{
  "ts": "2020-11-12T05:58:34.368126",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "ответил там"
}
{
  "ts": "2020-11-12T08:16:18.853522",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Привет. Ну что?"
}
{
  "ts": "2020-11-12T08:18:22.379470",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "по криптеру нашел причину (переменная функции была нулём, вместо bcrypt попытка закачки из crypt32)"
}
{
  "ts": "2020-11-12T08:18:51.748836",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Проверил все команды?"
}
{
  "ts": "2020-11-12T08:19:25.295547",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "но потом при выходе из крипты в цикле пишет какието исключения. Правда сейчас туда не доходит может быть прокладки сменились"
}
{
  "ts": "2020-11-12T08:20:37.692366",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "loader\n195.123.243.19 \n 45.148.120.184 \n 195.123.243.20 \n\nbot\n 85.204.116.179 \n66.85.173.10"
}
{
  "ts": "2020-11-12T08:20:55.441157",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Сколько ещё будешь проверять?"
}
{
  "ts": "2020-11-12T08:20:58.495500",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "пошел проверять команды"
}
{
  "ts": "2020-11-12T08:21:06.615297",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "ну за сегодня проверю"
}
{
  "ts": "2020-11-12T08:22:00.883940",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Мне, бинарник загрузчика потом пришли когда проверишь. В боевой версии (Release_nologs)."
}
{
  "ts": "2020-11-12T08:22:16.904945",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-11-12T09:17:10.589428",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T09:17:15.255436",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "если будешь мне слать то есть"
}
{
  "ts": "2020-11-12T09:40:27.525240",
  "from": "casper@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "привет."
}
{
  "ts": "2020-11-12T09:48:23.189773",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Поменяй адреса ботов:\nloader\n195.123.243.19 \n 45.148.120.184 \n 195.123.243.20 \n\nbot\n 34.239.246.132 \n54.196.129.197"
}
{
  "ts": "2020-11-12T09:48:38.826969",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-11-12T09:49:39.958872",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "ghbdtn"
}
{
  "ts": "2020-11-12T09:49:43.968741",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "privet"
}
{
  "ts": "2020-11-12T09:49:48.982883",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "zashel v chat"
}
{
  "ts": "2020-11-12T09:50:02.410193",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "vigu tvou avtorizaciu"
}
{
  "ts": "2020-11-12T09:50:14.412569",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "hto dalshe"
}
{
  "ts": "2020-11-12T09:54:21.871295",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "ghost@q3mcco35auwcstmt.onion",
  "body": "Привет! Ты кто в новом чате?"
}
{
  "ts": "2020-11-12T09:55:52.342406",
  "from": "ghost@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T09:57:33.000170",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "бро привет"
}
{
  "ts": "2020-11-12T10:14:18.748582",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "derek@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-11-12T10:14:26.556623",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "derek@q3mcco35auwcstmt.onion",
  "body": "Доработал программу"
}
{
  "ts": "2020-11-12T10:14:28.888534",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "derek@q3mcco35auwcstmt.onion",
  "body": "fhklj34FYU$3@f"
}
{
  "ts": "2020-11-12T10:14:35.221262",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "derek@q3mcco35auwcstmt.onion",
  "body": "https://dropmefiles.com/y9z12"
}
{
  "ts": "2020-11-12T10:14:54.899634",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет\\"
}
{
  "ts": "2020-11-12T10:34:11.357602",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-11-12T10:34:11.528332",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "Доработал программу"
}
{
  "ts": "2020-11-12T10:34:11.529339",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "fhklj34FYU$3@f"
}
{
  "ts": "2020-11-12T10:34:11.538959",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "https://dropmefiles.com/y9z12"
}
{
  "ts": "2020-11-12T10:37:35.273087",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "зашел"
}
{
  "ts": "2020-11-12T10:48:20.948710",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T10:48:21.125650",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "если будешь мне слать то есть"
}
{
  "ts": "2020-11-12T11:01:03.167044",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "скоро дашь?"
}
{
  "ts": "2020-11-12T11:06:11.520905",
  "from": "axel@q3mcco35auwcstmt.onion",
  "to": "fox@q3mcco35auwcstmt.onion",
  "body": "Установил"
}
{
  "ts": "2020-11-12T11:29:47.670427",
  "from": "toris@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "День добрый. Мой Jabber: woldisaev@jabber.ru"
}
{
  "ts": "2020-11-12T11:59:23.981459",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "\n[03:51:58] <pol> https://privnote.com/7cBKfJ63#sEQahtEKq\nhttps://qaz.im/zaq/8HsktsA3#2YY92Tzb \n[03:52:05] <pol> заходи в тор браузере"
}
{
  "ts": "2020-11-12T11:59:37.694837",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "skinesh mne popozge"
}
{
  "ts": "2020-11-12T11:59:49.724055",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "a to ya s udalenki"
}
{
  "ts": "2020-11-12T12:05:49.509655",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "globus@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-11-12T12:17:28.848762",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "бро скинешь доступ?"
}
{
  "ts": "2020-11-12T12:40:39.501822",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "max@q3mcco35auwcstmt.onion",
  "body": "Добрый день"
}
{
  "ts": "2020-11-12T12:57:36.530270",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T12:58:06.136324",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "что-то нет коннекта с группой prtest  по ботам"
}
{
  "ts": "2020-11-12T12:58:23.622910",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "ошибка 12029 cannot connect"
}
{
  "ts": "2020-11-12T12:58:42.977812",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "может что сменилось (порт, например)?"
}
{
  "ts": "2020-11-12T12:59:47.932607",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "а по лоадерам нет верификации подписи, как ни крутил софт, который на старой админке работал как часы (без подписи дальше всё работает)"
}
{
  "ts": "2020-11-12T13:00:52.296131",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "по ботам вот здесь нет коннекта \tBOOL bSend = HttpSendRequestA(hRequest, cookies, icookieslen, NULL, 0);"
}
{
  "ts": "2020-11-12T13:02:10.534112",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Cookie: group = prtest"
}
{
  "ts": "2020-11-12T13:02:41.404397",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "А вчера был? Подпись вчера проверялась?"
}
{
  "ts": "2020-11-12T13:03:12.148536",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "вчера я до этого места не доходил"
}
{
  "ts": "2020-11-12T13:04:17.527889",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "но код весь на месте, который рабочий был. Просто вместо Импортных функций поставил адреса на на WinApi"
}
{
  "ts": "2020-11-12T13:05:01.858910",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "hfymit ujdjhbkb xnj ytn dthbabrfwbb b ldbufqcz lfdkmit? xnj z b cltkfk ctqxfc"
}
{
  "ts": "2020-11-12T13:05:38.847535",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "с верификацией ещё ладно, раньше говорили нет и двигайся дальше"
}
{
  "ts": "2020-11-12T13:05:43.945514",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "А позавчера?"
}
{
  "ts": "2020-11-12T13:05:53.357394",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "а вот с ботом - проблема"
}
{
  "ts": "2020-11-12T13:06:39.865314",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "я давно изменил имена функции на ссылки на эти функции и копался с отладкой, запусков не было"
}
{
  "ts": "2020-11-12T13:07:30.095891",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "сейчас попробую поискать версию до перехода на ссылки, подставлю айпишки и попробую"
}
{
  "ts": "2020-11-12T13:07:43.153025",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "но с боттами то что?"
}
{
  "ts": "2020-11-12T13:08:26.638837",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Проверь подпись."
}
{
  "ts": "2020-11-12T13:09:59.886340",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "там на проверке и вылетает вот тут     NTSTATUS status = bcryptBCryptVerifySignature(m_key, NULL, hash, hashSize, sign, signSize, 0);"
}
{
  "ts": "2020-11-12T13:10:24.830785",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "до этого момента всё отследил как передаётся"
}
{
  "ts": "2020-11-12T13:10:59.542708",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "статус STATUS_INVALID_SIGNATURE"
}
{
  "ts": "2020-11-12T13:11:12.206275",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "чтото с подписью"
}
{
  "ts": "2020-11-12T13:11:57.302951",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Ключ наверное сменился. Значит проверку подписи отключи пока."
}
{
  "ts": "2020-11-12T13:12:05.730113",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Всё остальное проверь."
}
{
  "ts": "2020-11-12T13:12:13.898816",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "то же думаю"
}
{
  "ts": "2020-11-12T13:12:32.556300",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "но остальное это холовинг на бота. а бот не отрабатывает"
}
{
  "ts": "2020-11-12T13:12:41.756951",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "может тоже чтото сменилось?"
}
{
  "ts": "2020-11-12T13:13:31.687313",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "короче, я теперь отлаживаю бота. Лоадер кроме подписи вроде работает"
}
{
  "ts": "2020-11-12T13:13:33.679133",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "У бота тоже отклбчи проверку подписи."
}
{
  "ts": "2020-11-12T13:14:58.840876",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-11-12T13:39:34.363043",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "ghbdtn"
}
{
  "ts": "2020-11-12T13:39:37.097852",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T13:39:38.676822",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-11-12T13:40:09.848342",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "а где пол?"
}
{
  "ts": "2020-11-12T13:47:19.139504",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "ку"
}
{
  "ts": "2020-11-12T13:47:28.912822",
  "from": "pin@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "ты не раскриптиовал файл?"
}
{
  "ts": "2020-11-12T13:48:07.507253",
  "from": "boby@q3mcco35auwcstmt.onion",
  "to": "pin@q3mcco35auwcstmt.onion",
  "body": "da bro"
}
{
  "ts": "2020-11-12T13:48:07.658304",
  "from": "boby@q3mcco35auwcstmt.onion",
  "to": "pin@q3mcco35auwcstmt.onion",
  "body": "otr vkluchi"
}
{
  "ts": "2020-11-12T13:51:59.321292",
  "from": "paranoik@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "продублирую еще раз\n\n\nhttps://mega.nz/file/d3hFhIZR#Bo0NEeLNpHEKAjpHLC2IPKpumw0MjqyU9ybhFEumPbE"
}
{
  "ts": "2020-11-12T13:55:25.277012",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T15:37:30.745041",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/zz8ah9/NRSRBK\nDelete: https://qaz.im/index.php?a=delete&q=1047821441"
}
{
  "ts": "2020-11-12T15:37:35.248042",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T15:37:46.080007",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Комплект 111 64 бит"
}
{
  "ts": "2020-11-12T15:40:06.407603",
  "from": "taker@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "привет!"
}
{
  "ts": "2020-11-12T15:47:44.567057",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T15:47:53.535753",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "залил новые файлы на ссылки\n\nкриптани плиз"
}
{
  "ts": "2020-11-12T15:48:14.922681",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-11-12T15:48:17.220193",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-11-12T16:11:00.159130",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет\\"
}
{
  "ts": "2020-11-12T16:11:00.305196",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "бро скинешь доступ?"
}
{
  "ts": "2020-11-12T16:14:51.311382",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ку"
}
{
  "ts": "2020-11-12T16:15:19.954647",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "Привет бро)"
}
{
  "ts": "2020-11-12T16:15:27.786934",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "Как дела?"
}
{
  "ts": "2020-11-12T16:15:45.590446",
  "from": "troy@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "hi bro"
}
{
  "ts": "2020-11-12T16:16:08.274437",
  "from": "troy@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "norma"
}
{
  "ts": "2020-11-12T16:16:10.174490",
  "from": "troy@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ti kak?"
}
{
  "ts": "2020-11-12T16:17:23.602159",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "на месте?"
}
{
  "ts": "2020-11-12T16:20:34.914688",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "скинул"
}
{
  "ts": "2020-11-12T16:21:02.357325",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-11-12T16:21:02.544276",
  "from": "reshaev@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "принял"
}
{
  "ts": "2020-11-12T16:21:06.165428",
  "from": "casper@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "для меня есть какая нибудь информация?"
}
{
  "ts": "2020-11-12T16:22:07.751147",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я по поводу доступа, вроде как сказал  позавчера что скинешь, я сижу жду тебя второй день у компа"
}
{
  "ts": "2020-11-12T16:40:59.440934",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "кинь доступ в админку и супер браузер"
}
{
  "ts": "2020-11-12T16:41:03.336835",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "или как там работает)))"
}
{
  "ts": "2020-11-12T16:42:56.481288",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "м?"
}
{
  "ts": "2020-11-12T16:53:09.015471",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/DQAiz6/teGsQE\nDelete: https://qaz.im/index.php?a=delete&q=1307980351"
}
{
  "ts": "2020-11-12T16:53:16.038538",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T16:53:35.476181",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Комплект 222 64-х бит"
}
{
  "ts": "2020-11-12T17:02:03.894429",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я сижу без работы и без денег , можешь сделать доступ , после НГ я поеду в мск и буду уже заниматься сетями"
}
{
  "ts": "2020-11-12T17:18:36.580909",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "gus@q3mcco35auwcstmt.onion",
  "body": "тук-тук"
}
{
  "ts": "2020-11-12T17:46:51.092742",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "cltkfq"
}
{
  "ts": "2020-11-12T17:47:29.024507",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/B7tQEb/iGT7FD\nDelete: https://qaz.im/index.php?a=delete&q=2094993416"
}
{
  "ts": "2020-11-12T17:47:35.182451",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T17:58:29.315336",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T18:00:00.695955",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-11-12T18:00:31.771934",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "что делать, если в getapi.h нет некоторых функций?"
}
{
  "ts": "2020-11-12T18:02:34.724080",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "добавь макросы соответствующие, хеш-функция есть можно посчитать"
}
{
  "ts": "2020-11-12T18:02:56.857827",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "или загружать динамически их"
}
{
  "ts": "2020-11-12T18:03:56.694574",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "Системные вызовы либо обфусцируются GetApi.h, \nлибо, если в GetApi нужный вызов отсутствует или не работает (бывает),\nследующим способом:\n\nHANDLE h = pLoadLibrary(_STR(\"dll_name.dll\"));\nvoid* f = pGetProcAddress(h, _STR(\"func_name\"));"
}
{
  "ts": "2020-11-12T18:04:25.409601",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "[19.09.2020 20:13:42] <kaktus> второй способ - более правильный - добавить соответствующий макрос pushargEx для нужной функции\n[19.09.2020 20:14:46] <kaktus> то есть надо сгенерировать хеш для нужных функций и вписать его вторым аргументом\n[19.09.2020 20:15:10] <kaktus> функция вычисления хеш в GetApi.cpp есть\n[19.09.2020 20:15:40] <kaktus> в идеале - отдельным скриптом перестроить весь массив макросов"
}
{
  "ts": "2020-11-12T18:04:32.803980",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "понял"
}
{
  "ts": "2020-11-12T18:08:29.318890",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "hvNv5ns&snCksgBs"
}
{
  "ts": "2020-11-12T18:08:30.206510",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/ZzaYDE/hD4NHH\nDelete: https://qaz.im/index.php?a=delete&q=1524149832"
}
{
  "ts": "2020-11-12T18:09:46.938956",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "мой сырой вариант такого скрипта"
}
{
  "ts": "2020-11-12T18:10:08.355325",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": " [19.09.2020 20:27:03] <kaktus> входной GetApi.h\n[19.09.2020 20:27:30] <kaktus> возможно из него надо что-то вырезать чтобы корректно сработало, точно не помню\n[19.09.2020 20:28:08] <kaktus> ну и этот скрипт был под какойто один вариант ГетАпи задочен, а они разные есть\n[19.09.2020 20:28:28] <kaktus> не факт что сходу к твоей подойдет\n[19.09.2020 20:29:12] <kaktus> смысл там такой: считываются строки, ищутся вида #define p****\n[19.09.2020 20:29:52] <kaktus> из каждой выделяем имя функции, пускаем на хеш-функцию из GetApi.cpp и результат дописываем в макрос\n[19.09.2020 20:30:50] <kaktus> третий параметр -это сквозной счетчик-нумератор, он используется в общей таблице хешей"
}
{
  "ts": "2020-11-12T18:12:18.751869",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "тебе учетку в новом чате не выдали еще?"
}
{
  "ts": "2020-11-12T18:12:24.951150",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "нет"
}
{
  "ts": "2020-11-12T18:13:34.003442",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "стукни поландерсу еще раз, он сам может долго не вспомнить"
}
{
  "ts": "2020-11-12T18:14:02.322392",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "надо в новый переходить, рас здесь глючит все. Без шифрования тут вообще переписку вести не рекомендуют"
}
{
  "ts": "2020-11-12T18:15:12.005312",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "он не принял заявку"
}
{
  "ts": "2020-11-12T18:15:37.197810",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "polanders@exploit.im"
}
{
  "ts": "2020-11-12T18:20:10.199119",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "написал ему, ждем"
}
{
  "ts": "2020-11-12T18:39:36.290823",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/zaq/SKhsFb7N#RTQ9kkbY"
}
{
  "ts": "2020-11-12T18:42:41.298175",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "2 стаба на ночь плиз"
}
{
  "ts": "2020-11-12T18:43:13.701283",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-11-12T18:51:03.964359",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "а что это?"
}
{
  "ts": "2020-11-12T18:51:18.070202",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "новый чат"
}
{
  "ts": "2020-11-12T18:51:32.518616",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "через браузер и тор"
}
{
  "ts": "2020-11-12T18:52:01.260710",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "пароль одноразовый при входе придумывай новый"
}
{
  "ts": "2020-11-12T18:53:25.398327",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Тут?"
}
{
  "ts": "2020-11-12T18:57:24.231064",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Тут?"
}
{
  "ts": "2020-11-12T18:58:03.802194",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/yydTtz/tiZBBa\nDelete: https://qaz.im/index.php?a=delete&q=1927761926"
}
{
  "ts": "2020-11-12T18:58:08.307246",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T19:07:03.701081",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "мне тебя там добавить надо?"
}
{
  "ts": "2020-11-12T19:09:38.793524",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "написал тебе там, появилось?"
}
{
  "ts": "2020-11-12T19:24:12.219683",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-11-12T19:24:22.202656",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-11-12T19:24:40.253901",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "мне ВПН, без них блочат"
}
{
  "ts": "2020-11-12T19:25:12.095676",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "а какой впн надо?марс или другой?"
}
{
  "ts": "2020-11-12T19:25:25.354622",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "я в них не разбираюсь"
}
{
  "ts": "2020-11-12T19:25:40.712755",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "сам нашел какой-то но он японский и тоже могут заблочить"
}
{
  "ts": "2020-11-12T19:25:47.559956",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "какой нибудь американский"
}
{
  "ts": "2020-11-12T19:25:48.613717",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "тогда наверное, марс достаточно"
}
{
  "ts": "2020-11-12T19:25:53.441915",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "давай"
}
{
  "ts": "2020-11-12T19:28:07.240617",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "у тебя какая ОС, линух или венда?"
}
{
  "ts": "2020-11-12T19:28:57.651659",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "венда"
}
{
  "ts": "2020-11-12T19:30:13.247281",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/yS5n8b/Y6K2aN\nKey: !e3RXUjqXhr1"
}
{
  "ts": "2020-11-12T19:30:20.472305",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-11-12T19:31:33.476634",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "ещё раз перепошли пожалуйста, чтото заглючило"
}
{
  "ts": "2020-11-12T19:31:43.254991",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "The file you are looking for doesn't exist anymore, or the link is wrong, please try again."
}
{
  "ts": "2020-11-12T19:33:21.016528",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/YRN6A5/KdkHbd\nKey: hIX11j=uBWdz"
}
{
  "ts": "2020-11-12T19:33:53.973719",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-11-12T19:44:44.898897",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/274FB5/Z597e8\nDelete: https://qaz.im/index.php?a=delete&q=2048832154"
}
{
  "ts": "2020-11-12T19:44:52.272011",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T19:52:30.741601",
  "from": "gus@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "Привет. Пытался выйти на связь, вываливало тонны ошибок типа \"service unavailable\"."
}
{
  "ts": "2020-11-12T19:55:20.205882",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/274FB5/Z597e8\nDelete: https://qaz.im/index.php?a=delete&q=2048832154"
}
{
  "ts": "2020-11-12T19:55:20.357686",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T23:03:00.405007",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "https://dropmefiles.com/Dm7yS"
}
{
  "ts": "2020-11-12T23:03:00.553214",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Пас 123"
}
{
  "ts": "2020-11-12T23:30:17.917440",
  "from": "nevada@q3mcco35auwcstmt.onion",
  "to": "grant@q3mcco35auwcstmt.onion",
  "body": "https://uploadinfo.checkissue.tech/test/index.php?+pkey=xvs&out=WALLET  \nпасс:xvs"
}
{
  "ts": "2020-11-12T23:30:25.870883",
  "from": "nevada@q3mcco35auwcstmt.onion",
  "to": "grant@q3mcco35auwcstmt.onion",
  "body": "admin panel"
}
