": "2020-07-10T15:13:47.568670",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "дай файл"
}
{
  "ts": "2020-07-10T15:13:48.868012",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "бк"
}
{
  "ts": "2020-07-10T15:14:11.270467",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "С линком или просто?"
}
{
  "ts": "2020-07-10T15:14:18.442038",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну с линком же не гттов еще?"
}
{
  "ts": "2020-07-10T15:14:25.394714",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Нет"
}
{
  "ts": "2020-07-10T15:14:29.026312",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тогда просто"
}
{
  "ts": "2020-07-10T15:14:35.905053",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/deiQrQ/is9bA2   \n    Delete: https://qaz.im/index.php?a=delete&q=934415081"
}
{
  "ts": "2020-07-10T15:14:38.116164",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-07-10T15:19:26.012074",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так там серт"
}
{
  "ts": "2020-07-10T15:19:27.216739",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "же сдох"
}
{
  "ts": "2020-07-10T15:19:42.133852",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да ладнО!"
}
{
  "ts": "2020-07-10T15:19:47.498646",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я проверял с утра ок был"
}
{
  "ts": "2020-07-10T15:19:50.043239",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Щас гляну"
}
{
  "ts": "2020-07-10T15:20:05.993154",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Если команда запрошена с одного ip-адреса и потерялась связь с этим ip-адресом, то ответ можно отправлять на другой ip-адрес (который найдем по спискам) или нет? Не совсем понял, админка общая для всех ip-адресов или нет?"
}
{
  "ts": "2020-07-10T15:20:38.488541",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Да. Общая для всех адресов."
}
{
  "ts": "2020-07-10T15:20:52.671331",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "лоадер выше"
}
{
  "ts": "2020-07-10T15:20:53.876816",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписан?"
}
{
  "ts": "2020-07-10T15:21:29.054258",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да. Посмотри по свойствам файла"
}
{
  "ts": "2020-07-10T15:21:37.212569",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Команду запросил, получил, отправляешь результат ошибка 3 раза, переподключение, куда удалось подключиться туда и отправляй результат."
}
{
  "ts": "2020-07-10T15:21:54.899903",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кто криптер"
}
{
  "ts": "2020-07-10T15:21:56.647880",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тут не в хосте дело"
}
{
  "ts": "2020-07-10T15:21:57.512677",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а в файле"
}
{
  "ts": "2020-07-10T15:21:59.665199",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "писало бы"
}
{
  "ts": "2020-07-10T15:22:02.531984",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "not safe"
}
{
  "ts": "2020-07-10T15:22:04.286359",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а тут пишет"
}
{
  "ts": "2020-07-10T15:22:06.149313",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "dangerous"
}
{
  "ts": "2020-07-10T15:22:20.625262",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Понял.\nВ ТЗ сказано функцию get_possible_domain нужно обфусцировать. Нужно запутать, усложнить её?"
}
{
  "ts": "2020-07-10T15:23:03.526180",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и не дает его даже сохранить"
}
{
  "ts": "2020-07-10T15:23:06.624695",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сразу кнопка только одна"
}
{
  "ts": "2020-07-10T15:23:07.510406",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ООО МЕР - выдал Фокс 24.06."
}
{
  "ts": "2020-07-10T15:23:07.701984",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отмена"
}
{
  "ts": "2020-07-10T15:23:08.271037",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и все"
}
{
  "ts": "2020-07-10T15:23:24.140312",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файл что ты дал выше"
}
{
  "ts": "2020-07-10T15:23:26.286674",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "крипт или сам лоадер"
}
{
  "ts": "2020-07-10T15:23:29.770680",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "без серта даже"
}
{
  "ts": "2020-07-10T15:23:31.141515",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "опасные"
}
{
  "ts": "2020-07-10T15:23:35.253367",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Rhbgn"
}
{
  "ts": "2020-07-10T15:23:38.233054",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Крипт"
}
{
  "ts": "2020-07-10T15:23:42.277494",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Да можешь запутать. Ещё вызовы функций WinApi в ней обфусцируй. Я просто вызовы WinApi функций обфусцировал в ней. Можешь лишних вычислений в неё впихнуть."
}
{
  "ts": "2020-07-10T15:25:12.156652",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.shiningshadowllc.com/Document_BritishAirways.exe"
}
{
  "ts": "2020-07-10T15:25:17.974403",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Смарт не вылез при запуске"
}
{
  "ts": "2020-07-10T15:25:24.893425",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Когда сохранил файл"
}
{
  "ts": "2020-07-10T15:25:26.419341",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "как ты скачал этот файл"
}
{
  "ts": "2020-07-10T15:25:28.905251",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T15:25:29.360029",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "если хром"
}
{
  "ts": "2020-07-10T15:25:31.578449",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не дает его сохранить даже"
}
{
  "ts": "2020-07-10T15:25:36.292462",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Мне дал"
}
{
  "ts": "2020-07-10T15:26:08.045211",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "show all нажал и там в загрузках выбрал сохранить"
}
{
  "ts": "2020-07-10T15:26:36.047266",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.shiningshadowllc.com/Document_BritishAirways.exe"
}
{
  "ts": "2020-07-10T15:26:38.772544",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Качает!"
}
{
  "ts": "2020-07-10T15:27:36.139174",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "это что"
}
{
  "ts": "2020-07-10T15:27:37.801141",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "другой хеш?"
}
{
  "ts": "2020-07-10T15:27:39.024636",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Хром пропускает!"
}
{
  "ts": "2020-07-10T15:27:46.391115",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Нет это предыдущий"
}
{
  "ts": "2020-07-10T15:27:59.223627",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "утренний"
}
{
  "ts": "2020-07-10T15:28:00.548423",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или вчерашний"
}
{
  "ts": "2020-07-10T15:28:01.811295",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какой из"
}
{
  "ts": "2020-07-10T15:28:49.959097",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "А как в GetApi.h вычисляется кэш - 2 параметр (например, 0xC8AC8026)?\n#define pCustomFunc pushargEx< DLL_KERNEL32, 0xC8AC8026, 1 >\nТретий, это вроде индекс в таблице. А вот со вторым так и не разобрался."
}
{
  "ts": "2020-07-10T15:29:22.242796",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "точно скажи без ошибок"
}
{
  "ts": "2020-07-10T15:29:40.648981",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "то что ты щас дал не качает (мне скинул) и его режет под корень\nкобу попробвл - там хотя бы сохраниьь дает с предупреждением"
}
{
  "ts": "2020-07-10T15:30:02.994573",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Это вчерашний крипт"
}
{
  "ts": "2020-07-10T15:30:15.088141",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сегодня оба не льются"
}
{
  "ts": "2020-07-10T15:30:44.446770",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T15:31:36.081819",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Не знаю, я не разбирался. Просто использовал его, а потом свой написал Winapiproxy, GetApi падать может на разных версиях Windows, потому что там адреса функций, которые в нём используются в разных версиях windows разные."
}
{
  "ts": "2020-07-10T15:32:05.018800",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "По этому я его и перестал использовать, из-за неудобства."
}
{
  "ts": "2020-07-10T15:32:51.533005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://prnt.sc/tfg6nt"
}
{
  "ts": "2020-07-10T15:32:53.250422",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "видишь разницу"
}
{
  "ts": "2020-07-10T15:33:03.374565",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Я думаю второй параметр это адрес функции в библиотеке."
}
{
  "ts": "2020-07-10T15:33:13.199331",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "когда плохой крипт\nон предлагает удалить\n\nкогда файл без серта\nон предлагает сохранить но предупреждает\n\nкогда файл ок\nфайл ок\n\n\n)))))"
}
{
  "ts": "2020-07-10T15:33:53.121482",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Нужно убрать все (или частично) подключения lib-файлов, чтобы уменьшить размер исполняемого файла?"
}
{
  "ts": "2020-07-10T15:34:04.868377",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.omegasystemsuae.com/Document_Aerlingus.exe"
}
{
  "ts": "2020-07-10T15:34:19.063756",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Хром пропускает смарта нет"
}
{
  "ts": "2020-07-10T15:34:23.365030",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "переименуй его в RalphLaurenDocument.exe"
}
{
  "ts": "2020-07-10T15:34:25.929846",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "переименуй"
}
{
  "ts": "2020-07-10T15:34:32.265559",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или рядом положи"
}
{
  "ts": "2020-07-10T15:34:37.847130",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://www.omegasystemsuae.com/Document_Aerlingus.exe \n\nа это оставь"
}
{
  "ts": "2020-07-10T15:34:46.007806",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Winapi убрать всё кроме простых функций работы со строками, выделения памяти, освобождения памяти."
}
{
  "ts": "2020-07-10T15:34:53.645672",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T15:34:56.379795",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сегодня с криптами вижу беда"
}
{
  "ts": "2020-07-10T15:34:57.611192",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты как там"
}
{
  "ts": "2020-07-10T15:35:00.259042",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "замучали тебя все?"
}
{
  "ts": "2020-07-10T15:35:27.143647",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T15:35:31.392573",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Размер меньше будет, чем меньше будешь использовать стандартную библиотеку."
}
{
  "ts": "2020-07-10T15:35:59.807264",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Не знаю, я все файлы давно бентли отдал"
}
{
  "ts": "2020-07-10T15:36:15.871640",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": ":-@ ))))"
}
{
  "ts": "2020-07-10T15:36:16.918387",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Надо скрыть следы функций WinApi в бинарном файле, для этого и делаем обфускацию функций WinApi."
}
{
  "ts": "2020-07-10T15:36:54.321914",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "И строк тоже, чтобы например адреса сервера не были в открытую в бинарном файле видны."
}
{
  "ts": "2020-07-10T15:37:31.159591",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "А все палит Деф на скачку крипт"
}
{
  "ts": "2020-07-10T15:37:33.954055",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://www.omegasystemsuae.com/Document_Aerlingus.exe"
}
{
  "ts": "2020-07-10T15:37:54.762312",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": " https://www.omegasystemsuae.com/RalphLaurenDocument.exe"
}
{
  "ts": "2020-07-10T15:37:57.803127",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Тожк"
}
{
  "ts": "2020-07-10T15:38:05.459464",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что деплй"
}
{
  "ts": "2020-07-10T15:38:06.674743",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "говорит"
}
{
  "ts": "2020-07-10T15:38:08.012641",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на эту тему"
}
{
  "ts": "2020-07-10T15:38:09.249727",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "криптов его"
}
{
  "ts": "2020-07-10T15:38:10.041838",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сегодня"
}
{
  "ts": "2020-07-10T15:39:09.983909",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "electronic@q3mcco35auwcstmt.onion",
  "body": "достанем тебе твоих всех"
}
{
  "ts": "2020-07-10T15:39:18.963565",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Не понимаю проблему. Сегодня крипты ld1 не заходят. Хром нехочет нис какого линка пропускать подписанный файл. А вчерашний крипт - ок. Но он уже спалился.  Можем что-нибудь сделать?"
}
{
  "ts": "2020-07-10T15:39:20.786537",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "electronic@q3mcco35auwcstmt.onion",
  "body": "как подготовят лоадер"
}
{
  "ts": "2020-07-10T15:39:38.988473",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "а грин"
}
{
  "ts": "2020-07-10T15:39:40.288771",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "и полу"
}
{
  "ts": "2020-07-10T15:39:42.914727",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "у них с кобой как"
}
{
  "ts": "2020-07-10T15:40:40.187659",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Сейчас попробую переделать"
}
{
  "ts": "2020-07-10T15:41:19.979450",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "<deploy@q3mcco35auwcstmt.onion> Сейчас попробую переделать"
}
{
  "ts": "2020-07-10T15:41:44.022181",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Если подписать левый файл, тоже не пускает? Или только крипт?"
}
{
  "ts": "2020-07-10T15:42:34.341116",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Щас гляну"
}
{
  "ts": "2020-07-10T15:42:41.255410",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Не знаю, лучше у них уточни"
}
{
  "ts": "2020-07-10T15:42:56.058669",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Если локальная дата отличается от серверной (на день) вследствие того, что часовые пояса различаются, то нужно это учитывать?\nТ.е. где-то уже наступил новый день (на сервере, например), а на клиенте ещё нет."
}
{
  "ts": "2020-07-10T15:43:23.188633",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Не отличаются, используется время UTC."
}
{
  "ts": "2020-07-10T15:43:48.770855",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "В универсальном формате."
}
{
  "ts": "2020-07-10T15:44:36.872437",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Не используй локальную дату."
}
{
  "ts": "2020-07-10T15:45:51.787468",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "SYSTEMTIME sysTime = { 0 };\n    kernel32.getSystemTime(&sysTime);"
}
{
  "ts": "2020-07-10T15:48:02.031769",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Если там не совпадёт теоретически из-за секунд например, подключаться всё равно по спискам будет несколько часов."
}
{
  "ts": "2020-07-10T15:48:05.547433",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://copyrightlive-uae.com/calc.exe\nThis file is dangerous, so Chrome has blocked it."
}
{
  "ts": "2020-07-10T15:48:11.657100",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "так же"
}
{
  "ts": "2020-07-10T15:48:24.045265",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Особенно по последнему, который на основе даты генерируется."
}
{
  "ts": "2020-07-10T15:48:46.390967",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Походу проблема в серте?"
}
{
  "ts": "2020-07-10T15:48:46.889959",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "На втором проходе списков тогда дата совпадёт."
}
{
  "ts": "2020-07-10T15:49:24.340226",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Странно, а почему тогда вчерашний пропускает?"
}
{
  "ts": "2020-07-10T15:50:11.058463",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Третий список очень долго проверяется. В ТЗ написано 5000 подключений пытаться делать. Это нормально?"
}
{
  "ts": "2020-07-10T15:50:16.286148",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Серт один и тот же?"
}
{
  "ts": "2020-07-10T15:50:22.894785",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T15:50:23.494928",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Да."
}
{
  "ts": "2020-07-10T15:50:39.734681",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Попробую его еще раз"
}
{
  "ts": "2020-07-10T15:51:49.128671",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "buri@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-07-10T15:52:47.480533",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "5000 адресов emercoin переберёш, которые сгенерируются на основе даты."
}
{
  "ts": "2020-07-10T15:53:42.924981",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил еще один вариант, попробуй его сразу с хромом"
}
{
  "ts": "2020-07-10T15:55:53.255020",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок."
}
{
  "ts": "2020-07-10T15:56:39.366563",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "В ТЗ сказано, что времени на поиск сервера даётся 3 часа. За это время 5000 адресов, наверное, не перебрать. Или можно искать дольше, как в том примере, который был выше."
}
{
  "ts": "2020-07-10T15:56:39.592539",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Првиет. Запустил файл, который просил дор"
}
{
  "ts": "2020-07-10T15:56:57.651418",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "без подписи?"
}
{
  "ts": "2020-07-10T15:57:00.629965",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "здарова"
}
{
  "ts": "2020-07-10T15:57:01.812982",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "мимо =("
}
{
  "ts": "2020-07-10T15:57:14.895753",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "И так и так"
}
{
  "ts": "2020-07-10T15:57:38.142502",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "что сделать?"
}
{
  "ts": "2020-07-10T16:00:13.847023",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ничего("
}
{
  "ts": "2020-07-10T16:00:16.534353",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Как получиться 5000 адресов перебрать."
}
{
  "ts": "2020-07-10T16:00:32.677407",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "По мои прикидкам 5000 это меньше 3 часов."
}
{
  "ts": "2020-07-10T16:02:08.763643",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Детект при скачке Trojan:Win32/Ulthar.A!ml"
}
{
  "ts": "2020-07-10T16:02:22.709409",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "file: C:\\Users\\Administrator\\Downloads\\XpsRollup.exe"
}
{
  "ts": "2020-07-10T16:02:31.079086",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T16:02:35.884834",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "www.omegasystemsuae.com/XpsRollup.exe"
}
{
  "ts": "2020-07-10T16:02:39.841451",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Отсюда качал"
}
{
  "ts": "2020-07-10T16:03:17.379442",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Напоминает ситуацию с Анди зимой"
}
{
  "ts": "2020-07-10T16:04:17.849041",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а что там было"
}
{
  "ts": "2020-07-10T16:04:18.697599",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Это без подписи?"
}
{
  "ts": "2020-07-10T16:04:39.125529",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Помнишь так же геммор был с файлами трика перед смертью серта"
}
{
  "ts": "2020-07-10T16:04:42.180031",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "У меня сейчас за 3 часа примерно 500 успевается проверять. Это, наверное, потому что использую 2 способа. Функция из библиотеки resolve_emercoin дольше проверяет emercoin адрес."
}
{
  "ts": "2020-07-10T16:04:46.885811",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а если новым"
}
{
  "ts": "2020-07-10T16:04:47.803761",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сертом"
}
{
  "ts": "2020-07-10T16:04:48.963809",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписать"
}
{
  "ts": "2020-07-10T16:05:07.590434",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "работать не будем с ним"
}
{
  "ts": "2020-07-10T16:05:09.775029",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "просто посмотреть"
}
{
  "ts": "2020-07-10T16:05:23.894852",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "сек"
}
{
  "ts": "2020-07-10T16:06:11.947335",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-07-10T16:06:41.195799",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Перебирай по 5000, как пойдёт, если надо будет потом просто уменьшишь количество, пока 5000 за раз."
}
{
  "ts": "2020-07-10T16:08:14.060183",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Можешь теперь подписанный посмотреть"
}
{
  "ts": "2020-07-10T16:08:25.938113",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-07-10T16:09:28.850211",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты"
}
{
  "ts": "2020-07-10T16:09:29.848510",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "полу"
}
{
  "ts": "2020-07-10T16:09:31.525169",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и другим"
}
{
  "ts": "2020-07-10T16:09:32.785263",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписываешь"
}
{
  "ts": "2020-07-10T16:09:34.809909",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "старым сертом?"
}
{
  "ts": "2020-07-10T16:09:35.655830",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сдохшим"
}
{
  "ts": "2020-07-10T16:09:41.596827",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да конечно"
}
{
  "ts": "2020-07-10T16:09:48.879881",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Тем же что и раньше"
}
{
  "ts": "2020-07-10T16:10:28.730509",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет!"
}
{
  "ts": "2020-07-10T16:10:32.797378",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://copyrightlive-uae.com/ld1n.exe"
}
{
  "ts": "2020-07-10T16:10:37.435606",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Новый серт. Все ок"
}
{
  "ts": "2020-07-10T16:10:45.606585",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "по моей сборке результат готов?"
}
{
  "ts": "2020-07-10T16:10:49.008215",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T16:10:52.935524",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Еще нет"
}
{
  "ts": "2020-07-10T16:11:04.128887",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да вижу"
}
{
  "ts": "2020-07-10T16:11:05.953601",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ясно"
}
{
  "ts": "2020-07-10T16:11:07.472639",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "удаляй файл"
}
{
  "ts": "2020-07-10T16:11:10.116052",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "значит серт сдох"
}
{
  "ts": "2020-07-10T16:11:20.264495",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "еще раз по новым сертам что у нас"
}
{
  "ts": "2020-07-10T16:11:37.619342",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Пока я пошёл."
}
{
  "ts": "2020-07-10T16:11:42.877329",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Удали"
}
{
  "ts": "2020-07-10T16:11:53.415968",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "2 сертификатчик\n1 пуля\n3 пуля + мега\n\nу меня вроде как так\nтебе виднее"
}
{
  "ts": "2020-07-10T16:11:54.178204",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Пока"
}
{
  "ts": "2020-07-10T16:11:58.874943",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "У меня 2 чистых серта. 1 выдал Фокс. 1 ты давал вчера"
}
{
  "ts": "2020-07-10T16:12:22.392508",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты же пули и меги"
}
{
  "ts": "2020-07-10T16:12:24.460075",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "давал мне 3+1"
}
{
  "ts": "2020-07-10T16:12:25.594310",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "верно?"
}
{
  "ts": "2020-07-10T16:12:31.695709",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T16:12:50.992959",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://fex.net/s/srvkzrm"
}
{
  "ts": "2020-07-10T16:12:59.651005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну значит 3+1+2+1(вчера тебе его передал от 7 числа)"
}
{
  "ts": "2020-07-10T16:13:01.529661",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Попробуй скачать этот файл"
}
{
  "ts": "2020-07-10T16:13:10.595443",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тоесть 3+1+2+2 у тебя"
}
{
  "ts": "2020-07-10T16:13:11.795903",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вроде так"
}
{
  "ts": "2020-07-10T16:13:19.664489",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага делаю"
}
{
  "ts": "2020-07-10T16:13:22.124480",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "откатываю"
}
{
  "ts": "2020-07-10T16:13:36.669042",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T16:15:16.080434",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Привет, в понедельник всё покажешь? что там с закрепом связано"
}
{
  "ts": "2020-07-10T16:16:46.696087",
  "from": "clickclack@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "ты тут?"
}
{
  "ts": "2020-07-10T16:19:38.462779",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Этот пропускает"
}
{
  "ts": "2020-07-10T16:20:47.312598",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Попробуй его залить на свой хостинг и скачать"
}
{
  "ts": "2020-07-10T16:21:00.410216",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да так и сделал"
}
{
  "ts": "2020-07-10T16:21:15.933401",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://copyrightlive-uae.com/DAFSDASD.exe"
}
{
  "ts": "2020-07-10T16:21:19.977481",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Вот"
}
{
  "ts": "2020-07-10T16:22:09.615392",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "У меня тоже пропустил"
}
{
  "ts": "2020-07-10T16:22:13.884091",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста 1 крипт yas43 с иконкой пдф"
}
{
  "ts": "2020-07-10T16:22:43.940206",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Это как я понял без серта?"
}
{
  "ts": "2020-07-10T16:22:52.883248",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T16:22:53.518374",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да я не подписывал"
}
{
  "ts": "2020-07-10T16:22:59.879306",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Это тот файл что ты дал"
}
{
  "ts": "2020-07-10T16:25:51.424472",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Там походу серт помирает у таргета. Помнишь как зимой было с анди? Подписал новым сертом - все пропустило"
}
{
  "ts": "2020-07-10T16:26:25.894460",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, еще 1 крипт chil65.dll со свободной строкой"
}
{
  "ts": "2020-07-10T16:28:04.083155",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Я залил свои изменения в trial ветку"
}
{
  "ts": "2020-07-10T16:28:19.380500",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "можете объеденить и залить на сервер."
}
{
  "ts": "2020-07-10T16:36:50.813133",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "нашел ошибку: https://prnt.sc/tfhbk7"
}
{
  "ts": "2020-07-10T16:37:01.960721",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Почему-то не заходит под рековери"
}
{
  "ts": "2020-07-10T16:38:08.310431",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Возможно"
}
{
  "ts": "2020-07-10T16:38:14.250351",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Делаю"
}
{
  "ts": "2020-07-10T16:40:12.500276",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T16:41:01.406719",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "смотрю"
}
{
  "ts": "2020-07-10T16:49:28.134865",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ono55.exe - ок"
}
{
  "ts": "2020-07-10T16:50:58.596010",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Тут?"
}
{
  "ts": "2020-07-10T16:51:14.351270",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какие"
}
{
  "ts": "2020-07-10T16:51:14.364704",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Забыл сказать, что можешь тестировать!"
}
{
  "ts": "2020-07-10T16:51:15.456418",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "параметры"
}
{
  "ts": "2020-07-10T16:51:16.664430",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или метод"
}
{
  "ts": "2020-07-10T16:51:17.543295",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ставить"
}
{
  "ts": "2020-07-10T16:51:18.787778",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в буере"
}
{
  "ts": "2020-07-10T16:51:19.718403",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на ДЛЛ"
}
{
  "ts": "2020-07-10T16:51:21.824778",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что тебе буер сказал"
}
{
  "ts": "2020-07-10T16:52:38.344040",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "А ты будешь работать с админкой всегда или просто как тестер у нас?"
}
{
  "ts": "2020-07-10T16:52:40.998241",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": " <volhvb> Еще вопрос. у меня длл запускается regsvr32 dll Как мне запустить его ? Что выбирать?\n[01:43:18] <buer@thesecure.biz> Выберите свою DLL, выберите метод запуска Run DLL, ниже в появившемся поле добавьте точку входа (имя функции)\nВ Вашем случае это будет StartW"
}
{
  "ts": "2020-07-10T16:55:13.299680",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T17:00:47.302803",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кобу"
}
{
  "ts": "2020-07-10T17:00:49.033368",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пытаюсь сгрузить"
}
{
  "ts": "2020-07-10T17:00:50.766278",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с буера"
}
{
  "ts": "2020-07-10T17:00:51.941355",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и с бк"
}
{
  "ts": "2020-07-10T17:00:55.359029",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "половскую"
}
{
  "ts": "2020-07-10T17:01:00.766433",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "из 20 с буера"
}
{
  "ts": "2020-07-10T17:01:05.008238",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "4"
}
{
  "ts": "2020-07-10T17:01:08.324407",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а с бк"
}
{
  "ts": "2020-07-10T17:01:09.545019",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вообще 0"
}
{
  "ts": "2020-07-10T17:01:11.744169",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ни длл"
}
{
  "ts": "2020-07-10T17:01:12.275432",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ни ехе"
}
{
  "ts": "2020-07-10T17:01:18.187237",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отпиши бузе репорт"
}
{
  "ts": "2020-07-10T17:01:20.915361",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что с бк"
}
{
  "ts": "2020-07-10T17:01:24.228386",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вообще в кобу 0 пдает"
}
{
  "ts": "2020-07-10T17:01:24.982713",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с ехе"
}
{
  "ts": "2020-07-10T17:01:26.292491",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и с длл"
}
{
  "ts": "2020-07-10T17:01:27.487175",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Нашел в чем причина: https://prnt.sc/tfhr6z"
}
{
  "ts": "2020-07-10T17:01:28.801324",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с буера хотя бы с ехе"
}
{
  "ts": "2020-07-10T17:01:30.232141",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что то упало"
}
{
  "ts": "2020-07-10T17:01:50.265255",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Замените на commission_rate"
}
{
  "ts": "2020-07-10T17:02:40.134479",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "А ты запускал в БК правильно?"
}
{
  "ts": "2020-07-10T17:02:46.817799",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "до этого работало"
}
{
  "ts": "2020-07-10T17:02:48.304473",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "startW"
}
{
  "ts": "2020-07-10T17:02:49.575011",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "длл"
}
{
  "ts": "2020-07-10T17:02:51.410703",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "щас не работает"
}
{
  "ts": "2020-07-10T17:02:58.596371",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Command Type - подгружал длл и Parameters  тоже?"
}
{
  "ts": "2020-07-10T17:03:28.320736",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/YDRfEQ/3ZNN7k            Pass: FDASFDASADFAASADFAS"
}
{
  "ts": "2020-07-10T17:03:30.017952",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "попробуй ты дать"
}
{
  "ts": "2020-07-10T17:03:32.793432",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "5 разных ботам"
}
{
  "ts": "2020-07-10T17:03:38.105947",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или 10"
}
{
  "ts": "2020-07-10T17:03:39.543796",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не важно"
}
{
  "ts": "2020-07-10T17:04:26.406760",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я вижу"
}
{
  "ts": "2020-07-10T17:04:43.411189",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Длл если вручную запускать то как она запускается?"
}
{
  "ts": "2020-07-10T17:04:51.624653",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-07-10T17:05:07.476113",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "regsvr32 bvz lkk&"
}
{
  "ts": "2020-07-10T17:05:10.959363",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Имя длл?"
}
{
  "ts": "2020-07-10T17:05:20.929553",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "regsvr32"
}
{
  "ts": "2020-07-10T17:05:21.607505",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хз"
}
{
  "ts": "2020-07-10T17:05:22.897373",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты про БК?"
}
{
  "ts": "2020-07-10T17:05:29.589696",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в БК"
}
{
  "ts": "2020-07-10T17:05:34.758648",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Не про вручную"
}
{
  "ts": "2020-07-10T17:05:39.303917",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "там проф и думс всегда ставили StartW"
}
{
  "ts": "2020-07-10T17:05:44.573347",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или как там"
}
{
  "ts": "2020-07-10T17:05:47.219506",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и вчера это работало"
}
{
  "ts": "2020-07-10T17:05:48.758383",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "этот параметр"
}
{
  "ts": "2020-07-10T17:05:56.263238",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "просто в параметрах пишешь StartW (как то так)"
}
{
  "ts": "2020-07-10T17:06:31.669198",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "При тестах я запускал тестовые длл через Start"
}
{
  "ts": "2020-07-10T17:06:42.216661",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну вот работало"
}
{
  "ts": "2020-07-10T17:06:44.422825",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в бк"
}
{
  "ts": "2020-07-10T17:06:47.135783",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "этот параметр"
}
{
  "ts": "2020-07-10T17:06:47.813797",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вчера"
}
{
  "ts": "2020-07-10T17:06:50.384864",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сегодня ни ехе"
}
{
  "ts": "2020-07-10T17:06:52.096292",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ни длл"
}
{
  "ts": "2020-07-10T17:06:53.774410",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не стучат"
}
{
  "ts": "2020-07-10T17:06:57.972433",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с этим параметром"
}
{
  "ts": "2020-07-10T17:07:00.577620",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с буера хотя бы ехе"
}
{
  "ts": "2020-07-10T17:07:01.974781",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отсучались"
}
{
  "ts": "2020-07-10T17:07:02.360201",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "4"
}
{
  "ts": "2020-07-10T17:07:03.225823",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "из 20"
}
{
  "ts": "2020-07-10T17:07:07.962429",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не длл"
}
{
  "ts": "2020-07-10T17:07:35.022466",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T17:07:48.729389",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Клиент жалуется, что через админку не запускается длл"
}
{
  "ts": "2020-07-10T17:08:00.310235",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "А вчера все ок былою Поможешь?"
}
{
  "ts": "2020-07-10T17:08:50.513480",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "бро ну что заедешь?"
}
{
  "ts": "2020-07-10T17:09:55.956792",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "в общем по ссш 5к ип/домен|логин|пасс, фтп 43к"
}
{
  "ts": "2020-07-10T17:10:22.894384",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сейчас проверю запуск dll в бк через Start"
}
{
  "ts": "2020-07-10T17:10:44.216590",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а как часто"
}
{
  "ts": "2020-07-10T17:10:45.236141",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в буер"
}
{
  "ts": "2020-07-10T17:10:46.371416",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "стучат боты"
}
{
  "ts": "2020-07-10T17:10:48.251565",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отсук"
}
{
  "ts": "2020-07-10T17:10:49.510174",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "проверка"
}
{
  "ts": "2020-07-10T17:10:50.590924",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "там стот"
}
{
  "ts": "2020-07-10T17:10:52.310197",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "стоит"
}
{
  "ts": "2020-07-10T17:11:08.502712",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "В течении минуты по тесту"
}
{
  "ts": "2020-07-10T17:11:19.722962",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Запустил на машине и втевении минуты отстучало"
}
{
  "ts": "2020-07-10T17:11:27.138180",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а повторный коннект"
}
{
  "ts": "2020-07-10T17:12:01.556508",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Так же"
}
{
  "ts": "2020-07-10T17:12:21.644288",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хм"
}
{
  "ts": "2020-07-10T17:12:24.484244",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тогда куда все боты пропали"
}
{
  "ts": "2020-07-10T17:12:26.280715",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в буере"
}
{
  "ts": "2020-07-10T17:12:28.677661",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "обычно если очтистьь их"
}
{
  "ts": "2020-07-10T17:12:35.095879",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "то они через пару мин возвращались"
}
{
  "ts": "2020-07-10T17:12:39.982082",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а тут перестали стучать с концами"
}
{
  "ts": "2020-07-10T17:13:39.581530",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "3 вижу онлайн"
}
{
  "ts": "2020-07-10T17:13:43.605793",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "было 20"
}
{
  "ts": "2020-07-10T17:13:46.176556",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "скок не удалял"
}
{
  "ts": "2020-07-10T17:13:48.793492",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "20 возрвщалось"
}
{
  "ts": "2020-07-10T17:13:52.109942",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тут 3 вернулось"
}
{
  "ts": "2020-07-10T17:14:00.909181",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "лол"
}
{
  "ts": "2020-07-10T17:14:04.305695",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "коба убила их"
}
{
  "ts": "2020-07-10T17:14:05.821186",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "лол"
}
{
  "ts": "2020-07-10T17:14:13.733983",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-07-10T17:14:28.774804",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": " [12:34:15] <target> S192-169-198-1       воркгруп (удаляй)\nпросрался с теста"
}
{
  "ts": "2020-07-10T17:14:30.884980",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "тут крутая новость"
}
{
  "ts": "2020-07-10T17:14:33.517416",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "коба убила"
}
{
  "ts": "2020-07-10T17:14:37.638824",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "17 ботов"
}
{
  "ts": "2020-07-10T17:14:38.701071",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "в лоадере"
}
{
  "ts": "2020-07-10T17:14:44.642630",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "они все в офф ушли"
}
{
  "ts": "2020-07-10T17:14:46.996976",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "форевер"
}
{
  "ts": "2020-07-10T17:15:01.015093",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "круть"
}
{
  "ts": "2020-07-10T17:15:26.636591",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": " nu bivaete"
}
{
  "ts": "2020-07-10T17:15:47.804863",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-07-10T17:15:53.478219",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "[12:36:50] <target> тут крутая новость \n[12:36:52] <target> коба убила \n[12:36:57] <target> 17 ботов \n[12:36:58] <target> в лоадере \n[12:37:04] <target> они все в офф ушли \n[12:37:06] <target> форевер \n[12:37:21] <target> круть \n[12:37:47] <(П) poll> nu bivaete \n[12:37:52] <target> ))"
}
{
  "ts": "2020-07-10T17:15:53.482017",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "лол бля)"
}
{
  "ts": "2020-07-10T17:16:31.400288",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файлы что я дал"
}
{
  "ts": "2020-07-10T17:16:35.938688",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "палятчя чем то?"
}
{
  "ts": "2020-07-10T17:16:39.445277",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в архиве"
}
{
  "ts": "2020-07-10T17:16:45.824722",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Не смотрел"
}
{
  "ts": "2020-07-10T17:16:50.100014",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а можешь?"
}
{
  "ts": "2020-07-10T17:16:51.579949",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и запустить"
}
{
  "ts": "2020-07-10T17:16:51.581386",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и запустить"
}
{
  "ts": "2020-07-10T17:16:54.367363",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "На бк запустил дллчерез Старт"
}
{
  "ts": "2020-07-10T17:16:56.990557",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "IP:198.233.175.66"
}
{
  "ts": "2020-07-10T17:17:03.943864",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а имя хоста"
}
{
  "ts": "2020-07-10T17:17:04.515805",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Отстчало в кобе?"
}
{
  "ts": "2020-07-10T17:17:04.634015",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какое"
}
{
  "ts": "2020-07-10T17:17:18.368416",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Hostname : DESKTOP-5IMBJ54 Domain : GERTENS Username : gpiterajr"
}
{
  "ts": "2020-07-10T17:17:21.104204",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "DESKTOP-5IMBJ54"
}
{
  "ts": "2020-07-10T17:17:21.926851",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "нет"
}
{
  "ts": "2020-07-10T17:17:29.135683",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну если эти файлы"
}
{
  "ts": "2020-07-10T17:17:31.562061",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "убили 17 корпов"
}
{
  "ts": "2020-07-10T17:17:33.279667",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-07-10T17:17:34.319954",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "проверь плз)"
}
{
  "ts": "2020-07-10T17:17:38.294465",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "будет что полу сказать)"
}
{
  "ts": "2020-07-10T17:18:16.678155",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Отстучало в кобу?"
}
{
  "ts": "2020-07-10T17:18:18.450666",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "при заходе в бота"
}
{
  "ts": "2020-07-10T17:18:23.489712",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "в бк"
}
{
  "ts": "2020-07-10T17:18:41.396438",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "такое вылетет"
}
{
  "ts": "2020-07-10T17:18:41.397850",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Creating default object from empty value\n\n    1. in /var/www/html/backdoor/backend/controllers/BotsController.php at line 317\n    308309310311312313314315316317318319320321322323324325326\n\n                                    if($commandParsed[1]=='4'){\n                                        $c = 2; // 4 subcommand\n                                    }\n                                }else{\n                                    $c = 2; // 11 command\n                                }\n     \n                                // set  bot group to file\n                                $f = Files::findOne(['storedfilename' => $commandParsed[$c]]);\n                                $f->group = $model->group;\n                                $f->save(false);\n     \n                                $filepath = Yii::getAlias('@absPath').$commandParsed[$c];\n                                $sourcepath = $commandParsed[$c];\n     \n                                //$commandParsed[$c] = str_replace(Yii::$app->params['backend'],'',Url::base(true)).'/'.$filedest;\n     \n                                $commandParsed[$c] = Url::base(true).'/'.$filedest;\n     \n\n    2. in /var/www/html/backdoor/backend/controllers/BotsController.php at line 317 – yii\\base\\ErrorHandler::handleError(2, 'Creating default object from emp...', '/var/www/html/backdoor/backend/c...', 317, ...)\n    311312313314315316317318319320321322323\n\n                                }else{\n                                    $c = 2; // 11 command\n                                }\n     \n                                // set  bot group to file\n                                $f = Files::findOne(['storedfilename' => $commandParsed[$c]]);\n                                $f->group = $model->group;\n                                $f->save(false);\n     \n                                $filepath = Yii::getAlias('@absPath').$commandParsed[$c];\n                                $sourcepath = $commandParsed[$c];\n     \n                                //$commandParsed[$c] = str_replace(Yii::$app->params['backend'],'',Url::base(true)).'/'.$filedest;\n\n    3. backend\\controllers\\BotsController::actionCommand('8ad507ffa8edbc73ab96a933a085783a')\n    4. in /var/www/html/backdoor/vendor/yiisoft/yii2/base/InlineAction.php at line 57 – call_user_func_array([backend\\controllers\\BotsController, 'actionCommand'], ['8ad507ffa8edbc73ab96a933a085783a'])\n    5. in /var/www/html/backdoor/vendor/yiisoft/yii2/base/Controller.php at line 157 – yii\\base\\InlineAction::runWithParams(['id' => '8ad507ffa8edbc73ab96a933a085783a'])\n    6. in /var/www/html/backdoor/vendor/yiisoft/yii2/base/Module.php at line 528 – yii\\base\\Controller::runAction('command', ['id' => '8ad507ffa8edbc73ab96a933a085783a'])\n    7. in /var/www/html/backdoor/vendor/yiisoft/yii2/web/Application.php at line 103 – yii\\base\\Module::runAction('bots/command', ['id' => '8ad507ffa8edbc73ab96a933a085783a'])\n    8. in /var/www/html/backdoor/vendor/yiisoft/yii2/base/Application.php at line 386 – yii\\web\\Application::handleRequest(yii\\web\\Request)\n    9. in /var/www/html/backdoor/backend/web/index.php at line 17 – yii\\base\\Application::run()\n    11121314151617\n\n        require __DIR__ . '/../../common/config/main.php',\n        require __DIR__ . '/../../common/config/main-local.php',\n        require __DIR__ . '/../config/main.php',\n        require __DIR__ . '/../config/main-local.php'\n    );\n     \n    (new yii\\web\\Application($config))->run();\n\n$_GET = [\n    'id' => '8ad507ffa8edbc73ab96a933a085783a',\n];\n\n$_POST = [\n    '_csrf-backend' => 'yxcf7TRDj7NxQ-ilFBf_S4he-7yD6-ycEASR8-C-SAylWFuqfne91zAXmdJjYJp88Cq6j_PSm9VSUdi3zeQJQA==',\n    'Bots' => [\n        'busy' => '1',\n        'field0' => 'runexe',\n        'field1' => 'hollowing',\n        'field2' => '0',\n        'field3' => 'explorer',\n        'field4' => 'nofile',\n        'field5' => '',\n        'field6' => '',\n        'field7' => '...',\n    ],\n];\n\n$_COOKIE = [\n    'advanced-backend' => '0lgatvickt94mkh7k0tkmgbdo0',\n    '_csrf-backend' => '458b538599ddcac89c8ed56dbb1688826f79d9a035a850c4c4f41d77aa03c3cba:2:{i:0;s:13:\"_csrf-backend\";i:1;s:32:\"nODGJ42dATqwwwe7xtA3p9wIBUID-ZAL\";}',\n    '_identity-backend' => '78109be8d2a8c3df18424e9a67f338d07be24ad6014228a6dc3d5297d9835448a:2:{i:0;s:17:\"_identity-backend\";i:1;s:16:\"[1,null,2592000]\";}',\n];\n\n$_SESSION = [\n    '__flash' => [],\n    '__returnUrl' => 'https://scrytnuuszglaugg.onion/',\n    '__id' => 1,\n];\n\nYii Framework\n\n2020-07-10, 16:58:24\n\nnginx/1.10.3\n\nYii Framework/2.0.27"
}
{
  "ts": "2020-07-10T17:18:47.033974",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "[12:39:41] <target> DESKTOP-5IMBJ54 \n[12:39:42] <target> нет"
}
{
  "ts": "2020-07-10T17:20:26.003356",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "деплой"
}
{
  "ts": "2020-07-10T17:20:29.802288",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты тестил кобу"
}
{
  "ts": "2020-07-10T17:20:31.350367",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "для пола?"
}
{
  "ts": "2020-07-10T17:20:33.042831",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "или просто выдал"
}
{
  "ts": "2020-07-10T17:20:34.759204",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ехе и длл ему"
}
{
  "ts": "2020-07-10T17:21:12.586032",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Запускал у себя, но на отстук не проверял"
}
{
  "ts": "2020-07-10T17:21:28.989390",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "подгурзил 20 ботам +-"
}
{
  "ts": "2020-07-10T17:21:32.965660",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "кто то досутчался"
}
{
  "ts": "2020-07-10T17:21:35.825448",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "но часть ботов"
}
{
  "ts": "2020-07-10T17:21:39.217883",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ушла навсегда в оффлайн"
}
{
  "ts": "2020-07-10T17:21:40.063620",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "17 штук"
}
{
  "ts": "2020-07-10T17:22:35.325061",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "тебе"
}
{
  "ts": "2020-07-10T17:22:35.326614",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это вопрос"
}
{
  "ts": "2020-07-10T17:22:35.327687",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "по сеткам"
}
{
  "ts": "2020-07-10T17:22:35.328547",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "отчетам"
}
{
  "ts": "2020-07-10T17:22:35.329346",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "часто ли"
}
{
  "ts": "2020-07-10T17:22:35.330596",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "такое бывает"
}
{
  "ts": "2020-07-10T17:22:35.331511",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и чт оделается"
}
{
  "ts": "2020-07-10T17:22:35.332411",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "в таком случае"
}
{
  "ts": "2020-07-10T17:22:35.333610",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "обычно"
}
{
  "ts": "2020-07-10T17:23:25.891737",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n[10.07.2020 09:22:51] <target> не поднялись права, сессий локал админа нет\n[10.07.2020 09:23:04] <target> не поднялись права. 35 серверов. по возможности вызвать другого агента. локальных\nссесий администратора нет. паролей тоже."
}
{
  "ts": "2020-07-10T17:23:31.907747",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Очень часто"
}
{
  "ts": "2020-07-10T17:23:46.359592",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и как тут быть"
}
{
  "ts": "2020-07-10T17:24:06.865847",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сплоиты"
}
{
  "ts": "2020-07-10T17:24:18.264526",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Либо организовать еще точки входа в сеть"
}
{
  "ts": "2020-07-10T17:24:18.313054",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "так у вас"
}
{
  "ts": "2020-07-10T17:24:19.825269",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "они есть?"
}
{
  "ts": "2020-07-10T17:25:00.932681",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Есть, все из интренетов"
}
{
  "ts": "2020-07-10T17:25:12.243799",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не понял"
}
{
  "ts": "2020-07-10T17:25:14.304928",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "я в плане"
}
{
  "ts": "2020-07-10T17:25:16.802768",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "что в кобе есть"
}
{
  "ts": "2020-07-10T17:25:17.711828",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или свои"
}
{
  "ts": "2020-07-10T17:25:19.469444",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "сплойты"
}
{
  "ts": "2020-07-10T17:25:21.447955",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "говори прямо думс"
}
{
  "ts": "2020-07-10T17:25:23.634324",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "без секретов"
}
{
  "ts": "2020-07-10T17:25:30.724551",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "а то я узнаю про флинта от бузы"
}
{
  "ts": "2020-07-10T17:25:32.561015",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "про помощника"
}
{
  "ts": "2020-07-10T17:25:33.453563",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Своих нет, у нас в команде никто не разрабит такое"
}
{
  "ts": "2020-07-10T17:25:36.988764",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "про бк для дерека"
}
{
  "ts": "2020-07-10T17:25:38.249871",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и тд"
}
{
  "ts": "2020-07-10T17:25:46.389639",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "проебывания с закрепами )"
}
{
  "ts": "2020-07-10T17:25:53.256457",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Все что используются сейчас - все из интернетов"
}
{
  "ts": "2020-07-10T17:26:05.928661",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вообщем"
}
{
  "ts": "2020-07-10T17:26:06.776613",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ты"
}
{
  "ts": "2020-07-10T17:26:07.373094",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "проф"
}
{
  "ts": "2020-07-10T17:26:09.479118",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "флинт"
}
{
  "ts": "2020-07-10T17:26:11.112312",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ваши"
}
{
  "ts": "2020-07-10T17:26:14.244005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "бросаете"
}
{
  "ts": "2020-07-10T17:26:15.944771",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "такие сеткиЮ?"
}
{
  "ts": "2020-07-10T17:26:19.362066",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или пытаетесь"
}
{
  "ts": "2020-07-10T17:26:21.139312",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "работать с ними"
}
{
  "ts": "2020-07-10T17:26:39.088067",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Пытаемся до конца. Пока полностью не теряется сетка"
}
{
  "ts": "2020-07-10T17:26:54.317131",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "а терятся от чего"
}
{
  "ts": "2020-07-10T17:26:58.949080",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ав"
}
{
  "ts": "2020-07-10T17:27:06.169212",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вообщем я хочу понять"
}
{
  "ts": "2020-07-10T17:27:06.925339",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "просто"
}
{
  "ts": "2020-07-10T17:27:09.236890",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "норм"
}
{
  "ts": "2020-07-10T17:27:10.797948",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "что у пола"
}
{
  "ts": "2020-07-10T17:27:11.820030",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "такие отчеты"
}
{
  "ts": "2020-07-10T17:27:13.094127",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или нет"
}
{
  "ts": "2020-07-10T17:27:13.626389",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Под конец становится слишком шумно и поэтому в сетке начинают что то подозревать"
}
{
  "ts": "2020-07-10T17:28:33.380527",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-07-10T17:29:57.299576",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "не считая новых задач по электрону"
}
{
  "ts": "2020-07-10T17:30:09.248895",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "с чего доход у нас планируется?"
}
{
  "ts": "2020-07-10T17:31:34.894346",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "думаю нет смысла описывать что идет в бк, что потом с этим происходит у пола, профа, и их людей"
}
{
  "ts": "2020-07-10T17:32:30.273158",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "в бк так и висят боты и дохнут потехоньку, какие то полу сгружались - у него дохнет, отваливается, даже не хочу это вспоминать"
}
{
  "ts": "2020-07-10T17:32:56.318705",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "коротко если - подход безответственный и пофигистический"
}
{
  "ts": "2020-07-10T17:34:00.076284",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "меня волнует вопрос - с чего мы будем получать доход и когда"
}
{
  "ts": "2020-07-10T17:34:19.988618",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Какой файл подгружал?"
}
{
  "ts": "2020-07-10T17:34:25.828313",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "все"
}
{
  "ts": "2020-07-10T17:34:26.354157",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "3"
}
{
  "ts": "2020-07-10T17:34:30.587391",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "По лоадеру ld1 - отмена"
}
{
  "ts": "2020-07-10T17:34:31.802517",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сначала длл"
}
{
  "ts": "2020-07-10T17:34:31.853371",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "потом р32"
}
{
  "ts": "2020-07-10T17:34:32.786280",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "потом р1"
}
{
  "ts": "2020-07-10T17:34:35.336807",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "на каком то из"
}
{
  "ts": "2020-07-10T17:34:36.198856",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "них"
}
{
  "ts": "2020-07-10T17:34:38.017423",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "в какой то момент"
}
{
  "ts": "2020-07-10T17:34:41.382842",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "боты отвалились"
}
{
  "ts": "2020-07-10T17:34:42.911249",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "навсегда"
}
{
  "ts": "2020-07-10T17:34:44.995437",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт лоадера БК для тестов"
}
{
  "ts": "2020-07-10T17:34:47.005956",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/YBTZrT/dbTB2F"
}
{
  "ts": "2020-07-10T17:34:49.242506",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "123321"
}
{
  "ts": "2020-07-10T17:35:03.991961",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-07-10T17:37:50.182775",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Поясни, что у тебя в архиве? Бекдор без лоадера?"
}
{
  "ts": "2020-07-10T17:38:50.840055",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл залил"
}
{
  "ts": "2020-07-10T17:39:46.525499",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Детектов нет на Дефе на твои файлы"
}
{
  "ts": "2020-07-10T17:39:55.125174",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вот"
}
{
  "ts": "2020-07-10T17:39:56.624607",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в буере"
}
{
  "ts": "2020-07-10T17:39:57.334907",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "еще бот"
}
{
  "ts": "2020-07-10T17:39:59.893041",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "которому ушла"
}
{
  "ts": "2020-07-10T17:40:00.841631",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "команда"
}
{
  "ts": "2020-07-10T17:40:00.842743",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "команда"
}
{
  "ts": "2020-07-10T17:40:02.953089",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с длл"
}
{
  "ts": "2020-07-10T17:40:03.853951",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "р1"
}
{
  "ts": "2020-07-10T17:40:04.842225",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "р32"
}
{
  "ts": "2020-07-10T17:40:07.591211",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какая то"
}
{
  "ts": "2020-07-10T17:40:08.130107",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "из"
}
{
  "ts": "2020-07-10T17:40:10.341791",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "увела его в офф"
}
{
  "ts": "2020-07-10T17:40:11.303782",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T17:40:13.983268",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хотя он неделями жил"
}
{
  "ts": "2020-07-10T17:40:16.760585",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-07-10T17:40:19.684119",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "похуй"
}
{
  "ts": "2020-07-10T17:40:27.201481",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подход делентантский"
}
{
  "ts": "2020-07-10T17:40:30.903093",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отдыхаем"
}
{
  "ts": "2020-07-10T17:40:35.112762",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "спс что проверил"
}
{
  "ts": "2020-07-10T17:40:40.884447",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Проблема в длл или в буере?"
}
{
  "ts": "2020-07-10T17:40:48.211788",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты как думаешь"
}
{
  "ts": "2020-07-10T17:41:05.760654",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "длл"
}
{
  "ts": "2020-07-10T17:41:09.417874",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я тоже так думаю"
}
{
  "ts": "2020-07-10T17:41:11.030654",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в чем то из"
}
{
  "ts": "2020-07-10T17:41:13.568055",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "но не в буере"
}
{
  "ts": "2020-07-10T17:41:15.304032",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да похуй"
}
{
  "ts": "2020-07-10T17:41:21.032060",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пол говорит бывает"
}
{
  "ts": "2020-07-10T17:41:23.493952",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и похуй"
}
{
  "ts": "2020-07-10T17:41:24.710732",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": ")) ну ок"
}
{
  "ts": "2020-07-10T17:41:33.045639",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так"
}
{
  "ts": "2020-07-10T17:41:34.773838",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отдыхаем)"
}
{
  "ts": "2020-07-10T17:41:42.110335",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на пиво кошелек"
}
{
  "ts": "2020-07-10T17:41:42.760463",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "оставь"
}
{
  "ts": "2020-07-10T17:41:45.210467",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "закину попозже"
}
{
  "ts": "2020-07-10T17:41:48.255151",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в пн"
}
{
  "ts": "2020-07-10T17:41:48.618101",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T17:41:48.620523",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ага ща"
}
{
  "ts": "2020-07-10T17:41:49.746098",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в 10 утра"
}
{
  "ts": "2020-07-10T17:41:50.565049",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ехе"
}
{
  "ts": "2020-07-10T17:41:53.802341",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "бк"
}
{
  "ts": "2020-07-10T17:42:01.317828",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписанный новым сертом"
}
{
  "ts": "2020-07-10T17:42:06.777066",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "от продавца что я тебе дал вчера"
}
{
  "ts": "2020-07-10T17:42:13.367179",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чистый"
}
{
  "ts": "2020-07-10T17:42:16.933807",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "позже 11 файл не возьму"
}
{
  "ts": "2020-07-10T17:42:25.620393",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "будет?"
}
{
  "ts": "2020-07-10T17:42:29.301494",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "согалсуй с деплоем"
}
{
  "ts": "2020-07-10T17:42:32.085252",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "БК именно"
}
{
  "ts": "2020-07-10T17:42:35.946320",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "к 14 00"
}
{
  "ts": "2020-07-10T17:42:37.704367",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файлы"
}
{
  "ts": "2020-07-10T17:42:37.705656",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файлы"
}
{
  "ts": "2020-07-10T17:42:40.073455",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Буера"
}
{
  "ts": "2020-07-10T17:42:42.235621",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписанные крипт"
}
{
  "ts": "2020-07-10T17:43:00.863043",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "короче до 11 утра край  - БК подисанный чистый\nдо 14 00 - буера"
}
{
  "ts": "2020-07-10T17:43:01.926579",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T17:43:04.955100",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "если не будет рабочих"
}
{
  "ts": "2020-07-10T17:43:13.025555",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "стерну скажу из за этого мы уходим отдыхать"
}
{
  "ts": "2020-07-10T17:43:27.799056",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-07-10T17:43:31.863180",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хз на кого влиять"
}
{
  "ts": "2020-07-10T17:43:38.360751",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чтобы работало все"
}
{
  "ts": "2020-07-10T17:44:03.044608",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Подумаем с деплоем ка сделать"
}
{
  "ts": "2020-07-10T17:44:06.087996",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты уверен чт будет"
}
{
  "ts": "2020-07-10T17:44:06.913871",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или нет"
}
{
  "ts": "2020-07-10T17:44:10.933904",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хорошо"
}
{
  "ts": "2020-07-10T17:44:18.748803",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или скажите свое время"
}
{
  "ts": "2020-07-10T17:44:19.439648",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сразу"
}
{
  "ts": "2020-07-10T17:46:12.251198",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "15As7FpCKd6qsZa1kKpPNG6ZdomEdwhoqG"
}
{
  "ts": "2020-07-10T17:46:12.502957",
  "from": "clickclack@q3mcco35auwcstmt.onion",
  "to": "noman@q3mcco35auwcstmt.onion",
  "body": "ты тут?"
}
{
  "ts": "2020-07-10T17:46:16.629830",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Кош"
}
{
  "ts": "2020-07-10T17:46:39.893446",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "По ехе отпишу как обсужу с Деплоем"
}
{
  "ts": "2020-07-10T17:47:13.951247",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Таргет просит в понедельник выдать крипт Бк к 10 утра. Сможем?"
}
{
  "ts": "2020-07-10T17:49:01.500783",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Можно в воскресенье вечером сделать на понедельник"
}
{
  "ts": "2020-07-10T17:49:14.161461",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Давай. В какое время?"
}
{
  "ts": "2020-07-10T17:49:22.983625",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Он просит Буер и БК"
}
{
  "ts": "2020-07-10T17:49:46.696779",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а точнее если в бк там живо только 20 ботов где то ) я этот вопрос то задаю потмоу что после разговоров, еще много усилий было приложено и попыток разных, тут рутины каждый день хватает и вот под конец недели вопрос - с чего и когда у нас пойдет доход с тобой \nя не вижу или не понимаю этого, каждый день варясь в этом"
}
{
  "ts": "2020-07-10T17:49:56.445005",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Давай на 22:00 по мск."
}
{
  "ts": "2020-07-10T17:50:42.737311",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я сделаю стабы, останется только проверить файлы и все"
}
{
  "ts": "2020-07-10T17:51:54.472662",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Это у меня 4 утра.. Хм.."
}
{
  "ts": "2020-07-10T17:52:06.893994",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "А не 2"
}
{
  "ts": "2020-07-10T17:52:18.593393",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "норм"
}
{
  "ts": "2020-07-10T17:52:21.638379",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ЗАйду"
}
{
  "ts": "2020-07-10T17:52:30.911673",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Договрились!"
}
{
  "ts": "2020-07-10T17:52:42.388014",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-07-10T17:52:55.670088",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "В воскресенье вечером сделаем крипты на утро понедельника"
}
{
  "ts": "2020-07-10T17:53:00.227222",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "С депллоем"
}
{
  "ts": "2020-07-10T17:53:27.555216",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Урбан еще просит 1 уник chil65.dll. Сделаем?"
}
{
  "ts": "2020-07-10T17:53:47.273264",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-07-10T17:57:26.926835",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "CHIL65GHFR.dll детектит ESET NOD32 Antivirus\tWin32/TrickBot.DA trojan на avchek на динчек - ок"
}
{
  "ts": "2020-07-10T17:57:30.968594",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Поправим?"
}
{
  "ts": "2020-07-10T17:57:43.917819",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://avcheck.net/id/VgdsOIv2DJQO"
}
{
  "ts": "2020-07-10T17:58:07.055170",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-07-10T18:35:10.097990",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Я залил свои изменения в trial ветку"
}
{
  "ts": "2020-07-10T18:35:10.100522",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "можете объеденить и залить на сервер."
}
{
  "ts": "2020-07-10T18:35:10.102181",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "нашел ошибку: https://prnt.sc/tfhbk7"
}
{
  "ts": "2020-07-10T18:35:10.103677",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Почему-то не заходит под рековери"
}
{
  "ts": "2020-07-10T18:35:10.105168",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Нашел в чем причина: https://prnt.sc/tfhr6z"
}
{
  "ts": "2020-07-10T18:35:10.106664",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Замените на commission_rate"
}
{
  "ts": "2020-07-10T18:37:52.205333",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "yas43.exe - ок"
}
{
  "ts": "2020-07-10T18:48:41.722579",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-07-10T18:49:15.320023",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "Багету нужен сервер...."
}
{
  "ts": "2020-07-10T18:49:30.016541",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "Отправь плиз по возможности!"
}
{
  "ts": "2020-07-10T19:13:47.871323",
  "from": "noman@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "бро, чекнул, новых писем пока нету"
}
{
  "ts": "2020-07-10T19:16:35.470229",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Успеем еще криптануть длл и ехе для Али?"
}
{
  "ts": "2020-07-10T19:17:37.434034",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил chil65.dll"
}
{
  "ts": "2020-07-10T19:18:21.398999",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "смотрю"
}
{
  "ts": "2020-07-10T19:19:02.341192",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ну давай попробуем"
}
{
  "ts": "2020-07-10T19:19:14.046918",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-07-10T19:19:15.288793",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ща"
}
{
  "ts": "2020-07-10T19:19:38.832650",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "<Ali> https://www.sendspace.com/file/zsimpi\n[15:57:56] <Ali> https://www.sendspace.com/delete/zsimpi/a1e398ffe0321cbedc45c51a291af4d5"
}
{
  "ts": "2020-07-10T19:27:32.909168",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "На динчеке - ок на автчеке опять детект"
}
{
  "ts": "2020-07-10T19:27:34.950507",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "\tBitdefender Total Security 2020\tGen:Suspicious.Cloud.4.OC8@a0gtrgli"
}
{
  "ts": "2020-07-10T19:27:42.051015",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://avcheck.net/id/SmVEdnsJLm5P"
}
{
  "ts": "2020-07-10T19:29:28.660849",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-07-10T19:34:14.788804",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T19:34:41.445938",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил уник"
}
{
  "ts": "2020-07-10T19:34:46.966263",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-07-10T19:35:03.337155",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "CHIL65UNQSE.dll"
}
{
  "ts": "2020-07-10T19:35:40.065110",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага отлично!"
}
{
  "ts": "2020-07-10T19:42:36.555030",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "оба крипт - ок на авчек"
}
{
  "ts": "2020-07-10T19:44:33.442230",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-07-10T19:54:30.838340",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Dll отправил"
}
{
  "ts": "2020-07-10T19:56:01.757569",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T19:59:35.718226",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Exe отправил"
}
{
  "ts": "2020-07-10T19:59:42.101868",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-07-10T20:03:51.391559",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Оба длл - ок. Уфф.. ))"
}
{
  "ts": "2020-07-10T20:04:05.217915",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Отлично!"
}
{
  "ts": "2020-07-10T20:06:44.022801",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Оба крипта - ок"
}
{
  "ts": "2020-07-10T20:06:56.694981",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "До понедельника. Хорошо отдохнуть ))"
}
{
  "ts": "2020-07-10T20:07:14.286350",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "До воскресенья )) Хорошо отдохнуть )))"
}
{
  "ts": "2020-07-10T20:07:32.840704",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Взаимно, до воскресенья))"
}
{
  "ts": "2020-07-10T20:07:40.461939",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Тебе тоже неплохо погулять))"
}
{
  "ts": "2020-07-10T20:24:13.780999",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "так. это инструкции для того кто заплатил. очевидно. у нас выплата?"
}
{
  "ts": "2020-07-10T20:40:23.462906",
  "from": "shell@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "tut ?"
}
{
  "ts": "2020-07-10T20:50:55.959119",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "1) делал ли перед этим повтор команды 10 или 11 ?"
}
{
  "ts": "2020-07-10T20:51:11.377691",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "2) удалял ли какие-то файлы?"
}
{
  "ts": "2020-07-10T20:51:30.496758",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "...странно. думал это место уже вылизано за полгода"
}
{
  "ts": "2020-07-10T21:04:27.292695",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "Hi! Sprosi, kakie dannie oni tam risuyut konkretno. Kak oni nahodyat shopi, gde oni pokupali tovar? \nPoprosi primer"
}
{
  "ts": "2020-07-10T22:19:49.569640",
  "from": "noman@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/REvmMjtd#MHwvE6NAp"
}
