{
  "ts": "2020-09-07T04:25:33.463998",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "baly@q3mcco35auwcstmt.onion",
  "body": "ок не получилось на выходных. постараюсь сеголня отправить"
}
{
  "ts": "2020-09-07T04:33:34.914049",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "ldr.ver009.exe детектит Trojan:Win32/Wacatac.B!ml после старта \n[00:45:35] <bentley> file: C:\\Users\\Administrator\\AppData\\Local\\Temp\\g7z80E3.exe\n\n[00:46:40] <deploy@q3mcco35auwcstmt.onion> Он подгружает что то?\n[00:47:49] <bentley> Да он подгружает бекдор\n[00:48:32] <bentley> На него детект, да?\n[00:49:17] <deploy@q3mcco35auwcstmt.onion> Возможно, нужно узнать куда он подгружает бекдор"
}
{
  "ts": "2020-09-07T05:36:54.351614",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nлоадеры\n82.146.37.128\n85.143.221.85\n195.123.241.194\n37.220.6.126\n164.132.76.76\n195.123.241.175\n\n\nбот\n93.189.46.41 \n212.22.70.4\n194.156.98.46\n81.177.139.38\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-07T05:37:06.794440",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nлоадеры\n82.146.37.128\n85.143.221.85\n195.123.241.194\n37.220.6.126\n164.132.76.76\n195.123.241.175\n\n\nбот\n93.189.46.41 \n212.22.70.4\n194.156.98.46\n81.177.139.38\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-07T05:40:10.160812",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T05:40:10.163081",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я первую часть, которую обозначал сделал"
}
{
  "ts": "2020-09-07T05:40:10.164550",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "скидываю исходники"
}
{
  "ts": "2020-09-07T05:40:10.167906",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": " SIMS(text/x-c++src, 4349B, требует совместимого клиента)"
}
{
  "ts": "2020-09-07T05:40:10.169801",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я так понял нужно быть онлайн, чтобы переслать"
}
{
  "ts": "2020-09-07T05:57:29.527938",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T05:57:34.748295",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "решилось что то с криптом,"
}
{
  "ts": "2020-09-07T05:59:19.158370",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет! Пока не знаю, поздно вечером в пятницу Бентли еще тестил. Жду его. Что скажет. Я некриптованный с утра проверил - работает."
}
{
  "ts": "2020-09-07T06:00:19.438855",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "если сегодня все успешно с криптами, то согласуем объекты на вторник\nи 3 дня должно все как часы работать со вторника"
}
{
  "ts": "2020-09-07T06:13:55.408312",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "urbanone@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nhttp://opsptih3ol477doi.onion/phpmyadmin/"
}
{
  "ts": "2020-09-07T06:15:20.365999",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T06:15:21.370550",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/kSBiQi/Z7F49N\nDelete: https://qaz.im/index.php?a=delete&q=2136504745"
}
{
  "ts": "2020-09-07T06:15:29.263551",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "перезалей кобу\nдля установщика\nон поставить не может"
}
{
  "ts": "2020-09-07T06:15:36.191482",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "[09:17:13] <target> привет \n[09:17:14] <target> Download: https://qaz.im/load/kSBiQi/Z7F49N\nDelete: https://qaz.im/index.php?a=delete&q=2136504745 \n[09:17:22] <target> перезалей кобу\nдля установщика\nон поставить не может"
}
{
  "ts": "2020-09-07T06:17:52.081023",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T06:17:52.085233",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/kSBiQi/Z7F49N\nDelete: https://qaz.im/index.php?a=delete&q=2136504745"
}
{
  "ts": "2020-09-07T06:17:52.086248",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "перезалей кобу\nдля установщика\nон поставить не может"
}
{
  "ts": "2020-09-07T06:24:25.261005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "дууумс"
}
{
  "ts": "2020-09-07T06:26:54.241965",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T06:27:38.455809",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T06:27:49.950452",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сделаю"
}
{
  "ts": "2020-09-07T06:27:52.251624",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Что за линк?"
}
{
  "ts": "2020-09-07T06:28:00.634363",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "линк?"
}
{
  "ts": "2020-09-07T06:28:01.906128",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "что за линк"
}
{
  "ts": "2020-09-07T06:28:05.099793",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "установщик сделал все"
}
{
  "ts": "2020-09-07T06:28:08.529463",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ему теперь коба нужна вроде"
}
{
  "ts": "2020-09-07T06:28:10.591659",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "чтобы протестировать все"
}
{
  "ts": "2020-09-07T06:28:22.031203",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "он ждет - как будет время сделай плз"
}
{
  "ts": "2020-09-07T06:28:38.808895",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Так, а как он поставил? Если там нужна сама коба..."
}
{
  "ts": "2020-09-07T06:28:48.169601",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "значит он настроил на сервере что то"
}
{
  "ts": "2020-09-07T06:28:52.137792",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или купил сервер и домены"
}
{
  "ts": "2020-09-07T06:29:22.595886",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вообщем выше на чем он застрял"
}
{
  "ts": "2020-09-07T06:29:32.162631",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ты меня спрашиавшеь будто я в этом понимаю что то"
}
{
  "ts": "2020-09-07T06:29:42.702586",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "человек из оффлайна адекватный"
}
{
  "ts": "2020-09-07T06:29:48.916878",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет как наши дела"
}
{
  "ts": "2020-09-07T06:29:58.217148",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n» [02:15:16] <target> привет \n» [02:15:17] <target> Download: https://qaz.im/load/kSBiQi/Z7F49N\n» Delete: https://qaz.im/index.php?a=delete&q=2136504745 \n» [02:15:25] <target> перезалей кобу\n» для установщика\n» он поставить не может"
}
{
  "ts": "2020-09-07T06:30:09.139318",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Что тут было?"
}
{
  "ts": "2020-09-07T06:30:09.805212",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ты мучаешь меня,"
}
{
  "ts": "2020-09-07T06:30:12.850802",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-07T06:30:17.731246",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это скриншот чего то там"
}
{
  "ts": "2020-09-07T06:30:20.596235",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "от установщика кобы"
}
{
  "ts": "2020-09-07T06:30:25.075859",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "которй говорит что не ставятся скрипты"
}
{
  "ts": "2020-09-07T06:30:26.882339",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "потмоу что то битое"
}
{
  "ts": "2020-09-07T06:30:53.702388",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или то что там 0"
}
{
  "ts": "2020-09-07T06:30:55.306471",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это ок?"
}
{
  "ts": "2020-09-07T06:30:57.459516",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "на скриншоте"
}
{
  "ts": "2020-09-07T06:31:01.304548",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "если ок то так и передам ему"
}
{
  "ts": "2020-09-07T06:31:18.312529",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[09:29:57] <mango> ку \n<mango> бро надо соксы оплатить ребятам \n\n\n[09:29:00] <Support> 3CF84ihHghMTW2BRAB7taQ7HMEXAuNmWBJ \n[09:29:05] <Support> Добавил +1 мес\n[09:29:20] <bomba777> ок, ща к вечеру ближе босс появится оплатим тогда \n[09:29:22] <bomba777> 500 да?\n[09:29:27] <Support> Да\n[09:29:31] <bomba777> ок\n[09:29:31] <Support> Ок, хорошо"
}
{
  "ts": "2020-09-07T06:31:36.157619",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ворке просят скинуть те акки которые невалидные"
}
{
  "ts": "2020-09-07T06:31:55.254015",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Линк закончился"
}
{
  "ts": "2020-09-07T06:33:24.417647",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/6BsQBy/4SSA3Z\nDelete: https://qaz.im/index.php?a=delete&q=1375779699"
}
{
  "ts": "2020-09-07T06:34:24.295380",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Дай его контект"
}
{
  "ts": "2020-09-07T06:34:26.728648",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Контакт"
}
{
  "ts": "2020-09-07T06:34:30.058777",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Он в слэке?"
}
{
  "ts": "2020-09-07T06:35:04.522210",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nлоадеры\n82.146.37.128\n85.143.221.85\n195.123.241.194\n37.220.6.126\n164.132.76.76\n195.123.241.175\n\n\nбот\n93.189.46.41 \n212.22.70.4\n194.156.98.46\n81.177.139.38\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-07T06:35:06.311715",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "нет"
}
{
  "ts": "2020-09-07T06:35:09.411915",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "щас приглашу"
}
{
  "ts": "2020-09-07T06:35:22.323487",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "дай ссылку на слэк"
}
{
  "ts": "2020-09-07T06:35:23.821709",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "напомни"
}
{
  "ts": "2020-09-07T06:35:25.162611",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "нет под рукой"
}
{
  "ts": "2020-09-07T06:35:31.464936",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "у меня на ипад вкладка закрыта"
}
{
  "ts": "2020-09-07T06:35:36.535054",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://app.slack.com/client/T0191TN4DPG/G019EUGQCJY"
}
{
  "ts": "2020-09-07T06:35:38.494837",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Привет.++"
}
{
  "ts": "2020-09-07T06:35:40.235969",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://app.slack.com/client/T01AJTH2C0Y/D01A06T6NKF"
}
{
  "ts": "2020-09-07T06:35:45.522497",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Первый тестирование"
}
{
  "ts": "2020-09-07T06:35:48.201328",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Второй - офис"
}
{
  "ts": "2020-09-07T06:40:55.089381",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "дай инвайт на тестирование и куда ему отписать\nу меня тут нет доступа"
}
{
  "ts": "2020-09-07T06:41:37.233683",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Какого типа?"
}
{
  "ts": "2020-09-07T06:41:44.087540",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Members"
}
{
  "ts": "2020-09-07T06:41:49.939876",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Multi channel guests"
}
{
  "ts": "2020-09-07T06:41:54.361691",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Signle channel guests"
}
{
  "ts": "2020-09-07T06:41:56.360247",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "гость на один канал"
}
{
  "ts": "2020-09-07T06:42:01.136805",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "чтобы только этот вопрос решить"
}
{
  "ts": "2020-09-07T06:42:12.208793",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "если толк будет пусть тусуется в твой тим )"
}
{
  "ts": "2020-09-07T06:43:03.376244",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "А в какой канал его?"
}
{
  "ts": "2020-09-07T06:43:06.490938",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "И надо его мыльник"
}
{
  "ts": "2020-09-07T06:43:20.647192",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Pentatesteradmin?"
}
{
  "ts": "2020-09-07T06:43:30.097713",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "лучше новый создай канал"
}
{
  "ts": "2020-09-07T06:43:31.534013",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "щас дам мейл его"
}
{
  "ts": "2020-09-07T06:43:36.553135",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "щас скинет на тел"
}
{
  "ts": "2020-09-07T06:44:33.473859",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Доброе утро ))"
}
{
  "ts": "2020-09-07T06:44:36.137790",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "vho2017@ya.ru"
}
{
  "ts": "2020-09-07T06:45:09.059048",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Something went wrong🐢\n\nIf the problem persists, please drop us a line."
}
{
  "ts": "2020-09-07T06:46:34.423201",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://join.slack.com/share/zt-gzyw3tmf-YtRuG12YSfPWRAS8whWm3Q"
}
{
  "ts": "2020-09-07T06:46:44.010958",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Давай так"
}
{
  "ts": "2020-09-07T06:50:45.210415",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет.\nПроверил скрипт на обновлённой 10ке. Работает.\nЗагрузил на botleggers"
}
{
  "ts": "2020-09-07T06:51:02.699875",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "vse ok"
}
{
  "ts": "2020-09-07T07:05:43.307255",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-09-07T07:05:48.935862",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сегодня выдадим трик?"
}
{
  "ts": "2020-09-07T07:08:15.832975",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nлоадеры\n82.146.37.128\n85.143.221.85\n195.123.241.194\n37.220.6.126\n164.132.76.76\n195.123.241.175\n\n\nбот\n93.189.46.41 \n212.22.70.4\n194.156.98.46\n81.177.139.38\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-07T07:08:15.834471",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет.\nПроверил скрипт на обновлённой 10ке. Работает.\nЗагрузил на botleggers"
}
{
  "ts": "2020-09-07T07:10:58.440240",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "лоадеры\n82.146.37.128\n85.143.221.85\n195.123.241.194\n37.220.6.126\n164.132.76.76\n195.123.241.175\n\n\nбот\n93.189.46.41 \n212.22.70.4\n194.156.98.46\n81.177.139.38\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-07T07:12:32.955255",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T07:12:38.317803",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "держи в курсе сегодня что и как"
}
{
  "ts": "2020-09-07T07:12:42.402838",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "о всех процессах"
}
{
  "ts": "2020-09-07T07:13:00.430827",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет. Хорошо"
}
{
  "ts": "2020-09-07T07:13:21.491406",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "раз я тут, стерн попросил в течения дня отчеты получить от вас\nпиши сам или ты или буза"
}
{
  "ts": "2020-09-07T07:13:32.403360",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T07:15:31.031263",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет, попробуем"
}
{
  "ts": "2020-09-07T07:15:43.149292",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какую группу сделать на тест?"
}
{
  "ts": "2020-09-07T07:18:07.786532",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "только exe пока, длл еще не чистил"
}
{
  "ts": "2020-09-07T07:18:16.519056",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "хорошо"
}
{
  "ts": "2020-09-07T07:20:38.944210",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай. пожалуйста, ono72"
}
{
  "ts": "2020-09-07T07:20:49.347131",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T07:24:38.503551",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Бро, сделай, пожалуйста, крипт лоадера БК"
}
{
  "ts": "2020-09-07T07:24:39.074795",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/7BGh8t/sGZTzA   \n    Delete: https://qaz.im/index.php?a=delete&q=1206622663"
}
{
  "ts": "2020-09-07T07:24:40.455133",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-07T07:27:18.918221",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T07:27:32.084207",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сейчас серт сделаю и траф пустим на новый сервер, 20 мин"
}
{
  "ts": "2020-09-07T07:28:44.738808",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Картер привет, надо вот этот серв продлить 217.12.218.28"
}
{
  "ts": "2020-09-07T07:29:30.805140",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "привет, сейчачс отправлю поллу"
}
{
  "ts": "2020-09-07T07:29:40.899809",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T07:33:17.955057",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "инвойс удалили уже, я написал в поддержку,"
}
{
  "ts": "2020-09-07T07:38:38.357315",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с 14 до 16 00"
}
{
  "ts": "2020-09-07T07:38:58.617915",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сможем обучить внутри бк (имитировать отстук,)"
}
{
  "ts": "2020-09-07T07:39:10.561179",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "хорошо."
}
{
  "ts": "2020-09-07T07:39:39.427543",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T07:39:55.349285",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "еще раз доступы в бот панель\nссылку и доступы\n\nесть ли прямая ссылка? \nтора нет на ипаде"
}
{
  "ts": "2020-09-07T07:50:35.945002",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T07:50:44.392875",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T07:50:52.732949",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-09-07T07:50:59.926066",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T07:51:07.180285",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T07:51:14.369070",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T07:51:58.452045",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Нормально, правда деф. стал чаще палить бк"
}
{
  "ts": "2020-09-07T07:52:57.265519",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T07:52:57.266681",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "припозднился на час"
}
{
  "ts": "2020-09-07T07:52:57.302697",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "если сегодня все успешно с криптами, то согласуем объекты на вторник\nи 3 дня должно все как часы работать со вторника"
}
{
  "ts": "2020-09-07T07:52:57.317426",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T07:52:57.324587",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "еще раз доступы в бот панель\nссылку и доступы\n\nесть ли прямая ссылка? \nтора нет на ипаде"
}
{
  "ts": "2020-09-07T07:56:40.910648",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет! Вроде пятничные тесты прошли успешно. Собираю сейчас заново. С утра тоже сам тестил. Таргет сегодня уже спрашивал..."
}
{
  "ts": "2020-09-07T08:02:04.378014",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "urbanone@q3mcco35auwcstmt.onion",
  "body": "Привет\n\nhttp://opsptih3ol477doi.onion/phpmyadmin/"
}
{
  "ts": "2020-09-07T08:08:05.607960",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "группа 2"
}
{
  "ts": "2020-09-07T08:08:08.198651",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "туда нужен будет отсутк"
}
{
  "ts": "2020-09-07T08:08:14.361116",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подготовишь к обеду всве,"
}
{
  "ts": "2020-09-07T08:08:15.529829",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-07T08:08:23.915396",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чтобы раз 5-10 отсучалось туда сначал 1 а потом и сразу штук 5"
}
{
  "ts": "2020-09-07T08:08:31.664221",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и чтобы гет инфо можно было дать и чтобы команудп оставить"
}
{
  "ts": "2020-09-07T08:08:55.801347",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "6 машин могу"
}
{
  "ts": "2020-09-07T08:10:13.519470",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-09-07T08:10:22.956742",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Cvjnh."
}
{
  "ts": "2020-09-07T08:10:24.589251",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T08:28:25.427773",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил"
}
{
  "ts": "2020-09-07T08:29:18.467327",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет))"
}
{
  "ts": "2020-09-07T08:32:30.638752",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Привет ))"
}
{
  "ts": "2020-09-07T08:32:40.477076",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 1 уник оно72"
}
{
  "ts": "2020-09-07T08:32:46.031756",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T08:33:36.532123",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "этотт уже не восстановят, 28 был срок, замену делаю?"
}
{
  "ts": "2020-09-07T08:42:23.091405",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "lf ltkfq"
}
{
  "ts": "2020-09-07T08:42:27.223336",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "да делай"
}
{
  "ts": "2020-09-07T08:47:04.913573",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет. Принял сообщение?"
}
{
  "ts": "2020-09-07T08:55:01.206813",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Привет. Принял."
}
{
  "ts": "2020-09-07T08:55:12.287810",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Пока занят другим."
}
{
  "ts": "2020-09-07T08:56:50.262865",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 1 крипт chil106. со свободной строкйо"
}
{
  "ts": "2020-09-07T08:57:33.646698",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T09:07:35.579160",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Меня следующие 2 недели с 14го не будет, если что."
}
{
  "ts": "2020-09-07T09:08:55.581197",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Без логово проверял как работает?"
}
{
  "ts": "2020-09-07T09:09:55.237472",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Нет"
}
{
  "ts": "2020-09-07T09:12:52.677731",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. \nМеня следующие 2 недели с 14го не будет, если что."
}
{
  "ts": "2020-09-07T09:14:27.434205",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Проверь, без логов будем использовать в работе."
}
{
  "ts": "2020-09-07T09:15:44.522605",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет. \nМеня следующие 2 недели с 14го не будет, если что."
}
{
  "ts": "2020-09-07T09:15:48.573773",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "gHBDTN"
}
{
  "ts": "2020-09-07T09:16:27.854813",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "С логами у тебя уже нормально работает?"
}
{
  "ts": "2020-09-07T09:18:31.891502",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Последний который смотрел да."
}
{
  "ts": "2020-09-07T09:20:32.845119",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "111"
}
{
  "ts": "2020-09-07T09:21:19.975713",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T09:23:54.743854",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "kingston@q3mcco35auwcstmt.onion",
  "body": "Привет. У тебя машина с edge есть свободная?"
}
{
  "ts": "2020-09-07T09:24:21.678532",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл залил"
}
{
  "ts": "2020-09-07T09:24:29.830871",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T09:40:47.950895",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет.\nПодготовил два комплекта для тестирования:\nDownload: https://qaz.im/load/Y7z23H/fa9Dan\nDelete: https://qaz.im/index.php?a=delete&q=2012887647\nJ*#D&Dz3Ke3D%df83cDjq;wzek48"
}
{
  "ts": "2020-09-07T09:41:05.586303",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Привет. Ок"
}
{
  "ts": "2020-09-07T09:49:33.383304",
  "from": "nik-da@q3mcco35auwcstmt.onion",
  "to": "tilar@q3mcco35auwcstmt.onion",
  "body": "privet bro, svet otrybili, doljni skoro vklycit' / batareya na noyte saditsa / sorr"
}
{
  "ts": "2020-09-07T09:50:30.874968",
  "from": "nik-da@q3mcco35auwcstmt.onion",
  "to": "tilar@q3mcco35auwcstmt.onion",
  "body": "privet bro, svet otrybili, doljni skoro vklycit' / batareya na noyte saditsa / sorr"
}
{
  "ts": "2020-09-07T09:52:37.082106",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, da6"
}
{
  "ts": "2020-09-07T09:53:05.734011",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T09:54:33.530312",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил"
}
{
  "ts": "2020-09-07T09:54:38.742086",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "нет. получается пока . Все равно размер разный и на 32 и 64 битах. Все конфигурации собрал. Ни одна не совпадает по размеру"
}
{
  "ts": "2020-09-07T09:55:00.623825",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "если на утренних файлах будет дефендер, то обновил еще раз"
}
{
  "ts": "2020-09-07T09:55:42.526263",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "Привет бро)"
}
{
  "ts": "2020-09-07T09:55:51.399251",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T09:59:15.090687",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T10:01:57.562903",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T10:02:00.888579",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "пока что то делают"
}
{
  "ts": "2020-09-07T10:02:02.430730",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "молчат"
}
{
  "ts": "2020-09-07T10:02:14.307714",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "значит точно не сегодня"
}
{
  "ts": "2020-09-07T10:02:20.987027",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "просил бентли информировать с утра"
}
{
  "ts": "2020-09-07T10:03:09.880774",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет. мы продолжим?"
}
{
  "ts": "2020-09-07T10:05:12.325528",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T10:05:48.248791",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "тебе еще задание не выдавали?"
}
{
  "ts": "2020-09-07T10:05:55.283283",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "нет"
}
{
  "ts": "2020-09-07T10:06:19.309595",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "пару минут"
}
{
  "ts": "2020-09-07T10:07:16.759660",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-09-07T10:09:20.545233",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Итак. Сборка Вана - ок. Тестирую крипт Фрога"
}
{
  "ts": "2020-09-07T10:09:35.905168",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "есть опыь разработки с  winapi?"
}
{
  "ts": "2020-09-07T10:09:44.047561",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T10:10:16.549137",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "если ок\nвыдавай в работу"
}
{
  "ts": "2020-09-07T10:10:37.351569",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "winhttp знаком?"
}
{
  "ts": "2020-09-07T10:10:51.503410",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сама сборка ок. Сделаем крипт и прогоним в течении часа"
}
{
  "ts": "2020-09-07T10:11:14.586558",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "не испольозовал никогда"
}
{
  "ts": "2020-09-07T10:11:41.676423",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T10:11:42.227353",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "по имитации будем делать?"
}
{
  "ts": "2020-09-07T10:11:48.766322",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да будем в 14"
}
{
  "ts": "2020-09-07T10:12:01.064638",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T10:12:02.677420",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а что использовал для доступа в интернет?"
}
{
  "ts": "2020-09-07T10:12:57.528840",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "библиотеки qt. winapi у меня gui и sync"
}
{
  "ts": "2020-09-07T10:13:18.985498",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "не было необходимости в сети в моих разработках"
}
{
  "ts": "2020-09-07T10:14:32.552260",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "но я не думаю что там что-то сильно сложное для меня. с сокетами работал"
}
{
  "ts": "2020-09-07T10:14:52.469032",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а скриптовых языки  - cmd, jscript, vbs, powershell? какие хорошо знаешь?"
}
{
  "ts": "2020-09-07T10:15:55.734664",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "первые два мидл, вторые два на джуна."
}
{
  "ts": "2020-09-07T10:16:19.267516",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я больше по тяделвым языкам С++, rust"
}
{
  "ts": "2020-09-07T10:16:30.061153",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "тяжелым*"
}
{
  "ts": "2020-09-07T10:16:48.593512",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а формат PE файла хорошо знаешь?"
}
{
  "ts": "2020-09-07T10:17:49.451869",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "не знаю"
}
{
  "ts": "2020-09-07T10:19:16.682900",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а а реверсом приходилось заниматься?"
}
{
  "ts": "2020-09-07T10:19:32.103556",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/d4bKh9/4Ttk3i   \n    Delete: https://qaz.im/index.php?a=delete&q=381884196"
}
{
  "ts": "2020-09-07T10:19:40.716952",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Бро и еще 1 крипт лоадера БК с простой иконкйо"
}
{
  "ts": "2020-09-07T10:19:42.476260",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-07T10:20:04.315276",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "реверсом чего? кода из экзешника?"
}
{
  "ts": "2020-09-07T10:20:59.562746",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "да, восстановлением исходного кода c++ из exe файла"
}
{
  "ts": "2020-09-07T10:21:26.446766",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "ассемблер хорошо знаешь?"
}
{
  "ts": "2020-09-07T10:21:59.527856",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Проверил not logged x64 bat - работает. Должно так же как и logged работать."
}
{
  "ts": "2020-09-07T10:22:04.275455",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "когда-то знал хорошо, на уровне 386 процессора."
}
{
  "ts": "2020-09-07T10:22:24.319798",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "реверсом кода не занимался, но видел как это делают с IDA"
}
{
  "ts": "2020-09-07T10:22:30.931338",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "OK."
}
{
  "ts": "2020-09-07T10:22:45.333819",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а опыт работы программистом большой?"
}
{
  "ts": "2020-09-07T10:23:23.445291",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "20 лет"
}
{
  "ts": "2020-09-07T10:23:49.274835",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T10:24:36.675391",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T10:24:42.957190",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "sHWqss3OVyNMVDPAFJNtxXMzhqE42cwbMjBsYxmYJled42C8an"
}
{
  "ts": "2020-09-07T10:24:55.068075",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "строка нам чил"
}
{
  "ts": "2020-09-07T10:26:40.089888",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет, ок, спс"
}
{
  "ts": "2020-09-07T10:27:29.979628",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "я не знаю, предупреждали тебя, что мы занимаемся не совсем легальной работой?"
}
{
  "ts": "2020-09-07T10:27:39.472241",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T10:28:03.193893",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "оттого у меня вопрос, мне почитать какие меры предосторожности надо предпринять"
}
{
  "ts": "2020-09-07T10:28:16.586670",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T10:28:16.886827",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "но никто не хочет мне дать ответ"
}
{
  "ts": "2020-09-07T10:28:32.067020",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "меры предосторожности - это как минимум впн"
}
{
  "ts": "2020-09-07T10:28:51.927565",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "сейчас в сети через впн?"
}
{
  "ts": "2020-09-07T10:29:10.826954",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "это чтобы скрыть свой реальный ip"
}
{
  "ts": "2020-09-07T10:29:41.467930",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "сейчас без ВПН"
}
{
  "ts": "2020-09-07T10:29:49.488674",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "какой надо ВПН?"
}
{
  "ts": "2020-09-07T10:30:27.003965",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "я попрошу, вам выдадут, только это все не быстро, через день-два"
}
{
  "ts": "2020-09-07T10:30:46.192233",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "с виртуальными машинами приходилось работать?"
}
{
  "ts": "2020-09-07T10:31:11.729001",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "привет, нужно новому программисту впн выдать"
}
{
  "ts": "2020-09-07T10:31:19.441988",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "подскажи, кому писать?"
}
{
  "ts": "2020-09-07T10:31:40.820176",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "типа vmware и virtualbox?"
}
{
  "ts": "2020-09-07T10:31:44.132204",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T10:31:45.806509",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "strix@"
}
{
  "ts": "2020-09-07T10:31:55.932205",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "только как пользователь. под них ничего не писал"
}
{
  "ts": "2020-09-07T10:32:12.265489",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "даже не изучал такую возможность"
}
{
  "ts": "2020-09-07T10:32:59.305634",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "вот желательно установить вмртуалку, в нее vs, или другую ide, на которой работаешь"
}
{
  "ts": "2020-09-07T10:33:18.728176",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "виртуалку отключить от сети, и все разработки вести в ней"
}
{
  "ts": "2020-09-07T10:34:12.331845",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "поставлю"
}
{
  "ts": "2020-09-07T10:37:22.879686",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 1 крипт  da6"
}
{
  "ts": "2020-09-07T10:38:13.738051",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T10:44:13.414689",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "scintillamfc.exe детектит \n \tName: Program:Win32/Beareuws.A!ml\n \tID: 256596\n \tSeverity: Low\n \tCategory: Potentially Unwanted Software\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\scintillamfc\\scintillamfc.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.692.0, AS: 1.323.692.0, NIS: 1.323.692.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T10:44:20.550261",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Исхожник - чистый"
}
{
  "ts": "2020-09-07T10:53:44.273093",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T10:53:51.741351",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "когда поставишь, разберись с winhttp, как качать данные или файл из сети GET запросов, как отправить данные через POST запрос"
}
{
  "ts": "2020-09-07T10:54:37.466335",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "вначале через http, потом через https"
}
{
  "ts": "2020-09-07T10:55:06.026341",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "нет все палится"
}
{
  "ts": "2020-09-07T10:55:13.496683",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это последний репорт от бузы в 14 00"
}
{
  "ts": "2020-09-07T10:55:14.031657",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "бекенд приходилось делать?"
}
{
  "ts": "2020-09-07T10:55:24.809110",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а есть какой-то список противоречий, при которых мне не стоило бы наичнать этим заниматься?"
}
{
  "ts": "2020-09-07T10:55:39.657772",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "бекенд делать приходилось и много"
}
{
  "ts": "2020-09-07T10:55:51.332681",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а на каком языке?"
}
{
  "ts": "2020-09-07T10:56:06.691866",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "всмысле неужели c++ &"
}
{
  "ts": "2020-09-07T10:56:08.831691",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-07T10:56:09.859885",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "C++, rust"
}
{
  "ts": "2020-09-07T10:56:20.127978",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а, окей"
}
{
  "ts": "2020-09-07T10:56:28.531564",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ты про web backend?"
}
{
  "ts": "2020-09-07T10:56:33.814296",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T10:57:03.367498",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "веб бекенд не делал. немного игрался с PHP и javascript"
}
{
  "ts": "2020-09-07T10:58:13.147162",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "оно детектит при старте"
}
{
  "ts": "2020-09-07T10:58:19.711363",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "через localhost (127.0.0.1) проще всего тестировать сетевые приложения, тот же winhttp"
}
{
  "ts": "2020-09-07T10:58:20.798431",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 3:57:03 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ono72\\ono72.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSignature Version: AV: 1.323.679.0, AS: 1.323.679.0, NIS: 1.323.679.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T10:58:42.062877",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "создать сервер и клиент понятно"
}
{
  "ts": "2020-09-07T10:59:06.419588",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "так делал когда winsock изучал давно"
}
{
  "ts": "2020-09-07T10:59:18.011790",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "написать небольшой сервер на rust, который будет при запросе на 127.0.0.1/test.txt выдавать какой то текстовый файл"
}
{
  "ts": "2020-09-07T10:59:57.393822",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "попробовать скачать через браузер, а потом уже через winhttp на с++"
}
{
  "ts": "2020-09-07T11:00:35.798510",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а есть какой-то список противоречий, при которых мне не стоило бы наичнать этим заниматься?"
}
{
  "ts": "2020-09-07T11:00:36.271457",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "причем использовать только winapi"
}
{
  "ts": "2020-09-07T11:01:32.023409",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "программы, которые будешь делать, не совсем легальные - лоадеры, бекдоры, трояны"
}
{
  "ts": "2020-09-07T11:02:18.333957",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "за это по голове не погладят, нужно быть очень аккуратным"
}
{
  "ts": "2020-09-07T11:02:49.442147",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "работать через впн, меньше ля ля про работу"
}
{
  "ts": "2020-09-07T11:03:02.158352",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "через впн не ходить в социальные сети"
}
{
  "ts": "2020-09-07T11:03:10.299377",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а если я буду жить не в России например"
}
{
  "ts": "2020-09-07T11:03:23.091637",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "соцсетей у меня вообще нет"
}
{
  "ts": "2020-09-07T11:04:02.431927",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "я давно уже работаю, пока тьфу тьфу проблем не было"
}
{
  "ts": "2020-09-07T11:04:16.465525",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "окей"
}
{
  "ts": "2020-09-07T11:04:20.547843",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "работа удаленная, сильно не напрягают"
}
{
  "ts": "2020-09-07T11:04:29.919841",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "но если тебе самому интересно"
}
{
  "ts": "2020-09-07T11:04:50.172171",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "мне когда-то очень было интересно. посмотрим как сейчас."
}
{
  "ts": "2020-09-07T11:04:57.472186",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "всмысле интересна работа"
}
{
  "ts": "2020-09-07T11:05:34.507154",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "тогда разбирайся с winhttp, и читай про PE формат файла"
}
{
  "ts": "2020-09-07T11:06:07.392416",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "окей"
}
{
  "ts": "2020-09-07T11:06:09.473764",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "нужно понимать что происходит в системе, когда запускается exe или dll файл"
}
{
  "ts": "2020-09-07T11:06:31.295507",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "что такое точка входа, секции файла и т.д."
}
{
  "ts": "2020-09-07T11:07:44.757001",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "поставь виртуалку, настрой, сделай сервер для тестирования GET запроса на rust или c++, и напиши"
}
{
  "ts": "2020-09-07T11:08:14.037564",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "заказал впн, скину на днях"
}
{
  "ts": "2020-09-07T11:08:21.075605",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "почитай кстати про впн"
}
{
  "ts": "2020-09-07T11:08:35.817241",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "что именно почитать про ВПН?"
}
{
  "ts": "2020-09-07T11:09:11.277692",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "деплой"
}
{
  "ts": "2020-09-07T11:09:12.318607",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T11:09:14.574839",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "скажи мне плз"
}
{
  "ts": "2020-09-07T11:09:17.067474",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты чем щас занят"
}
{
  "ts": "2020-09-07T11:09:50.103325",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "деплой не молчи )"
}
{
  "ts": "2020-09-07T11:09:51.224303",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "как пользоваться правильно, как в браузере отключить webrtc"
}
{
  "ts": "2020-09-07T11:10:08.702924",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "у нас тут пиздец полный"
}
{
  "ts": "2020-09-07T11:10:12.421726",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты чьими задачами занят"
}
{
  "ts": "2020-09-07T11:10:14.139027",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "скажи мне плз"
}
{
  "ts": "2020-09-07T11:10:22.173005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "пол мор еще кто то?"
}
{
  "ts": "2020-09-07T11:11:13.794082",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-09-07T11:11:16.237207",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет еще раз"
}
{
  "ts": "2020-09-07T11:11:19.443973",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты чьими задачами занят"
}
{
  "ts": "2020-09-07T11:11:21.711182",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "мор пол кто там"
}
{
  "ts": "2020-09-07T11:11:22.742050",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "у тебя"
}
{
  "ts": "2020-09-07T11:11:25.681078",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "кого ждем"
}
{
  "ts": "2020-09-07T11:11:29.401034",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "отпиши срочно"
}
{
  "ts": "2020-09-07T11:11:47.309086",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T11:12:00.354154",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Минут через 20 смогу посмотреть"
}
{
  "ts": "2020-09-07T11:12:08.288163",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "не заставляй меня нервничать пожалуйста\nпо товарищески прошу )"
}
{
  "ts": "2020-09-07T11:12:13.411987",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты щас кем то занят или своими делами?"
}
{
  "ts": "2020-09-07T11:12:24.465028",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "еслм своими ок\nесли кем то - скажи кем"
}
{
  "ts": "2020-09-07T11:12:41.412539",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Стаб чищу"
}
{
  "ts": "2020-09-07T11:12:45.752880",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "понял"
}
{
  "ts": "2020-09-07T11:12:48.464403",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сразу к бузе плз"
}
{
  "ts": "2020-09-07T11:12:50.340204",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-07T11:12:52.791878",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "у нас пиздец ты знаешь"
}
{
  "ts": "2020-09-07T11:12:56.820790",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "все стоит"
}
{
  "ts": "2020-09-07T11:12:57.873260",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "офисы"
}
{
  "ts": "2020-09-07T11:12:58.752465",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "хакеры"
}
{
  "ts": "2020-09-07T11:13:02.041994",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "все наглухо стоят ждут"
}
{
  "ts": "2020-09-07T11:13:08.071741",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "отпиши сразу бузе"
}
{
  "ts": "2020-09-07T11:13:22.479312",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, крипт Буера с иуонкой пдф за битки"
}
{
  "ts": "2020-09-07T11:13:22.962900",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " <goldcoin@exploit.im> https://qaz.im/load/YBkfBf/R5zr3k\n[17:43:14] <goldcoin@exploit.im> 1q2w3e4r5t"
}
{
  "ts": "2020-09-07T11:13:44.824706",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T11:14:08.648779",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, еще 1 крипт лоадера БК с простой иконкой"
}
{
  "ts": "2020-09-07T11:14:09.542405",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/d4bKh9/4Ttk3i"
}
{
  "ts": "2020-09-07T11:14:12.238851",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-07T11:14:22.318700",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": " [14:15:56] <buza> в смысле, на этот вопрос\n[14:13:45] <target> он что теперь на абонентке у мор?"
}
{
  "ts": "2020-09-07T11:14:23.810080",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "марсель"
}
{
  "ts": "2020-09-07T11:14:27.046674",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "почему мы у него не берем"
}
{
  "ts": "2020-09-07T11:14:27.810608",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файлы"
}
{
  "ts": "2020-09-07T11:14:41.655785",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Берем"
}
{
  "ts": "2020-09-07T11:16:06.595185",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "quite@q3mcco35auwcstmt.onion",
  "body": "[06:48:31] <poll> bro nu emo meo \n[06:48:36] *** Попытка возобновить личную переписку\n[06:48:52] <poll> ny ti che nazvanie ne mojesh dobavit normalno? \n[06:49:02] <poll> che blay eto za korayviay hren?!"
}
{
  "ts": "2020-09-07T11:16:19.602542",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "quite@q3mcco35auwcstmt.onion",
  "body": "vozmi  otkroi google & dobav ego normalno"
}
{
  "ts": "2020-09-07T11:16:57.617527",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "dorirus@q3mcco35auwcstmt.onion",
  "body": "Привет. У тебя 173.232.146.199:31004 свободна?"
}
{
  "ts": "2020-09-07T11:17:17.642776",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T11:18:57.821090",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Что по тестированию?"
}
{
  "ts": "2020-09-07T11:19:09.220478",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да выдавай файл"
}
{
  "ts": "2020-09-07T11:19:13.319794",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "с 15 30"
}
{
  "ts": "2020-09-07T11:19:15.819657",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T11:19:15.870162",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ааа"
}
{
  "ts": "2020-09-07T11:19:16.642403",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "стоп"
}
{
  "ts": "2020-09-07T11:19:18.653580",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты проэ то тестирование"
}
{
  "ts": "2020-09-07T11:19:22.226058",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "думал про ав"
}
{
  "ts": "2020-09-07T11:19:48.571770",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "С группы 2 кто запускает? Я у себя? Или вы у себя?"
}
{
  "ts": "2020-09-07T11:20:39.989630",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты"
}
{
  "ts": "2020-09-07T11:20:40.919581",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "у себя"
}
{
  "ts": "2020-09-07T11:20:42.119314",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "они стучат"
}
{
  "ts": "2020-09-07T11:20:45.281284",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я объясняю что и как там"
}
{
  "ts": "2020-09-07T11:20:57.195587",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T11:20:57.700105",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "kagas@q3mcco35auwcstmt.onion",
  "body": "Макс, привет"
}
{
  "ts": "2020-09-07T11:21:15.080692",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "20-30 мин"
}
{
  "ts": "2020-09-07T11:21:16.349575",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "затянулось все"
}
{
  "ts": "2020-09-07T11:21:24.591782",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T11:21:26.456033",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "операторы"
}
{
  "ts": "2020-09-07T11:21:28.616085",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кучу задач"
}
{
  "ts": "2020-09-07T11:21:32.329254",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "все что то сообщают"
}
{
  "ts": "2020-09-07T11:21:42.303895",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а есть весь список того что надо сделать, чтоб подготовить компьютер?"
}
{
  "ts": "2020-09-07T11:21:43.625122",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и блядь еще воффлайне отвлекают по основных обязаностям"
}
{
  "ts": "2020-09-07T11:21:50.657618",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "20-30 мин потерпи"
}
{
  "ts": "2020-09-07T11:22:20.405275",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок."
}
{
  "ts": "2020-09-07T11:22:38.535517",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "всмысле виртуальную машину?"
}
{
  "ts": "2020-09-07T11:23:14.355374",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ну вот webRTC, VPN, VirtualBox без сети"
}
{
  "ts": "2020-09-07T11:24:23.501182",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Я готов"
}
{
  "ts": "2020-09-07T11:24:32.370459",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-09-07T11:24:36.597469",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "[06:10:57] <hof> привет, нужен впн для нового программиста, для darc \n[06:11:30] <hof> я хз, давать наш наверное пока стремно, может заказать на пару месяцев? \n[06:11:40] <hof> как обычно делается?"
}
{
  "ts": "2020-09-07T11:24:57.854640",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T11:25:08.052439",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "как быть сделать ему отдельный или давать наш?"
}
{
  "ts": "2020-09-07T11:25:10.178280",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "напиши картеру, пусть купит двойной впн"
}
{
  "ts": "2020-09-07T11:25:18.444834",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "на месяц"
}
{
  "ts": "2020-09-07T11:25:26.399455",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "потом если все норм, сделаешь свой"
}
{
  "ts": "2020-09-07T11:25:29.770551",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "1) установить VirtualBox, в ней создать виртуальную машину, win7 вполне хватит"
}
{
  "ts": "2020-09-07T11:25:50.195898",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "это по заданию, я понял."
}
{
  "ts": "2020-09-07T11:26:03.086256",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "установить в виртуальной машине vs, нужные программы"
}
{
  "ts": "2020-09-07T11:26:10.631855",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "в смысле, самому не делать купить сторонний? Картер такое делает?"
}
{
  "ts": "2020-09-07T11:26:45.110597",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Я как понял, новый программер на тестовом периоде?"
}
{
  "ts": "2020-09-07T11:26:45.948809",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Предоставить, пожалуйста, доступ к машине что бы я глянул"
}
{
  "ts": "2020-09-07T11:26:50.390993",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а по впн - пока просто почитать что это, для чего нужно"
}
{
  "ts": "2020-09-07T11:26:50.577130",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Бк"
}
{
  "ts": "2020-09-07T11:26:55.963698",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "По тимке могу"
}
{
  "ts": "2020-09-07T11:27:07.815367",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Давай"
}
{
  "ts": "2020-09-07T11:27:17.676916",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "а когда я скину конфиг, то можно будет установить впн"
}
{
  "ts": "2020-09-07T11:27:33.104253",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сейчас"
}
{
  "ts": "2020-09-07T11:27:35.891574",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Запускаю"
}
{
  "ts": "2020-09-07T11:27:54.472458",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "тогда и поговорим, как это лучше сделать"
}
{
  "ts": "2020-09-07T11:28:45.745618",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "darc@q3mcco35auwcstmt.onion",
  "body": "webrtc - это то, что нужно отключить в браузере, чтобы не палиться когда пользуешься впном"
}
{
  "ts": "2020-09-07T11:29:07.572698",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "249 077 172"
}
{
  "ts": "2020-09-07T11:29:11.406533",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T11:29:12.932714",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "awf439"
}
{
  "ts": "2020-09-07T11:29:21.808926",
  "from": "darc@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "хорошо"
}
{
  "ts": "2020-09-07T11:29:42.751398",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T11:30:34.500265",
  "from": "quite@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "[06:48:31] <poll> bro nu emo meo \n[06:48:36] *** Попытка возобновить личную переписку\n[06:48:52] <poll> ny ti che nazvanie ne mojesh dobavit normalno? \n[06:49:02] <poll> che blay eto za korayviay hren?!"
}
{
  "ts": "2020-09-07T11:30:34.501642",
  "from": "quite@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "vozmi  otkroi google & dobav ego normalno"
}
{
  "ts": "2020-09-07T11:31:01.575617",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Запустил исходник"
}
{
  "ts": "2020-09-07T11:31:11.775877",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-09-07T11:31:18.969899",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Вижу"
}
{
  "ts": "2020-09-07T11:31:30.698078",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "картер делает"
}
{
  "ts": "2020-09-07T11:31:35.863007",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "да, пока пусть покупной будет"
}
{
  "ts": "2020-09-07T11:31:35.948554",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Сколько нужно ждать?"
}
{
  "ts": "2020-09-07T11:31:47.335325",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "1-2 минуты"
}
{
  "ts": "2020-09-07T11:32:27.847320",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "ладно"
}
{
  "ts": "2020-09-07T11:33:40.376597",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-09-07T11:33:49.287994",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Ты от меня ждешь результатов тестов?"
}
{
  "ts": "2020-09-07T11:35:09.117427",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Каких?"
}
{
  "ts": "2020-09-07T11:35:33.853559",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Вот я тоже не помню. Хотел уточнить."
}
{
  "ts": "2020-09-07T11:35:35.617570",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Понял"
}
{
  "ts": "2020-09-07T11:35:41.386318",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я переделываю загрузчик."
}
{
  "ts": "2020-09-07T11:35:52.066498",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-07T11:35:57.728547",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "x86 не палится ты говоришь"
}
{
  "ts": "2020-09-07T11:36:06.319675",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Можно пока его использовать"
}
{
  "ts": "2020-09-07T11:36:06.971544",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T11:36:43.717400",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Проверю сегодня его тогда еще раз"
}
{
  "ts": "2020-09-07T11:41:44.546576",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Бот не забудь обновить он там 107 версии для x86 сейчас"
}
{
  "ts": "2020-09-07T11:41:58.644808",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-09-07T11:42:32.265549",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "У нас новый программер на испытательном сроке."
}
{
  "ts": "2020-09-07T11:43:10.765562",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Просят ему сделать временный double vpn на месяц. Ты такое делаешь?"
}
{
  "ts": "2020-09-07T11:43:26.516477",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты чрез 1 0мин готов?*"
}
{
  "ts": "2020-09-07T11:43:27.884697",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "запускать"
}
{
  "ts": "2020-09-07T11:43:36.366967",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "У фрилансеров закажешь?"
}
{
  "ts": "2020-09-07T11:44:06.497648",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "привет, могу на aprovpn.com сделать подписку, подойдёт?"
}
{
  "ts": "2020-09-07T11:44:33.215944",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "b25\nYoB+t=z:_GdGY@PN\nhttps://scrytnuuszglaugg.onion/ \n\n\nпроверь чтобы в эту группу стуало"
}
{
  "ts": "2020-09-07T11:44:41.142976",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "а там двойной? я сторонними не пользовался, потому не знаю"
}
{
  "ts": "2020-09-07T11:44:47.623935",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "отъехал за лекарстовом давай черзе 20-25"
}
{
  "ts": "2020-09-07T11:44:50.495953",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "да, двойной"
}
{
  "ts": "2020-09-07T11:45:07.372243",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ну попробуй закажи тогда"
}
{
  "ts": "2020-09-07T11:45:55.705979",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T11:46:42.490148",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "еще вопрос -- я тебе в пятницу подкидывал на оплату 5 штук впс-ок -- ты видел?"
}
{
  "ts": "2020-09-07T11:48:03.114929",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "Картер проверь оплату пжл 217.12.218.29"
}
{
  "ts": "2020-09-07T11:49:41.717405",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Отработал?"
}
{
  "ts": "2020-09-07T11:53:36.155545",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "да, сегодня закрою"
}
{
  "ts": "2020-09-07T11:55:18.166510",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "если что поллу кидай на оплату"
}
{
  "ts": "2020-09-07T11:56:29.340221",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "217.12.218.29 не могу найти у себя, есть панель?"
}
{
  "ts": "2020-09-07T11:57:31.783624",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "нашел"
}
{
  "ts": "2020-09-07T12:00:02.653965",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Оно перезалил"
}
{
  "ts": "2020-09-07T12:05:36.843546",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Da6 отправил"
}
{
  "ts": "2020-09-07T12:05:37.701313",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "В админке не вижу"
}
{
  "ts": "2020-09-07T12:06:23.957355",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T12:06:32.850428",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "готов"
}
{
  "ts": "2020-09-07T12:06:36.463534",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Шас проверю"
}
{
  "ts": "2020-09-07T12:06:45.750640",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "5 мин"
}
{
  "ts": "2020-09-07T12:06:47.901457",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я щас другео показываю там"
}
{
  "ts": "2020-09-07T12:06:49.794491",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и потом ты сразу"
}
{
  "ts": "2020-09-07T12:09:11.774738",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, dr1 для Тилара. Детекта нет массового."
}
{
  "ts": "2020-09-07T12:09:15.688814",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Выдал 1 крипт уже"
}
{
  "ts": "2020-09-07T12:09:46.494824",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T12:10:39.720822",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "CHIL106.exe - ок"
}
{
  "ts": "2020-09-07T12:11:08.933102",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залито"
}
{
  "ts": "2020-09-07T12:11:09.229377",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-07T12:12:59.679482",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, еще 1 крипт dr1"
}
{
  "ts": "2020-09-07T12:17:02.338296",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T12:20:16.616363",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "1 лоадер не делай, пока я разберусь почему он не стучит"
}
{
  "ts": "2020-09-07T12:23:23.307920",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T12:25:01.978971",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Хотя с утра стучал"
}
{
  "ts": "2020-09-07T12:34:17.729321",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Какой криптованный?"
}
{
  "ts": "2020-09-07T12:36:32.430339",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хотел первый лоадер запустить"
}
{
  "ts": "2020-09-07T12:36:48.369120",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага щас дам доступ"
}
{
  "ts": "2020-09-07T12:37:09.683323",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Обновлял АВ"
}
{
  "ts": "2020-09-07T12:37:26.392146",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Тогда я уже второй запущу"
}
{
  "ts": "2020-09-07T12:37:32.663000",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага давай"
}
{
  "ts": "2020-09-07T12:37:48.570985",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "249 077 172"
}
{
  "ts": "2020-09-07T12:37:53.481557",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "x68pa7"
}
{
  "ts": "2020-09-07T12:38:07.876434",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Там включена автоматическая отправика?"
}
{
  "ts": "2020-09-07T12:38:19.793800",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Отключена конечно."
}
{
  "ts": "2020-09-07T12:38:30.797143",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T12:38:59.307833",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Buer бк отправил"
}
{
  "ts": "2020-09-07T12:39:12.338149",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T12:39:32.032919",
  "from": "tunri@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T12:40:06.707456",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил dr1"
}
{
  "ts": "2020-09-07T12:40:26.943492",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "++"
}
{
  "ts": "2020-09-07T12:40:58.785751",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "готов?"
}
{
  "ts": "2020-09-07T12:40:59.768221",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "мы да"
}
{
  "ts": "2020-09-07T12:41:00.418566",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ждем"
}
{
  "ts": "2020-09-07T12:41:01.903050",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "появления"
}
{
  "ts": "2020-09-07T12:41:40.468690",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок запускаю"
}
{
  "ts": "2020-09-07T12:41:44.510431",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Пускаю кабана ))"
}
{
  "ts": "2020-09-07T12:42:03.165640",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": ")))))"
}
{
  "ts": "2020-09-07T12:42:06.093008",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "[15:43:34] <target> дай любой файл \n[15:43:36] <target> для тестироовщиков \n[15:43:37] <target> любой \n[15:43:44] <target> нужно чтобы они пока поучулись \n[15:43:45] <target> чекать \n[15:43:48] <buza> у бентли всё"
}
{
  "ts": "2020-09-07T12:42:11.979014",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "может есть како надо чекнуть?"
}
{
  "ts": "2020-09-07T12:42:20.282489",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "это отдельной ) от кабана"
}
{
  "ts": "2020-09-07T12:42:21.874556",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ДА пока нет."
}
{
  "ts": "2020-09-07T12:42:28.417232",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Еще Деплой пилит и Марсель"
}
{
  "ts": "2020-09-07T12:42:50.654301",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ну тогда дай старый какой нибудь )"
}
{
  "ts": "2020-09-07T12:42:56.015905",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пусть пока потестят"
}
{
  "ts": "2020-09-07T12:43:02.026889",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/SAebkh/SfSi72"
}
{
  "ts": "2020-09-07T12:43:03.457904",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-07T12:43:06.438423",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Его и запущу"
}
{
  "ts": "2020-09-07T12:43:14.375020",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "группа 2"
}
{
  "ts": "2020-09-07T12:44:27.040790",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "запустил на 7*64"
}
{
  "ts": "2020-09-07T12:47:18.133294",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Появился 1"
}
{
  "ts": "2020-09-07T12:47:39.152768",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Пускать следующих?"
}
{
  "ts": "2020-09-07T12:48:09.594788",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да пускай"
}
{
  "ts": "2020-09-07T12:48:10.142127",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T12:49:01.074319",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "admin"
}
{
  "ts": "2020-09-07T12:49:18.502560",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "123qWe123x"
}
{
  "ts": "2020-09-07T12:49:20.900988",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "доступ в слэк админский"
}
{
  "ts": "2020-09-07T12:49:21.656334",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "дай профу или кому там надо из вас"
}
{
  "ts": "2020-09-07T12:50:05.531767",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пишет ссылка неверна"
}
{
  "ts": "2020-09-07T12:50:22.548438",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/SAebkh/SfSi72"
}
{
  "ts": "2020-09-07T12:50:25.624186",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Эта?"
}
{
  "ts": "2020-09-07T12:50:45.621607",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://scrytnuuszglaugg.onion/login"
}
{
  "ts": "2020-09-07T12:50:48.549588",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Эта?"
}
{
  "ts": "2020-09-07T12:50:56.691025",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "не очень... последний раз 31.08 писал"
}
{
  "ts": "2020-09-07T12:50:59.820500",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так вроде все ок"
}
{
  "ts": "2020-09-07T12:51:05.572184",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-09-07T12:51:07.106992",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да не я про файл"
}
{
  "ts": "2020-09-07T12:51:08.326523",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Что за админский слэк?"
}
{
  "ts": "2020-09-07T12:51:18.158362",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "вопросы должны быть каждый день..."
}
{
  "ts": "2020-09-07T12:51:22.185145",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "рокет блин"
}
{
  "ts": "2020-09-07T12:51:26.202042",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "проф там замучал"
}
{
  "ts": "2020-09-07T12:51:28.468547",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "в слэк писать"
}
{
  "ts": "2020-09-07T12:51:32.804701",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "типо дайте ему админски йдоступ"
}
{
  "ts": "2020-09-07T12:51:33.618541",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вот он"
}
{
  "ts": "2020-09-07T12:51:36.875827",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "его в жабе нет"
}
{
  "ts": "2020-09-07T12:51:40.086478",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "второй пошел"
}
{
  "ts": "2020-09-07T12:51:40.168828",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "дай ему плз там"
}
{
  "ts": "2020-09-07T12:52:03.185652",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Уже скинул"
}
{
  "ts": "2020-09-07T12:52:28.968532",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "не тебе написал )))"
}
{
  "ts": "2020-09-07T12:52:38.801244",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "как дела?"
}
{
  "ts": "2020-09-07T12:54:50.021530",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Пасс не катит"
}
{
  "ts": "2020-09-07T12:57:46.031249",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ничего блядь"
}
{
  "ts": "2020-09-07T12:57:47.096204",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "щас настрои все"
}
{
  "ts": "2020-09-07T12:57:54.018499",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и не удет этой фигни"
}
{
  "ts": "2020-09-07T12:58:08.114548",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ну а такой 123qWe123 подходит?"
}
{
  "ts": "2020-09-07T12:58:11.120882",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вроде да"
}
{
  "ts": "2020-09-07T12:58:14.945754",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "запушено на 5 машинах"
}
{
  "ts": "2020-09-07T12:58:43.062613",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я вижу"
}
{
  "ts": "2020-09-07T12:58:44.762507",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тут охуели"
}
{
  "ts": "2020-09-07T12:58:47.465900",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "от кол-ва"
}
{
  "ts": "2020-09-07T12:58:51.961919",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-09-07T12:58:56.477573",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "говорят они что так могут долго идтти?"
}
{
  "ts": "2020-09-07T12:59:03.350250",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я гвоорю да блядь дай бог"
}
{
  "ts": "2020-09-07T12:59:04.728900",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "5 это не 1000 )"
}
{
  "ts": "2020-09-07T12:59:08.709281",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чтобы шли не перествая))))))))"
}
{
  "ts": "2020-09-07T12:59:15.271156",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ага ))"
}
{
  "ts": "2020-09-07T12:59:18.086679",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "бентли"
}
{
  "ts": "2020-09-07T12:59:20.962095",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "будет 1000"
}
{
  "ts": "2020-09-07T12:59:21.781669",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тех которых мы делам"
}
{
  "ts": "2020-09-07T12:59:24.100815",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ой бля"
}
{
  "ts": "2020-09-07T12:59:29.933272",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "езжай выбирай себе машину ))"
}
{
  "ts": "2020-09-07T12:59:30.058175",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Это цель"
}
{
  "ts": "2020-09-07T12:59:37.668220",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Уже выбрал ))"
}
{
  "ts": "2020-09-07T12:59:41.156536",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хахахахаха"
}
{
  "ts": "2020-09-07T12:59:43.327506",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "криптани плиз"
}
{
  "ts": "2020-09-07T13:00:29.702371",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "OK"
}
{
  "ts": "2020-09-07T13:00:37.653299",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Этот подошел"
}
{
  "ts": "2020-09-07T13:00:55.785661",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вы же хакеры"
}
{
  "ts": "2020-09-07T13:00:58.827051",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "должны были набрутить"
}
{
  "ts": "2020-09-07T13:01:00.600872",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "или сломать"
}
{
  "ts": "2020-09-07T13:01:03.372394",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "вам пароль не нужен"
}
{
  "ts": "2020-09-07T13:01:06.495136",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "фильмы не смотрел что ли?"
}
{
  "ts": "2020-09-07T13:03:21.543036",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Eset    \nОбновил\n\"Файл - https://qaz.im/load/SAebkh/SfSi72\n123\"\nhttps://prnt.sc/ud0wor\nсканирование архива - угроз не выявлено \nhttps://prnt.sc/ud0xsu\nсканирование файла из архива - угроз не выявлено"
}
{
  "ts": "2020-09-07T13:03:23.970859",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и на запуск так же"
}
{
  "ts": "2020-09-07T13:05:20.306403",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "все"
}
{
  "ts": "2020-09-07T13:05:20.882199",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "успокойся дед"
}
{
  "ts": "2020-09-07T13:05:25.370737",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хватит новых отсутков"
}
{
  "ts": "2020-09-07T13:05:27.345718",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "все все поняли"
}
{
  "ts": "2020-09-07T13:05:28.478203",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "))))))))))))))))))"
}
{
  "ts": "2020-09-07T13:05:31.883970",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-09-07T13:05:34.398822",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T13:05:42.421580",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ще хотел 1 запустить"
}
{
  "ts": "2020-09-07T13:05:59.100733",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты что там виагы закупил что ли или транквилизатор"
}
{
  "ts": "2020-09-07T13:06:01.530995",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "))))) разошелся"
}
{
  "ts": "2020-09-07T13:06:20.432766",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Подпростыл купил себе Колдрекса - полегчало"
}
{
  "ts": "2020-09-07T13:06:40.566742",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "6 машин запушено"
}
{
  "ts": "2020-09-07T13:07:10.935683",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "111"
}
{
  "ts": "2020-09-07T13:07:12.235133",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "100 плюс 12 минус 1"
}
{
  "ts": "2020-09-07T13:07:21.602390",
  "from": "admintest@q3mcco35auwcstmt.onion",
  "to": "revers@q3mcco35auwcstmt.onion",
  "body": "Привет я по поводу работы админом, viper сказал тебе написать"
}
{
  "ts": "2020-09-07T13:07:23.192976",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да я видел"
}
{
  "ts": "2020-09-07T13:07:28.125023",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "как быстро все пометили"
}
{
  "ts": "2020-09-07T13:07:32.907002",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "спс"
}
{
  "ts": "2020-09-07T13:07:38.453520",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Eset    \nОбновил\n\"Файл - https://qaz.im/load/SAebkh/SfSi72\n123\"\nhttps://prnt.sc/ud0wor\nсканирование архива - угроз не выявлено \nhttps://prnt.sc/ud0xsu\nсканирование файла из архива - угроз не выявлено"
}
{
  "ts": "2020-09-07T13:07:40.064298",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я думал"
}
{
  "ts": "2020-09-07T13:07:43.623804",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тут сносит Есет"
}
{
  "ts": "2020-09-07T13:07:44.920796",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а он молчит"
}
{
  "ts": "2020-09-07T13:07:56.776880",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Отрубаю? машины или пусть еще поиграют?"
}
{
  "ts": "2020-09-07T13:08:01.058935",
  "from": "viper@q3mcco35auwcstmt.onion",
  "to": "revers@q3mcco35auwcstmt.onion",
  "body": "привет там новый админ должен тебе написать"
}
{
  "ts": "2020-09-07T13:08:34.824287",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "На этом файле детектит Тренд микро и Софос"
}
{
  "ts": "2020-09-07T13:09:36.675823",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "admintest@q3mcco35auwcstmt.onion",
  "body": "привет ага"
}
{
  "ts": "2020-09-07T13:09:49.939786",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "ага привет"
}
{
  "ts": "2020-09-07T13:09:52.440387",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "уже общаемся"
}
{
  "ts": "2020-09-07T13:12:20.013279",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "все"
}
{
  "ts": "2020-09-07T13:12:24.561934",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а что это за файл"
}
{
  "ts": "2020-09-07T13:12:25.794346",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "такой чистый"
}
{
  "ts": "2020-09-07T13:12:27.793514",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а деф"
}
{
  "ts": "2020-09-07T13:12:33.281330",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чего его в рабоут не дали"
}
{
  "ts": "2020-09-07T13:12:57.328850",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я деф отключил"
}
{
  "ts": "2020-09-07T13:13:00.843251",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Деф палит"
}
{
  "ts": "2020-09-07T13:13:03.947508",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а понял"
}
{
  "ts": "2020-09-07T13:13:05.964095",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так"
}
{
  "ts": "2020-09-07T13:13:07.041216",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "щас сборку"
}
{
  "ts": "2020-09-07T13:13:07.649200",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вана"
}
{
  "ts": "2020-09-07T13:13:08.997577",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "естируют"
}
{
  "ts": "2020-09-07T13:13:45.404361",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "13 миллионов - хорошая сумма дохода )"
}
{
  "ts": "2020-09-07T13:16:40.632942",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-09-07T13:17:21.399634",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "еще плз не забудь про 3-ю впс под биткойн-ноду (под Linux)"
}
{
  "ts": "2020-09-07T13:18:19.869696",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "Привет, друже."
}
{
  "ts": "2020-09-07T13:19:12.140552",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ты дал пока две из трех -- виндовую и линуксовую. Надо еще вторую линуксовую. (было три впс на хостинге viasky, вот ты их обещал заенить на хостинг itldc.com)"
}
{
  "ts": "2020-09-07T13:19:45.032825",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "под биткойн-ноду надо чтобы было 16 гб памяти и 2 тера диска"
}
{
  "ts": "2020-09-07T13:20:57.176274",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Бро, Буер нужен с иконкой пдф."
}
{
  "ts": "2020-09-07T13:23:28.603113",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T13:24:16.490147",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-09-07T13:24:30.773532",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-09-07T13:24:41.883926",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "оно72 Деф косит при старте"
}
{
  "ts": "2020-09-07T13:24:43.621308",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Microsoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\ono72\\ono72.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSecurity intelligence Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:24:49.951121",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "У меня мессенджер заглючил и я не прочитал сообщения. Видел, что были новые, но прочитать не смог..."
}
{
  "ts": "2020-09-07T13:24:57.763439",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "На 10"
}
{
  "ts": "2020-09-07T13:25:00.036072",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "можешь, пожалуйста, их повторить"
}
{
  "ts": "2020-09-07T13:25:04.745220",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "на 2019 - норм стартануло"
}
{
  "ts": "2020-09-07T13:25:08.072702",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Тебя передали от меня Кактусу. Спишись с ним."
}
{
  "ts": "2020-09-07T13:25:37.434192",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "у меня нет такого контакта"
}
{
  "ts": "2020-09-07T13:25:40.073558",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "kaktus@q3mcco35auwcstmt.onion"
}
{
  "ts": "2020-09-07T13:26:08.760287",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ок, спасибо"
}
{
  "ts": "2020-09-07T13:26:41.372141",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Не за что! Успехов! Пиши, если что... )))"
}
{
  "ts": "2020-09-07T13:27:05.540695",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "а так то тз про бэкдор уже неактуально?"
}
{
  "ts": "2020-09-07T13:27:12.343599",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Buer перезалил"
}
{
  "ts": "2020-09-07T13:27:28.163332",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "актуально, Кактус на этом же сидит"
}
{
  "ts": "2020-09-07T13:27:51.704702",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Просто, меня разгрузили"
}
{
  "ts": "2020-09-07T13:28:01.149876",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "понятно)"
}
{
  "ts": "2020-09-07T13:28:10.168822",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-09-07T13:28:30.561472",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "ajrec сказал, что меня в твою группу перевели"
}
{
  "ts": "2020-09-07T13:28:46.877747",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T13:32:47.777613",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "бро все норм с ним берем"
}
{
  "ts": "2020-09-07T13:32:48.602860",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я не могу сейчас к кошельку подключиться"
}
{
  "ts": "2020-09-07T13:32:48.610375",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ты можешь на другой кош мне скинуть? я с ним договорился что завьра ему отправлю"
}
{
  "ts": "2020-09-07T13:32:48.632298",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это за что"
}
{
  "ts": "2020-09-07T13:32:48.633493",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[18:02:25] <buza> извини за позавчерашнее, я был неправ"
}
{
  "ts": "2020-09-07T13:32:48.637097",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "с бузой обсудили его ситуацию - ему нужна помощь, он зашивается\nпредложил помочь как профу с хакерами и программистами, он подумает\nдолжно решить многое у него"
}
{
  "ts": "2020-09-07T13:32:48.638291",
  "from": "kevin@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[17:52:05] <poll> hi. babok skinyli. seichas budu kidat sterny \n[17:54:12] <Kevin> привет. \n[17:54:16] <Kevin> да он не в сети чет \n[17:56:29] <Kevin> можешь мне закинуть, не играет роли. \n[18:01:14] <poll> ne bro.. vi tam sami poreshaete potom \n[18:01:40] <Kevin> ну ок."
}
{
  "ts": "2020-09-07T13:32:48.640277",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "\n+\nArneg SpA \n173.231.116.10\n190329-01 \nKEVIN\nltMZxRFjyelnCCObyiaeTyXLrsWSescS\nkatsupport@protonmail.com\nbositasi1986@protonmail.com:DZe9BqkFkI:+13025855339 \ngaiterberesp1986@protonmail.com:fbsDLRimWA:+18604046189\n39 serv + 94 comps + nas ?? ???????? ??????? +?????? ????? ???????\nDomain:arnegdml\nWebsite:https://www.arneg.ca\nhttps://www.zoominfo.com/c/arneg-canada-inc/343411480\nRevenue:$50 Million | Employees:12 | CA\nDOCS ~(2,5)\nhttps://www.sendspace.com/file/ader6z \nhttps://www.sendspace.com/delete/ader6z/afb64e00a6d445f2f51f2a248479bb69 \nhttps://www.sendspace.com/file/zxg76d \nhttps://www.sendspace.com/delete/zxg76d/b57b11af20963ab835317629fcf833b8\nhttps://dropfiles.org/J4XWOUQB\n\n\n\n20BTC*0.5=10BTC"
}
{
  "ts": "2020-09-07T13:32:48.641899",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "с 20:00 по мск"
}
{
  "ts": "2020-09-07T13:32:48.642596",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "криптеров собрали вех кого нашли в паблике\nсегодня день тестирования всех криптеров будет\nиз онлайна подтянется бентли помогать офис тестировщикам"
}
{
  "ts": "2020-09-07T13:32:48.643410",
  "from": "ceram@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Добрый день.\nЯ новый сотрудник. \nПроинструктируйте меня пожалуйста."
}
{
  "ts": "2020-09-07T13:32:48.644215",
  "from": "ceram@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Да, новенький. Я говорил Сергею Иванову - salamander, что я работаю бесплатно, начинающий программист. Мне нужен сначала наставник. В дальнейшем как втянусь, готов стать полноценным членом вашей команды. Стека нет, изучил С++ до классов. Но не знаю как их применять. Прошу взять меня в вашу команду."
}
{
  "ts": "2020-09-07T13:32:48.647163",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "стерн, сделай плиз доступ"
}
{
  "ts": "2020-09-07T13:32:48.647897",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "вообще печально все у меня пока что(("
}
{
  "ts": "2020-09-07T13:32:48.649267",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "связались со всеми криптерами\n17 человек с эксплойта\nчасть ответили\nждем ответ от остальных\nэто проблема под х64 найти\nждем\n\nс бузой на час разминулись сегодня"
}
{
  "ts": "2020-09-07T13:32:48.650712",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "plus ehe mne dokinuli malca kto kidal 57.17.. 2.1 dokinuli, razvel hto bi dobavili to toi summi v dol na kotruu mi dogovarivalis, hto padenie kursa ne ebet."
}
{
  "ts": "2020-09-07T13:32:48.651833",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "poetomy kidau 8BTC+1btc v schet dolga staff."
}
{
  "ts": "2020-09-07T13:32:48.652629",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "\n03.09 \n71.173.79.26\ntot794 m0r115\nSEDONA2.ssi-local.com\na12s34d56f78@outlook.com\nbentderstlinpart1987@protonmail.com:7kOnZ0xSuB:+17073028611 \nconcbuzzmittcou1982@protonmail.com:cDlKFujlzd:+15307718893\naOtzWnJsiUgpKSVOrtpZisKbQvVKjFac\n26serv + 50comps\n3tb+2tb nas+backup servs crypt\ndomain: ssi-local.com\nsite: www.seacoastsecurity.com\nzoominfo: https://www.zoominfo.com/c/seacoast-security-inc/34275725 \ndocs:\nhttps://www.sendspace.com/file/6awviu\nhttps://www.sendspace.com/delete/6awviu/97bfde27307cf1aa6db34af81227e9a5\nhttps://www.sendspace.com/file/iovkhr\nhttps://www.sendspace.com/delete/iovkhr/f5be745c3a9f7d737b116f0ee30ab6e0\nhttps://www.sendspace.com/file/po3pmb\nhttps://www.sendspace.com/delete/po3pmb/69615fce343cc4d1e8240aa24e6bb5d5\nhttps://www.sendspace.com/file/518lfk\nhttps://www.sendspace.com/delete/518lfk/04a051d1e3e0ede4a61e0830bc9017b9\nhttps://www.sendspace.com/file/wor51k\nhttps://www.sendspace.com/delete/wor51k/ae1a5c5616f3a4c8e08c683878a31ab7\nhttps://www.sendspace.com/file/1vgooo\nhttps://www.sendspace.com/delete/1vgooo/cf91d0951582f51e82d7ef57c6e1ac3b \n\n\n14BTC*0.5=7BTC"
}
{
  "ts": "2020-09-07T13:32:48.653863",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[09:29:57] <mango> ку \n<mango> бро надо соксы оплатить ребятам \n\n\n[09:29:00] <Support> 3CF84ihHghMTW2BRAB7taQ7HMEXAuNmWBJ \n[09:29:05] <Support> Добавил +1 мес\n[09:29:20] <bomba777> ок, ща к вечеру ближе босс появится оплатим тогда \n[09:29:22] <bomba777> 500 да?\n[09:29:27] <Support> Да\n[09:29:31] <bomba777> ок\n[09:29:31] <Support> Ок, хорошо"
}
{
  "ts": "2020-09-07T13:32:48.654895",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ворке просят скинуть те акки которые невалидные"
}
{
  "ts": "2020-09-07T13:32:48.656125",
  "from": "steller@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет. \nМеня следующие 2 недели с 14го не будет, если что."
}
{
  "ts": "2020-09-07T13:32:48.657611",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T13:32:48.658711",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "пока что то делают"
}
{
  "ts": "2020-09-07T13:32:48.659833",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "молчат"
}
{
  "ts": "2020-09-07T13:32:48.661105",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "значит точно не сегодня"
}
{
  "ts": "2020-09-07T13:32:48.662348",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "просил бентли информировать с утра"
}
{
  "ts": "2020-09-07T13:32:48.663689",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "нет все палится"
}
{
  "ts": "2020-09-07T13:32:48.665024",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это последний репорт от бузы в 14 00"
}
{
  "ts": "2020-09-07T13:32:48.978115",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/2zDk43/kiHkQR\nDelete: https://qaz.im/index.php?a=delete&q=274416415\nPass: dSQERSADQSDFASDFS"
}
{
  "ts": "2020-09-07T13:32:50.134581",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": ")"
}
{
  "ts": "2020-09-07T13:33:08.633744",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "boby@q3mcco35auwcstmt.onion",
  "body": "2+3=?"
}
{
  "ts": "2020-09-07T13:34:41.340895",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "слушай"
}
{
  "ts": "2020-09-07T13:34:45.983659",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ты когда мне botadmin"
}
{
  "ts": "2020-09-07T13:34:48.727945",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сдоступ скидывал"
}
{
  "ts": "2020-09-07T13:34:50.967771",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "найди в логе"
}
{
  "ts": "2020-09-07T13:34:52.858783",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "последнюю дату"
}
{
  "ts": "2020-09-07T13:35:35.992214",
  "from": "viper@q3mcco35auwcstmt.onion",
  "to": "revers@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T13:35:37.552723",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "15.06"
}
{
  "ts": "2020-09-07T13:35:48.879771",
  "from": "viper@q3mcco35auwcstmt.onion",
  "to": "revers@q3mcco35auwcstmt.onion",
  "body": "тогда оформляю ему акк"
}
{
  "ts": "2020-09-07T13:35:55.254107",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T13:36:22.664214",
  "from": "revers@q3mcco35auwcstmt.onion",
  "to": "viper@q3mcco35auwcstmt.onion",
  "body": "расскажи только чем мы занимаемся что бы он понимал с чем ему работать прийдется а то он админа работу ищет )"
}
{
  "ts": "2020-09-07T13:37:09.465436",
  "from": "viper@q3mcco35auwcstmt.onion",
  "to": "revers@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T13:37:24.177440",
  "from": "mentos@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T13:37:50.506722",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "а тебе стерн доплачивает за тим-лидерство?"
}
{
  "ts": "2020-09-07T13:38:17.099835",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Нет. Он сказал подумает."
}
{
  "ts": "2020-09-07T13:38:26.280549",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T13:38:50.208939",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-09-07T13:39:09.997178",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Даш новый пароль к botadmin?"
}
{
  "ts": "2020-09-07T13:39:16.438736",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "картер ну че с ним?"
}
{
  "ts": "2020-09-07T13:39:48.644715",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "я поллу отправил на оплату, жду когда инвойс закроеттся"
}
{
  "ts": "2020-09-07T13:40:04.390501",
  "from": "talar@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет. дам но позже"
}
{
  "ts": "2020-09-07T13:40:22.547195",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "А как мен тестировать ? )"
}
{
  "ts": "2020-09-07T13:40:41.567751",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет, по тройке, пока только jim готов, можно его сделать, либ и тот хоф пока чистит, делать когда всё будет готово? Или сейчас сделать джим?\nПо кодерам для хофа, он сказал мне что нужно обдумать, позже напишет мне, по людям. \nдля дерека людей со знанием английского ищу, пока нашел только двоих,  должны отписаться мне, сделают жабу для них\n\nМожешь пожалуйста скинуть на прокладки 491 до следующего пн,эту неделю еще поделаю прокладки, потом можно будет уже сбавить обороты, поменьше делать \n38kTS4ozEfFtqAZPsDvR8EASNTELvWCQPn - кош рабочий"
}
{
  "ts": "2020-09-07T13:40:57.875079",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ld1 4 детекта на Дефе"
}
{
  "ts": "2020-09-07T13:41:07.138979",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "1.win 10"
}
{
  "ts": "2020-09-07T13:41:42.343213",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Behavior:Win32/DefenseEvasion.KQ!ml\n \tID: 2147738383\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\ld1\\Ld1.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSecurity intelligence Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:41:54.507174",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Остальные 3 - на 2019"
}
{
  "ts": "2020-09-07T13:42:14.441373",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Behavior:Win32/DefenseEvasion.VF!ml\n \tID: 2147738669\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ld1\\Ld1.exe; process:_pid:2900,ProcessStart:132439591725449632\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Users\\Administrator\\Downloads\\ld1\\Ld1.exe\n \tSignature Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:42:36.067056",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Behavior:Win32/DefenseEvasion.VF!ml\n \tID: 2147738669\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ld1\\Ld1.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:42:57.820572",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Behavior:Win32/DefenseEvasion.VF!ml\n \tID: 2147738669\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ld1\\Ld1.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSignature Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:43:38.985628",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T13:43:54.453755",
  "from": "rand@q3mcco35auwcstmt.onion",
  "to": "many@q3mcco35auwcstmt.onion",
  "body": "Салам"
}
{
  "ts": "2020-09-07T13:44:26.691794",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "talar@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T13:46:46.518571",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-09-07T13:47:39.724379",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "напиши пожалуйста следующее:"
}
{
  "ts": "2020-09-07T13:47:57.994768",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "1) какой у тебя график работы - т.е. дни недели и время, когда ты в этом чате бываешь"
}
{
  "ts": "2020-09-07T13:47:58.519362",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "2) давно ты в этой команде работаешь - это твой первый здесь проект или нет?"
}
{
  "ts": "2020-09-07T13:48:12.602915",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Behavior:Win32/DefenseEvasion.KQ!ml"
}
{
  "ts": "2020-09-07T13:48:24.010367",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Так палит не криптованный"
}
{
  "ts": "2020-09-07T13:48:31.631983",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "и пришли мне свое ТЗ, которое тебе ajrec или buza выдал"
}
{
  "ts": "2020-09-07T13:48:42.251483",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "только обязательно в запароленном архиве"
}
{
  "ts": "2020-09-07T13:48:45.086956",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "через сервис типа https://qaz.im"
}
{
  "ts": "2020-09-07T13:48:55.460296",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Это на чем?"
}
{
  "ts": "2020-09-07T13:49:04.697175",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "график по рабочим дням с 11 до 17 я в онлайне"
}
{
  "ts": "2020-09-07T13:49:08.944039",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ld1_gr_1"
}
{
  "ts": "2020-09-07T13:49:25.478162",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "На server 2019"
}
{
  "ts": "2020-09-07T13:49:40.682029",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Если с именем document"
}
{
  "ts": "2020-09-07T13:49:54.980675",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Там еще и имена играют важную роль"
}
{
  "ts": "2020-09-07T13:50:04.744703",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "У тебя работает https://scrytnuuszglaugg.onion?"
}
{
  "ts": "2020-09-07T13:50:20.321773",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Упала тоже"
}
{
  "ts": "2020-09-07T13:51:47.118330",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "недавно, с середины августа. Поначалу мне ajrec почти каждый день присылал новую информацию для ознакомления. Потом прислал ТЗ, вроде как мы должны были его обсудить, но так и не получилось этого сделать"
}
{
  "ts": "2020-09-07T13:52:44.774389",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "по файлу тебе доложили?"
}
{
  "ts": "2020-09-07T13:52:46.587536",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "нет пока"
}
{
  "ts": "2020-09-07T13:52:58.810470",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "+ там кто то ворует по 1-2 бота из бк и удаляет их"
}
{
  "ts": "2020-09-07T13:53:13.928488",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Машина для теста бк свободна?"
}
{
  "ts": "2020-09-07T13:53:34.295490",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ща загружу"
}
{
  "ts": "2020-09-07T13:53:46.739137",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Спс"
}
{
  "ts": "2020-09-07T13:54:26.196233",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет)"
}
{
  "ts": "2020-09-07T13:54:32.322626",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T13:54:36.646839",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сейчас сервер отрубили откуда БК качается. Это повлияет на тест?"
}
{
  "ts": "2020-09-07T13:54:37.992497",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Я по поводу оплаты"
}
{
  "ts": "2020-09-07T13:54:50.882683",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "сроки у тебя по ТЗ определены какие?"
}
{
  "ts": "2020-09-07T13:54:55.199926",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "тз сейчас пришлю"
}
{
  "ts": "2020-09-07T13:55:12.052634",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "da6 детектит через 1-2 минуты после старта на 10"
}
{
  "ts": "2020-09-07T13:55:29.127436",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Trojan:Win32/Wacatac.G!ml\n \tID: 2147749376\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\da6\\da6.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:55:33.002334",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "на 2019"
}
{
  "ts": "2020-09-07T13:55:51.103960",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\da6\\da6.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.693.0, AS: 1.323.693.0, NIS: 1.323.693.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T13:56:17.015028",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "3QqAx1R3pju72ox6gJkxNA2hEutdaeyzCt"
}
{
  "ts": "2020-09-07T13:56:41.325486",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T13:57:26.674807",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Сервер с которого бк подгружает файл?"
}
{
  "ts": "2020-09-07T13:57:35.436635",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-07T13:58:01.189245",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "249 077 172"
}
{
  "ts": "2020-09-07T13:58:06.407960",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "da5g75"
}
{
  "ts": "2020-09-07T13:58:20.058375",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "нет. у меня даже нет конкретной части, которой нужно заниматься. Было тз, посмотри, подумай, что-то попробуй. Была задача сделать post-запрос и получить номер актуальной версии и подпись файла на сервере. И дальше этого не пошло"
}
{
  "ts": "2020-09-07T13:58:32.097247",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Может повлиять. Давай пока так проверим"
}
{
  "ts": "2020-09-07T13:58:54.595743",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага заодно пойме в чем дело в лоадере или в само бк"
}
{
  "ts": "2020-09-07T13:59:13.585646",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "я сегодня хотел у ajrec попросить какую-то конкретную часть на разработку и уже целенаправленно начать ее делать. А он сказал, что меня в твою группу определили"
}
{
  "ts": "2020-09-07T13:59:48.577828",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Бк когда пускают в работу, жертве отправляется ссылка на скачивание бк?"
}
{
  "ts": "2020-09-07T14:00:14.613489",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да на скачивание лоадера. А Лоадер уже запускает сам БК"
}
{
  "ts": "2020-09-07T14:00:38.402306",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Лоадер мы и криптуем"
}
{
  "ts": "2020-09-07T14:01:16.554903",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Там на прямую идет скачивание лоадера как .exe сразу?"
}
{
  "ts": "2020-09-07T14:01:46.516491",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "нет там запускается лоаер вообще без сохранения на жесткий диск в памяти"
}
{
  "ts": "2020-09-07T14:02:07.957050",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Но заливаю бекдор я в ехе"
}
{
  "ts": "2020-09-07T14:02:40.564482",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Еще насколько я знаю он шифроуется хор шифрованием на сервере и распаковывается лоадером"
}
{
  "ts": "2020-09-07T14:02:51.682880",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "И запускается"
}
{
  "ts": "2020-09-07T14:03:37.541422",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "по файлу вана"
}
{
  "ts": "2020-09-07T14:03:40.923349",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что он дал"
}
{
  "ts": "2020-09-07T14:03:42.896147",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "[16:57:57] <target> 1.Eset ок\n2.Bit Defender ок\n3. Sophos ок\n4.Webroot Virus\n5.Trendmicro ok\n7.Symantec Virus\n8. Windows Defender ok \n[16:58:00] <target> это отчет по новому файлу \n[16:58:01] <target> вана \n[16:58:13] <buza> какая группа? \n[16:58:23] <target> хз \n[16:58:23] <buza> 1 или one  ? \n[16:58:28] <target> просто я попросил айл \n[16:58:32] <target> для тестировщиков \n[16:58:40] <target> попрактиковаться в чеке \n[16:58:49] <target> и ван скинул \n[16:58:55] <target> one \n[16:58:58] <target> группа \n[16:59:33] <buza> а \n[16:59:41] <buza> ну это чисто тестовый \n[16:59:46] <buza> не для продажи ) \n[17:00:06] <buza> слушай, вот еще один момент \n[17:00:10] <target> 1.Eset\nОбновил\nФайл - https://qaz.im/load/FYi35b/5RBNHS\nhttps://prnt.sc/ud1nq5\nсканирование архива - угроз не обнаружено\nhttps://prnt.sc/ud1one\nсканирование файлов - угроз не обнаружено\nпри запуске двумя кликами,раекции АВ нет\n\n2.Bit Defender\nОбновил\nФайл - https://qaz.im/load/FYi35b/5RBNHS\nhttps://prnt.sc/ud134d\nсканирование архива - угроз не обнаружено\nhttps://prnt.sc/ud1pxd\nсканирование файлов - угроз не обнаружено\nпри запуске двумя кликами,раекции АВ нет\n\n   Sophos\n   Обновил\n   Файл - https://qaz.im/load/FYi35b/5RBNHS\n   https://prnt.sc/ud1a9k\n   сканирование архива - угроз не обнаружено\n   https://prnt.sc/ud1mm2\n   сканирование файлов - угроз не обнаружено\n   при запуске двумя кликами,раекции АВ нет\n\n4.Webroot\nОбновил\nФайл - https://qaz.im/load/FYi35b/5RBNHS\nhttps://prnt.sc/ud1ftb\nсканирование архива - угроз не обнаружено\nhttps://prnt.sc/ud1jqk\nсканирование файла- видит угрозу\nПри открытии файла видит угрозу\nhttps://prnt.sc/ud1hvy\n\n5.Trendmicro\nОбновил\nФайл - https://qaz.im/load/FYi35b/5RBNHS\nhttps://prnt.sc/ud1feq\nсканирование архива - угроз не обнаружено\nhttps://prnt.sc/ud1k76\nсканирование файла- не видит угрозу\nпри запуске двумя кликами,раекции АВ нет\n\n7.Symantec\nОбновил\nФайл - https://qaz.im/load/FYi35b/5RBNHS\nhttps://prnt.sc/ud1eh1\nсканирование архива - угроз не обнаружено\nhttps://prnt.sc/ud1l7z\nсканирование файла- видит угрозу,удаляет с рабочего стола\nhttps://prnt.sc/ud1lg1\n\n   Windows Defender\n   Обновил\n   Файл - https://qaz.im/load/FYi35b/5RBNHS\n   утилита угроз не видит ни в архиве,ни в файле\n   на два клика реакции нет"
}
{
  "ts": "2020-09-07T14:04:00.900610",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Начинаю скачивать и запускать"
}
{
  "ts": "2020-09-07T14:04:30.809468",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Хорошо. Даш мне прогнат на нашей ферме?"
}
{
  "ts": "2020-09-07T14:04:46.424539",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T14:06:05.454837",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Запустил"
}
{
  "ts": "2020-09-07T14:07:01.996250",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T14:09:00.797482",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/TaeDeH/SF29ZH"
}
{
  "ts": "2020-09-07T14:09:00.839242",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "[16:05:12] <van> Dfnc(fdsw32bh\nDownload: https://qaz.im/load/FYi35b/5RBNHS\n\nЛоадер группы one.\nБэкдор залил в группу."
}
{
  "ts": "2020-09-07T14:09:08.902167",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Dfnc(fdsw32bh"
}
{
  "ts": "2020-09-07T14:09:11.965242",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "это тз"
}
{
  "ts": "2020-09-07T14:09:26.885667",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "А такой запрос в браузере проходит http://51.89.125.28:12234/api/v8"
}
{
  "ts": "2020-09-07T14:09:30.366135",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-07T14:11:02.465624",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Это тестовый сервер, тоже не работает."
}
{
  "ts": "2020-09-07T14:11:36.597847",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-07T14:12:48.524552",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Буер детектит"
}
{
  "ts": "2020-09-07T14:12:49.722359",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Windows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\buere\\buere.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:13:01.013075",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "будешь работать?"
}
{
  "ts": "2020-09-07T14:13:19.153212",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\ProgramData\\6dff705489fd60015f5d\\gennt.exe; process:_pid:4364,ProcessStart:132439614141679391; winlogonshell:_HKLM\\SOFTWARE\\Wow6432Node\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\\\SHELL: \"C:\\ProgramData\\6dff705489fd60015f5d\\gennt.exe\"\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\ProgramData\\6dff705489fd60015f5d\\gennt.exe\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:13:24.793113",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "хмм"
}
{
  "ts": "2020-09-07T14:13:28.386294",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "и"
}
{
  "ts": "2020-09-07T14:13:30.828504",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "как проверить?"
}
{
  "ts": "2020-09-07T14:13:38.516649",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "уже разбираемся"
}
{
  "ts": "2020-09-07T14:13:40.264446",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\ProgramData\\6dff705489fd60015f5d\\gennt.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:13:44.434608",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "чей то файл googleupdate.exe"
}
{
  "ts": "2020-09-07T14:13:47.378435",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и еще какой то"
}
{
  "ts": "2020-09-07T14:13:57.878732",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и самое смешное"
}
{
  "ts": "2020-09-07T14:14:11.230137",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "\n[14:52:59] <target> + там кто то ворует по 1-2 бота из бк и удаляет их\n[15:13:24] <Stern> хмм\n[15:13:30] <Stern> как проверить?\n[15:13:38] <target> уже разбираемся\n[15:13:44] <target> чей то файл googleupdate.exe\n[15:13:48] <target> и еще какой то"
}
{
  "ts": "2020-09-07T14:14:19.385840",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "он ставит XXX-PC команды - ханипотам"
}
{
  "ts": "2020-09-07T14:14:31.678393",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "по краенй мере то что сейчас обнаружили"
}
{
  "ts": "2020-09-07T14:14:34.581818",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T14:14:38.304818",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "талар сказал 1-2 пропадают в день"
}
{
  "ts": "2020-09-07T14:14:52.768925",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и еще обнаружили дыру\nчто любой с ЛЮБЫМ паролем может зайти в админку"
}
{
  "ts": "2020-09-07T14:14:58.792078",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "неделю как баг этот"
}
{
  "ts": "2020-09-07T14:15:01.109825",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "ghbdtn"
}
{
  "ts": "2020-09-07T14:15:03.205783",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T14:15:04.798008",
  "from": "gus@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Привет :)"
}
{
  "ts": "2020-09-07T14:15:06.305454",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет. Да Пол жаловался сегодня. Талар перебирает сервер."
}
{
  "ts": "2020-09-07T14:15:07.210667",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "сейчас админку в офф отправили"
}
{
  "ts": "2020-09-07T14:15:10.104289",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "и это первый проект, в котором еще не начал участвовать"
}
{
  "ts": "2020-09-07T14:15:10.321638",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и разбираемся"
}
{
  "ts": "2020-09-07T14:15:29.567108",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-09-07T14:15:32.036250",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Талар перебирает сервер."
}
{
  "ts": "2020-09-07T14:15:57.272322",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да я знаю"
}
{
  "ts": "2020-09-07T14:15:57.276450",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я не понял а что это за билд выше"
}
{
  "ts": "2020-09-07T14:15:58.590881",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "почему он чистый такой"
}
{
  "ts": "2020-09-07T14:15:59.286916",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "ceram@q3mcco35auwcstmt.onion",
  "body": "отлично"
}
{
  "ts": "2020-09-07T14:15:59.772790",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "и мы не рабоатем им"
}
{
  "ts": "2020-09-07T14:16:18.823893",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Это последняя сборка сегодняшняя. Криптуем."
}
{
  "ts": "2020-09-07T14:18:41.306652",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я не верю в то что это рисерчеры какие то"
}
{
  "ts": "2020-09-07T14:18:44.110990",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "как думает буза"
}
{
  "ts": "2020-09-07T14:18:52.085995",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "так как доступ в админку через тор"
}
{
  "ts": "2020-09-07T14:19:04.437734",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "значит это тот, кто хотя бы раз заходил в админку или знает урл"
}
{
  "ts": "2020-09-07T14:19:16.333626",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и попал туда либо с паролем админа либо с любым паролем"
}
{
  "ts": "2020-09-07T14:19:33.043983",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и знает что у нас за боты там, тоесть не какой то залетный, который бы увел все"
}
{
  "ts": "2020-09-07T14:19:42.512413",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а целенаправленно ставит 1-2 бота (со слов талара что пропадают 1-2 в день)"
}
{
  "ts": "2020-09-07T14:19:48.883872",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и куда то их перегружает"
}
{
  "ts": "2020-09-07T14:20:19.747445",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": " <Ван> да просто http-запрос в админку, получает бэкдор, на диск его не пишет, запуск бэкдора бесфайловый\n[21:19:33] <bentley> А БК сам шифрованный?\n[21:19:44] <Ван> да\n[21:19:59] <bentley> Получается его лоадер расшифровывает и запускает \n[21:20:07] <Ван> да"
}
{
  "ts": "2020-09-07T14:20:32.827998",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и это скорее всего тот у кого проблемы с ботами на потоке"
}
{
  "ts": "2020-09-07T14:20:46.013657",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "если это вообще все так как говорит талар и буза"
}
{
  "ts": "2020-09-07T14:20:55.417715",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а не кто то из наших там эксперементирует"
}
{
  "ts": "2020-09-07T14:21:12.737689",
  "from": "gus@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "Походу надо вновь переподнимать отр"
}
{
  "ts": "2020-09-07T14:21:24.341588",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "это странно"
}
{
  "ts": "2020-09-07T14:21:27.552854",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "таких людей у меня нет"
}
{
  "ts": "2020-09-07T14:21:30.432110",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ущерных"
}
{
  "ts": "2020-09-07T14:21:34.590446",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ущербных"
}
{
  "ts": "2020-09-07T14:21:47.687571",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T14:21:59.839418",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "таргет"
}
{
  "ts": "2020-09-07T14:22:02.162172",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "у тебя только один модуль получается? А тз \"бэкдор\" не было?"
}
{
  "ts": "2020-09-07T14:22:05.284821",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "привет какдела"
}
{
  "ts": "2020-09-07T14:22:19.369342",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "давай"
}
{
  "ts": "2020-09-07T14:22:23.169651",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "тогда пусть буза выясняет чей это файл там стоит\nкуда пропадают 1-2 бота\nвозможно кто то из наших там что то ставит и тестирует и удаляет зачем то"
}
{
  "ts": "2020-09-07T14:22:25.621867",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "нормально"
}
{
  "ts": "2020-09-07T14:22:32.596691",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "band@q3mcco35auwcstmt.onion",
  "body": "посмоти там таймауты на чекере везде"
}
{
  "ts": "2020-09-07T14:22:35.451191",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я не оплатил baly"
}
{
  "ts": "2020-09-07T14:22:40.339212",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "band@q3mcco35auwcstmt.onion",
  "body": "как будто соксы умерли"
}
{
  "ts": "2020-09-07T14:22:42.076056",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "googleupdate.exe у Пола был на его боте запущен"
}
{
  "ts": "2020-09-07T14:22:46.705950",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "почему"
}
{
  "ts": "2020-09-07T14:22:49.413827",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "я же скинул тебе"
}
{
  "ts": "2020-09-07T14:22:51.742083",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "на оплаты"
}
{
  "ts": "2020-09-07T14:22:55.417336",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "надо сразу платить им"
}
{
  "ts": "2020-09-07T14:23:02.462274",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T14:23:37.823446",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ну тв ароде всегда говорил чтоб я на тебя отправлял"
}
{
  "ts": "2020-09-07T14:24:27.202230",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а скинул когла?"
}
{
  "ts": "2020-09-07T14:24:42.461421",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "было, но просто для ознакомления, какие тз бывают"
}
{
  "ts": "2020-09-07T14:24:50.177878",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "не для работы"
}
{
  "ts": "2020-09-07T14:25:16.576709",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-09-07T14:25:36.998725",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я последнее вто от теья получил это ЗП"
}
{
  "ts": "2020-09-07T14:25:39.887346",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "СУКА ЕБАНЫЙ ТОР"
}
{
  "ts": "2020-09-07T14:25:40.702076",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, доступ к стате dr1 и da6"
}
{
  "ts": "2020-09-07T14:26:14.114984",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "нет"
}
{
  "ts": "2020-09-07T14:26:15.971239",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "я тебе ксинул тогда"
}
{
  "ts": "2020-09-07T14:26:18.318876",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "проверь раблчий кош"
}
{
  "ts": "2020-09-07T14:26:36.011417",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "kagas@q3mcco35auwcstmt.onion",
  "body": "когда все будет готово"
}
{
  "ts": "2020-09-07T14:26:57.504550",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "gus@q3mcco35auwcstmt.onion",
  "body": "Походу надо вновь переподнимать отр"
}
{
  "ts": "2020-09-07T14:26:57.560997",
  "from": "professor@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "СУКА ЕБАНЫЙ ТОР"
}
{
  "ts": "2020-09-07T14:28:17.546588",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "это на одном бк только?"
}
{
  "ts": "2020-09-07T14:28:33.710902",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "надо узнать у кого есть доступ к этому бк админке"
}
{
  "ts": "2020-09-07T14:28:37.980563",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это в адмике бк"
}
{
  "ts": "2020-09-07T14:28:46.652489",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "dr1 детектит через 2 минуты после запуска"
}
{
  "ts": "2020-09-07T14:29:01.081346",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": " \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\dr1\\DR1.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:29:09.790386",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "узнаем щас\nу меня подозрение что это проф\nто что он утром просил доступ к бк и видео снимал для тестиовщиков\nи кобу нову тестить хотел с видео"
}
{
  "ts": "2020-09-07T14:29:13.847092",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "пока молчит"
}
{
  "ts": "2020-09-07T14:29:14.014968",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "там одна админке на все бк ?"
}
{
  "ts": "2020-09-07T14:29:26.923460",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "буза тут панику поднял конечно, что думс уже почти форматирует диск ))"
}
{
  "ts": "2020-09-07T14:29:29.466967",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T14:29:41.283550",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Сервер отключили. Узнаю как включат"
}
{
  "ts": "2020-09-07T14:30:04.090319",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "на 10"
}
{
  "ts": "2020-09-07T14:30:19.492005",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "думс"
}
{
  "ts": "2020-09-07T14:30:27.143138",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "попроси профа"
}
{
  "ts": "2020-09-07T14:30:29.124310",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "мне отпсиаиь  тут"
}
{
  "ts": "2020-09-07T14:30:33.219666",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это 99% что его файл"
}
{
  "ts": "2020-09-07T14:30:34.918420",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и его тесты утром"
}
{
  "ts": "2020-09-07T14:30:52.777345",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "У него лагает жаба"
}
{
  "ts": "2020-09-07T14:30:53.987284",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "x86 no_logs 180кб"
}
{
  "ts": "2020-09-07T14:30:57.629578",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-07T14:31:03.628897",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "я вижу\nспроси его в рокете или слэк"
}
{
  "ts": "2020-09-07T14:31:08.743782",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": " https://qaz.im/load/fZEy6B/3RGrkY \nasm]MV/c*;)O{Q;&"
}
{
  "ts": "2020-09-07T14:31:11.208063",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "его ли это файл"
}
{
  "ts": "2020-09-07T14:31:14.726134",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "если да то все ок"
}
{
  "ts": "2020-09-07T14:31:34.529978",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Написал"
}
{
  "ts": "2020-09-07T14:31:59.169401",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "Привет, бро!"
}
{
  "ts": "2020-09-07T14:32:38.972009",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "и спроси"
}
{
  "ts": "2020-09-07T14:32:39.587053",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "пасс rgIbKTY https://www.sendspace.com/file/jlhe1l"
}
{
  "ts": "2020-09-07T14:32:41.567257",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не наша ли это коба"
}
{
  "ts": "2020-09-07T14:32:45.990421",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "должна быть наша"
}
{
  "ts": "2020-09-07T14:32:53.456929",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "если не наша то пиздец"
}
{
  "ts": "2020-09-07T14:34:11.381958",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет, по зп за 1е можно?"
}
{
  "ts": "2020-09-07T14:34:21.543853",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Сейчас посмотрит"
}
{
  "ts": "2020-09-07T14:35:08.037057",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n Admin\n2:33 PM\nминутку\nмой файл\n2:34 PM\nтак это ты взломал наш бк?)\nAdmin\n2:34 PM\nскажи что я для инструкции тестирую"
}
{
  "ts": "2020-09-07T14:35:19.851975",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "все"
}
{
  "ts": "2020-09-07T14:35:22.144567",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это был проф"
}
{
  "ts": "2020-09-07T14:35:32.489616",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ну буза, ну паникер, час тут разбирались кто это"
}
{
  "ts": "2020-09-07T14:35:49.882755",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "зато нашли баг талара в админку без пароля )))))))))"
}
{
  "ts": "2020-09-07T14:36:53.646937",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": " Admin\n2:36 PM\n\n[10:32:39] <target> и спроси \n[10:32:42] <target> пасс rgIbKTY https://www.sendspace.com/file/jlhe1l \n[10:32:42] <target> не наша ли это коба \n[10:32:46] <target> должна быть наша \n[10:32:53] <target> если не наша то пиздец \n\n\nче? там просто ехе с радомным именем\nфайл googleupdate.exe - мой"
}
{
  "ts": "2020-09-07T14:38:34.402062",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "104.243.32.42 https"
}
{
  "ts": "2020-09-07T14:38:35.996039",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "наш да?"
}
{
  "ts": "2020-09-07T14:38:36.629026",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ип"
}
{
  "ts": "2020-09-07T14:39:50.012450",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": " <hof> и что то с 173.234.155.124 тянет"
}
{
  "ts": "2020-09-07T14:40:05.405719",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "У меня такого нет в записях"
}
{
  "ts": "2020-09-07T14:40:14.381376",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ну може у профа есть"
}
{
  "ts": "2020-09-07T14:40:22.623083",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "файл то его этот"
}
{
  "ts": "2020-09-07T14:41:40.390153",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/yBf6eH/8knraF\nDelete: https://qaz.im/index.php?a=delete&q=1433018546\nPassword: b4GZkD5hHkbArNY7t2rH2k6K4na8heGi8b7hF3tdbzEt"
}
{
  "ts": "2020-09-07T14:41:41.226618",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "проверь"
}
{
  "ts": "2020-09-07T14:41:42.767362",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "он подписан?"
}
{
  "ts": "2020-09-07T14:41:46.258059",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "все ок с ним верно подписали?"
}
{
  "ts": "2020-09-07T14:42:03.134210",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "делаю"
}
{
  "ts": "2020-09-07T14:43:33.336962",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да подписан Inifinte Programming Limited"
}
{
  "ts": "2020-09-07T14:43:39.751430",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вот супер"
}
{
  "ts": "2020-09-07T14:43:42.816279",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "спс"
}
{
  "ts": "2020-09-07T14:44:38.687867",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "n(dnX4nSj8sBqklS"
}
{
  "ts": "2020-09-07T14:44:40.171951",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/s7hi2A/5Gyi3f\nDelete: https://qaz.im/index.php?a=delete&q=1589698946"
}
{
  "ts": "2020-09-07T14:45:27.275315",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "возьми ТЗ на второй модуль."
}
{
  "ts": "2020-09-07T14:46:05.292422",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "Твой проект состоит из двух частей: лоадер+бэкдор. Они автономно функционируют, но подразумевается что работать будут в связке"
}
{
  "ts": "2020-09-07T14:46:58.952050",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "в разделе приложения есть ссылка на примеры кода - если каких-то у тебя нет то я выдам"
}
{
  "ts": "2020-09-07T14:48:29.253086",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "[17:13:04] <kaktus> в кратце про проект: там два модуля, они будут работать в связке. Модуль бэкдора после разработки фактически не меняется. \n[17:13:37] <kaktus> у модуля загрузчика одна важная особенность - нужно будет его так реализовать, чтобы он проходил через несколько контрольных антивирусов \n[17:15:15] <kaktus> поэтому желательно его сразу так разрабатывать начать - чтобы легко можно было менять фрагменты и функционал"
}
{
  "ts": "2020-09-07T14:49:17.341413",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "а я за какую часть этого проекта буду отвечать?"
}
{
  "ts": "2020-09-07T14:49:28.682116",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Или эти 2 тз - это все на мне?"
}
{
  "ts": "2020-09-07T14:49:45.815746",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "оба тебе"
}
{
  "ts": "2020-09-07T14:49:54.404962",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Ух ты! Круто!"
}
{
  "ts": "2020-09-07T14:50:04.193347",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "а какие сроки?"
}
{
  "ts": "2020-09-07T14:50:28.984241",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "вот это твоя первая задача: изучи ТЗ, определи что понятно а что нет"
}
{
  "ts": "2020-09-07T14:50:36.136154",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "пришли мне список вопросов по тому, что непонятно"
}
{
  "ts": "2020-09-07T14:50:52.949831",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "и прикинь сроки, сколько тебе времени понадобится"
}
{
  "ts": "2020-09-07T14:51:05.958194",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "ок."
}
{
  "ts": "2020-09-07T14:51:16.022842",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ты заешь"
}
{
  "ts": "2020-09-07T14:51:17.319906",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "уже не смешно"
}
{
  "ts": "2020-09-07T14:51:17.578940",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "в ТЗ есть пара ньюансов, что для первой версии не аткуально"
}
{
  "ts": "2020-09-07T14:51:29.812511",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "я подготовлю дополнение к нему, завтра выдам"
}
{
  "ts": "2020-09-07T14:51:33.056691",
  "from": "bourbon@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "я сегодня посмотрю, а завтра с утра напишу вопросы"
}
{
  "ts": "2020-09-07T14:51:33.497257",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Проф ушел"
}
{
  "ts": "2020-09-07T14:51:35.959782",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "В ребут"
}
{
  "ts": "2020-09-07T14:51:37.826115",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bourbon@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T14:51:45.582504",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "не туда"
}
{
  "ts": "2020-09-07T14:51:46.248141",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": ")"
}
{
  "ts": "2020-09-07T14:51:51.011188",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "я искал ссылку в слэк"
}
{
  "ts": "2020-09-07T14:51:52.003817",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "минут 50"
}
{
  "ts": "2020-09-07T14:52:00.461041",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": ")"
}
{
  "ts": "2020-09-07T14:52:15.991184",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "\n2:51 PM\n\n[10:38:36] <target> 104.243.32.42 https \n[10:38:36] <target> наш да? \n[10:38:37] <target> ип \n[10:39:51] <target> <hof> и что то с 173.234.155.124 тянет \n[10:40:04] <doomsday> У меня такого нет в записях \n[10:40:14] <target> ну може у профа есть \n[10:40:22] <target> файл то его этот \n[10:51:16] <target> ты заешь \n[10:51:17] <target> уже не смешно \n\nAdmin\n2:52 PM\nда\nмой\nвсе ок"
}
{
  "ts": "2020-09-07T14:52:41.592217",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "спс"
}
{
  "ts": "2020-09-07T14:52:43.925791",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "думс плз"
}
{
  "ts": "2020-09-07T14:52:52.420633",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "сделайт инвайт в группу для чела по кобе\nссылку сделай"
}
{
  "ts": "2020-09-07T14:52:55.525861",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ограниченную"
}
{
  "ts": "2020-09-07T14:52:56.870518",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ты давал ее"
}
{
  "ts": "2020-09-07T14:52:59.095343",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "там что то не так пошло"
}
{
  "ts": "2020-09-07T14:53:09.978468",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "я бы помог тебе да не могу ) )) голова кругом"
}
{
  "ts": "2020-09-07T14:53:20.009315",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "все это был точно проф"
}
{
  "ts": "2020-09-07T14:53:27.013878",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "https://join.slack.com/share/zt-gzyw3tmf-YtRuG12YSfPWRAS8whWm3Q"
}
{
  "ts": "2020-09-07T14:53:29.165673",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "'nf&"
}
{
  "ts": "2020-09-07T14:53:30.089084",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Эта?"
}
{
  "ts": "2020-09-07T14:53:34.025306",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T14:53:34.681960",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "походу"
}
{
  "ts": "2020-09-07T14:53:47.071545",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "173.234.155.124\n\n\nэто ип прокладки"
}
{
  "ts": "2020-09-07T14:57:26.976968",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "И еще 3 детекта через 30 минут"
}
{
  "ts": "2020-09-07T14:57:37.603816",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 4:54:42 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n \tDetection Origin: Internet\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\conhost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:57:50.159670",
  "from": "salamandra@q3mcco35auwcstmt.onion",
  "to": "baly@q3mcco35auwcstmt.onion",
  "body": "ок не получилось на выходных. постараюсь сеголня отправить"
}
{
  "ts": "2020-09-07T14:57:55.457989",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 4:54:50 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n \tDetection Origin: Internet\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\conhost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:58:10.590602",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 4:55:04 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n \tDetection Origin: Internet\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\conhost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:58:47.112176",
  "from": "baly@q3mcco35auwcstmt.onion",
  "to": "salamandra@q3mcco35auwcstmt.onion",
  "body": "Ок, как отправите дайте знать. Что бы проверил сразу же"
}
{
  "ts": "2020-09-07T14:59:10.422705",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "dr1 3 детекта через 30 минут после запуска\n[21:57:36] <bentley> Log Name:   Microsoft-Windows-Windows Defender/Operational\nSource:    Microsoft-Windows-Windows Defender\nDate:     9/7/2020 4:54:42 PM\nEvent ID:   1116\nTask Category: None\nLevel:     Warning\nKeywords:   \nUser:     SYSTEM\nComputer:   WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n    Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n    Detection Origin: Internet\n    Detection Type: FastPath\n    Detection Source: Real-Time Protection\n    User: WIN10\\TST10ENG\n    Process Name: C:\\Windows\\System32\\conhost.exe\n    Security intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5\n\n[21:57:54] <bentley> Log Name:   Microsoft-Windows-Windows Defender/Operational\nSource:    Microsoft-Windows-Windows Defender\nDate:     9/7/2020 4:54:50 PM\nEvent ID:   1116\nTask Category: None\nLevel:     Warning\nKeywords:   \nUser:     SYSTEM\nComputer:   WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n    Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n    Detection Origin: Internet\n    Detection Type: FastPath\n    Detection Source: Real-Time Protection\n    User: WIN10\\TST10ENG\n    Process Name: C:\\Windows\\System32\\conhost.exe\n    Security intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5\n\n[21:58:09] <bentley> Log Name:   Microsoft-Windows-Windows Defender/Operational\nSource:    Microsoft-Windows-Windows Defender\nDate:     9/7/2020 4:55:04 PM\nEvent ID:   1116\nTask Category: None\nLevel:     Warning\nKeywords:   \nUser:     SYSTEM\nComputer:   WIN10\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n    Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\ளஐாஆஆாாாநணனவ\\ளஐாஆஆாாாநணனவ.exe\n    Detection Origin: Internet\n    Detection Type: FastPath\n    Detection Source: Real-Time Protection\n    User: WIN10\\TST10ENG\n    Process Name: C:\\Windows\\System32\\conhost.exe\n    Security intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T14:59:17.608861",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "https://uibegvz4hxzrqjqc.onion/log/570186991"
}
{
  "ts": "2020-09-07T15:00:30.176529",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "находит в кеше браузера файл"
}
{
  "ts": "2020-09-07T15:00:41.034333",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чере браузер качал файл?"
}
{
  "ts": "2020-09-07T15:00:43.448951",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "через"
}
{
  "ts": "2020-09-07T15:01:15.252704",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T15:01:59.746941",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "это точно наш exe ?"
}
{
  "ts": "2020-09-07T15:02:43.924462",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "C:\\Users\\TST10ENG\\AppData\\Local\\Microsoft\\Windows\\INetCache\\... странный путь"
}
{
  "ts": "2020-09-07T15:03:55.012912",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "отписал Хофу тоже про детект через 30 минут."
}
{
  "ts": "2020-09-07T15:06:17.816985",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-09-07T15:10:35.453588",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T15:27:39.523484",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "18:11:34] <deploy@q3mcco35auwcstmt.onion> На счет проверок не криптованного файла. Если запускать с именем ld1_gr_1 - не палит. Но стоило поменять имя на document получил детект Behavior:Win32/DefenseEvasion.KQ!ml. Итог нужно проверять с именем которое будет в работе использоваться"
}
{
  "ts": "2020-09-07T15:32:45.810897",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "слуш"
}
{
  "ts": "2020-09-07T15:33:13.273388",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "))"
}
{
  "ts": "2020-09-07T15:33:14.147944",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T15:34:25.357015",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "привет да"
}
{
  "ts": "2020-09-07T15:34:28.539332",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "создавай"
}
{
  "ts": "2020-09-07T15:37:20.000503",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Что с ехе файлом для морса?"
}
{
  "ts": "2020-09-07T15:37:21.786326",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ему файлы нужны"
}
{
  "ts": "2020-09-07T15:37:25.609016",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T15:37:28.256057",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "как дела с чисткой?"
}
{
  "ts": "2020-09-07T15:37:36.239805",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "8:15:00] <target> да \n[18:15:06] <target> хм \n[18:15:08] <target> .pdf \n[18:15:12] <target> мы уже давно не используем \n[18:15:16] <target> у нас Review.exe \n[18:15:18] <target> Preview.exe \n[18:15:19] <buza> неважно \n[18:15:20] <target> Print_Preview.exe \n[18:15:24] <buza> важно что по имени палится \n[18:15:25] <target> DocumentPreview.exe \n[18:15:41] <target> так он и палит пдф походу в слове\n\nпоменятйе на \n\nPreview.exe\n\n[18:15:46] <buza> а раз имя спаленное, давайте делать 100500 разных вменяемых, но уникальных имен \n[18:15:47] <target> Print_Preview.exe \n[18:15:53] <target> DocPreview.exe \n[18:16:00] <target> PreviewDocument.exe \n[18:16:03] <target> вот 4 файла разных \n[18:16:16] <target> да хть цифры в коцне добавьте \n[18:20:48] ***  Private conversation lost\n[18:20:48] *** buza is now Offline"
}
{
  "ts": "2020-09-07T15:37:46.352732",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-07T15:37:47.809096",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "эти бтс"
}
{
  "ts": "2020-09-07T15:37:49.434984",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "что ты отправлял"
}
{
  "ts": "2020-09-07T15:37:51.967675",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "лежат не тронутыми"
}
{
  "ts": "2020-09-07T15:37:56.880014",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "что там за что"
}
{
  "ts": "2020-09-07T15:38:07.539617",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, mor120"
}
{
  "ts": "2020-09-07T15:38:11.603489",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "доля с ситизен?"
}
{
  "ts": "2020-09-07T15:38:23.671742",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Выдам."
}
{
  "ts": "2020-09-07T15:38:36.929850",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "lf"
}
{
  "ts": "2020-09-07T15:38:37.904728",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T15:38:41.072150",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "не разобрался какой файл по этому линку?"
}
{
  "ts": "2020-09-07T15:39:13.018916",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "ceram@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T15:39:18.646443",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "понял спасибо"
}
{
  "ts": "2020-09-07T15:39:45.349725",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": " <bentley> dr1 детектит через 2 минуты после запуска\n[21:28:59] <bentley>     Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\TST10ENG\\Downloads\\dr1\\DR1.exe\n    Detection Origin: Local machine\n    Detection Type: FastPath\n    Detection Source: Real-Time Protection\n    User: WIN10\\TST10ENG\n    Process Name: C:\\Windows\\System32\\svchost.exe\n    Security intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T15:39:56.037312",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Это у Деплоя dr1 был"
}
{
  "ts": "2020-09-07T15:41:06.410113",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а попробуй название файла поменять"
}
{
  "ts": "2020-09-07T15:41:22.893476",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "\nвпн, на балансе 15$, нужно активировать \naprovpn.com rete4@ro.ru popo00--"
}
{
  "ts": "2020-09-07T15:41:27.005492",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "тестирую новую сборку"
}
{
  "ts": "2020-09-07T15:41:42.695255",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил мор120"
}
{
  "ts": "2020-09-07T15:41:54.497210",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T15:42:18.298417",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 1 крипт mor120"
}
{
  "ts": "2020-09-07T15:42:18.364232",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "от нода почистил, с дефендером разбираемся"
}
{
  "ts": "2020-09-07T15:42:20.406629",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Выложил оно"
}
{
  "ts": "2020-09-07T15:42:29.057179",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "завтра запустимся ?"
}
{
  "ts": "2020-09-07T15:42:43.452215",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T15:42:46.522007",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "jr"
}
{
  "ts": "2020-09-07T15:42:48.056438",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ok"
}
{
  "ts": "2020-09-07T15:42:49.249168",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "всмысле странный детект, там непонятно, на крипт или на бот"
}
{
  "ts": "2020-09-07T15:43:00.714991",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "сегодня уже работаем"
}
{
  "ts": "2020-09-07T15:43:11.499157",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "dr1ww детектит через 1 минуту после запуска"
}
{
  "ts": "2020-09-07T15:43:35.657356",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 5:41:20 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.C!ml&threatid=2147749372&enterprise=0\n \tName: Trojan:Win32/Wacatac.C!ml\n \tID: 2147749372\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\dr1ww\\DR1WW.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, N"
}
{
  "ts": "2020-09-07T15:44:03.006336",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T15:49:43.436668",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "[18:08:16] <poll> hi man \n[18:08:39] <poll> tam smotri tak ponyal vi vzayli s moih grypp botov v BC... s 4 & 55. est v rabote? \n[18:50:06] <target> привет \n[18:50:17] <target> был взят 1 бот \n[18:50:18] <target> тестово \n[18:50:22] <target> не для работы \n[18:50:25] <target> а для переброса в кобу \n[18:50:28] <target> чтобы снять видео как это делать \n[18:50:41] <target> да и если тебе жалко этого 1 ханипота \n[18:51:21] <target> то сочтемся на тех 30 что вам были скинут в работу мной \n[18:51:22] <target> хорошо? \n[18:51:23] <target> спасибо"
}
{
  "ts": "2020-09-07T15:49:45.237858",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ЛОЛ БЛЯДЬ"
}
{
  "ts": "2020-09-07T15:49:53.361338",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "это он про этого бота что проф взял в бк"
}
{
  "ts": "2020-09-07T15:49:54.840231",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "licor@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T15:50:03.364888",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "licor@q3mcco35auwcstmt.onion",
  "body": "как у тебя продвигается?"
}
{
  "ts": "2020-09-07T15:50:12.061501",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[18:08:16] <poll> hi man \n[18:08:39] <poll> tam smotri tak ponyal vi vzayli s moih grypp botov v BC... s 4 & 55. est v rabote? \n[18:50:06] <target> привет \n[18:50:17] <target> был взят 1 бот \n[18:50:18] <target> тестово \n[18:50:22] <target> не для работы \n[18:50:25] <target> а для переброса в кобу \n[18:50:28] <target> чтобы снять видео как это делать \n[18:50:41] <target> да и если тебе жалко этого 1 ханипота \n[18:51:21] <target> то сочтемся на тех 30 что вам были скинут в работу мной \n[18:51:22] <target> хорошо? \n[18:51:23] <target> спасибо"
}
{
  "ts": "2020-09-07T15:50:21.769887",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "нет слов"
}
{
  "ts": "2020-09-07T15:56:01.144414",
  "from": "licor@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет\nоформляю код\nно вообще списывался с buza на прошлой неделе"
}
{
  "ts": "2020-09-07T15:56:31.322763",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "licor@q3mcco35auwcstmt.onion",
  "body": "а, окей"
}
{
  "ts": "2020-09-07T16:01:13.650137",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "это тот бот: которого проф взял как выяснилось"
}
{
  "ts": "2020-09-07T16:02:01.284948",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "пробуй , меня пустило"
}
{
  "ts": "2020-09-07T16:05:13.239454",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "> dr1ww детектит через 1 минуту после запуска\nЗалил"
}
{
  "ts": "2020-09-07T16:06:05.444252",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "я её оставляю, не выключаю, как придёшь, пробуй зайти"
}
{
  "ts": "2020-09-07T16:08:49.976104",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T16:09:01.634480",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "0.092645 btc\nbc1qzmzg9me6t7dcl7l3msc5q8gjrqljr6qgsx5m0j"
}
{
  "ts": "2020-09-07T16:09:08.036913",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/5ydaHT/Bi6QAQ\nDelete: https://qaz.im/index.php?a=delete&q=441153649"
}
{
  "ts": "2020-09-07T16:09:13.483546",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "7mC%?lOfsB?6bno7ua9i"
}
{
  "ts": "2020-09-07T16:09:29.706765",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "офис, который используется"
}
{
  "ts": "2020-09-07T16:09:33.650541",
  "from": "fast@q3mcco35auwcstmt.onion",
  "to": "elon@q3mcco35auwcstmt.onion",
  "body": "торрент"
}
{
  "ts": "2020-09-07T16:12:47.112312",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "да пофиг это хани пот"
}
{
  "ts": "2020-09-07T16:13:13.733734",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "))))))) ок"
}
{
  "ts": "2020-09-07T16:13:48.715394",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "по бк"
}
{
  "ts": "2020-09-07T16:13:53.876139",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "мне так и не дали ответ"
}
{
  "ts": "2020-09-07T16:13:58.295479",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "сказали что будет завтра скажем"
}
{
  "ts": "2020-09-07T16:14:00.318595",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "пока все плохо"
}
{
  "ts": "2020-09-07T16:14:07.065407",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "если еще неделю так"
}
{
  "ts": "2020-09-07T16:14:09.457820",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "то вернемся к трику"
}
{
  "ts": "2020-09-07T16:15:30.853843",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "buri@q3mcco35auwcstmt.onion",
  "body": "включил"
}
{
  "ts": "2020-09-07T16:15:42.563504",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "buri@q3mcco35auwcstmt.onion",
  "body": "что-то с жабой у тебя, сообщения не доходят"
}
{
  "ts": "2020-09-07T16:16:13.938119",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "\n[17:13:54] <target> мне так и не дали ответ\n[17:13:58] <target> сказали что будет завтра скажем\n[17:14:00] <target> пока все плохо"
}
{
  "ts": "2020-09-07T16:16:17.122632",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "когда начнут работать бк?"
}
{
  "ts": "2020-09-07T16:18:02.553421",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Сейчас пересобирают админку БК. Надеюсь завтра уже запустят и сможем выдавать БК"
}
{
  "ts": "2020-09-07T16:18:38.438217",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ку"
}
{
  "ts": "2020-09-07T16:18:47.327718",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "оплатил соксы?"
}
{
  "ts": "2020-09-07T16:20:35.037471",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ты до скольки ?"
}
{
  "ts": "2020-09-07T16:20:57.281505",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "buri@q3mcco35auwcstmt.onion",
  "body": "включил"
}
{
  "ts": "2020-09-07T16:20:57.283116",
  "from": "dorirus@q3mcco35auwcstmt.onion",
  "to": "buri@q3mcco35auwcstmt.onion",
  "body": "что-то с жабой у тебя, сообщения не доходят"
}
{
  "ts": "2020-09-07T16:24:30.220402",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "джим либ тот будет, минут через 20, размножение проверю"
}
{
  "ts": "2020-09-07T16:24:34.829874",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и смена линка будет"
}
{
  "ts": "2020-09-07T16:25:31.526638",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "DR1IO.exe детектит через минуту после запуска \n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\dr1io\\DR1IO.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T16:25:36.413387",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "До 21"
}
{
  "ts": "2020-09-07T16:26:21.990860",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "это на 2019"
}
{
  "ts": "2020-09-07T16:26:23.712299",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "на 10"
}
{
  "ts": "2020-09-07T16:26:25.166706",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Microsoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.G!ml&threatid=2147749376&enterprise=0\n \tName: Trojan:Win32/Wacatac.G!ml\n \tID: 2147749376\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\dr1io\\DR1IO.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T16:26:32.920428",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "так же через 1 минуту после страта"
}
{
  "ts": "2020-09-07T16:26:42.825363",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T16:31:28.260665",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Бро, онор детектит через 1 минуту после запуска"
}
{
  "ts": "2020-09-07T16:31:29.711329",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Windows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\123\\ono72.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T16:31:47.928394",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T16:32:54.856942",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "это на 10 через 1 минуту работы \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\123\\ono72.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T16:33:09.387676",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T16:37:23.360235",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "спасибо!"
}
{
  "ts": "2020-09-07T16:38:49.597601",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "проф"
}
{
  "ts": "2020-09-07T16:38:51.627162",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "мне про какой то отчте"
}
{
  "ts": "2020-09-07T16:38:53.063307",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "там говрил"
}
{
  "ts": "2020-09-07T16:38:53.133500",
  "from": "skywalker@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T16:38:54.618201",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "после их лабы"
}
{
  "ts": "2020-09-07T16:38:56.927762",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "где его читатьь мжно будет"
}
{
  "ts": "2020-09-07T16:39:01.855735",
  "from": "skywalker@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Ещё раз"
}
{
  "ts": "2020-09-07T16:40:02.107731",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Я просил их писать отчеты о проделанной работе"
}
{
  "ts": "2020-09-07T16:40:03.030266",
  "from": "skywalker@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Говорят, что от меня зашифрованные сообщения. Я не знаю, что пришло именно тебе при нашей переписке в 17:30 по МСК."
}
{
  "ts": "2020-09-07T16:51:01.035518",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "прием"
}
{
  "ts": "2020-09-07T16:51:28.426432",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и я тут на форуме нашел типа говорит у него много траффа есть на продажу если тебе надо можем затестить его через гарант"
}
{
  "ts": "2020-09-07T16:51:42.379891",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "hi again"
}
{
  "ts": "2020-09-07T16:52:10.183996",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "<Moni maker> привет, инсталлы продаешь?\n[07.09.2020 15:40:53] <brilliantcry> привет да\n\n[07.09.2020 15:41:49] <Moni maker> отдельные страны делаешь?\n[07.09.2020 15:41:57] <brilliantcry> какие\n[07.09.2020 15:42:00] <Moni maker> спам же источник? с лоадера сгружаешь?\n[07.09.2020 15:42:02] <brilliantcry> могу юса. еу \n[07.09.2020 15:42:09] <Moni maker> юс ка де ат\n[07.09.2020 15:42:14] <brilliantcry> да. соседей нету. все ок\n[07.09.2020 15:42:29] <brilliantcry> юса есть спам 1600 . есть адс с ленда 2200\n[07.09.2020 15:42:38] <Moni maker> а сколько в день делаешь?\n[07.09.2020 15:42:51] <brilliantcry> адс до 500\n[07.09.2020 15:42:55] <brilliantcry> спам 2к"
}
{
  "ts": "2020-09-07T16:52:30.723917",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "проплати плз срочно вот этот 148.72.149.119 -- очень важно чтобы он быстро поднялся"
}
{
  "ts": "2020-09-07T16:52:56.753345",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "это раздатчик модулей -- один из тех, что надо было 5 числа еще проплатить"
}
{
  "ts": "2020-09-07T16:53:07.906080",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "У всех криптеров: Деплой, Марсель, Мани при старти вылазит детект WacatacB"
}
{
  "ts": "2020-09-07T16:53:18.662269",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Это исходник?"
}
{
  "ts": "2020-09-07T16:53:53.113003",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "если у всех, то конечно"
}
{
  "ts": "2020-09-07T16:54:28.953374",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Что будем делать?"
}
{
  "ts": "2020-09-07T16:55:08.356272",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "на win10 детект? на серверной тоже?"
}
{
  "ts": "2020-09-07T16:55:41.349209",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Да и там и там. Но бывает что на Сервере есть а на 10 нет"
}
{
  "ts": "2020-09-07T16:56:07.787636",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок, буду искать на что детект"
}
{
  "ts": "2020-09-07T16:56:40.901336",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Пока не выдаем файлы?"
}
{
  "ts": "2020-09-07T16:57:01.555483",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "наверное не стоит"
}
{
  "ts": "2020-09-07T16:57:55.995716",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Трика пока не выдаем. Хоф будет чистить. Палится у всех. У тебя, Марселя и Мани"
}
{
  "ts": "2020-09-07T16:58:17.192456",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Трик пока не выдаем. Палится исходник. Хоф чистит."
}
{
  "ts": "2020-09-07T16:58:37.289387",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Понял"
}
{
  "ts": "2020-09-07T16:59:09.808737",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я тут уже места не могу найти"
}
{
  "ts": "2020-09-07T16:59:12.641100",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Трик пока не выдаем. Хоф продолжает чистить."
}
{
  "ts": "2020-09-07T16:59:25.701620",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ващее."
}
{
  "ts": "2020-09-07T16:59:33.577996",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Пытаюсь убрать эту гадость"
}
{
  "ts": "2020-09-07T16:59:47.515707",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет. Пока не выдаем файл. Чистим дальше."
}
{
  "ts": "2020-09-07T17:00:22.364939",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "111"
}
{
  "ts": "2020-09-07T17:00:23.702045",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Congratulations! Now you can chat!"
}
{
  "ts": "2020-09-07T17:00:29.912858",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T17:00:37.924289",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "стерн дал контакт"
}
{
  "ts": "2020-09-07T17:08:13.708502",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T17:08:14.588244",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T17:08:16.858502",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "слушаю"
}
{
  "ts": "2020-09-07T17:09:48.560883",
  "from": "skywalker@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Приём)"
}
{
  "ts": "2020-09-07T17:11:50.060024",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-09-07T17:11:52.951854",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "в офисе все охуели"
}
{
  "ts": "2020-09-07T17:11:56.398462",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "говорят был мега крутой день"
}
{
  "ts": "2020-09-07T17:11:58.932470",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "охуенно"
}
{
  "ts": "2020-09-07T17:12:00.584641",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "хотя теще и вбой"
}
{
  "ts": "2020-09-07T17:12:02.593866",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "побыстрее"
}
{
  "ts": "2020-09-07T17:12:03.503631",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-07T17:12:12.209152",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Мы с ними общаемся щас)"
}
{
  "ts": "2020-09-07T17:16:16.147481",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/BzfGNy/yFhDRR\n123\nТут мор120, у меня пока не палит. Посмотри у себя пожалуйста"
}
{
  "ts": "2020-09-07T17:17:55.438440",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T17:18:23.454300",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T17:20:46.185289",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T17:31:22.719544",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "если у тебя нет денег, то можешь скинуть заявку на оплату Дефу."
}
{
  "ts": "2020-09-07T17:36:36.893867",
  "from": "quite@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "нет не выходит. отваливается"
}
{
  "ts": "2020-09-07T17:43:59.992942",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "есть возможность слать гифты"
}
{
  "ts": "2020-09-07T17:44:09.996710",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "по 400 -600"
}
{
  "ts": "2020-09-07T17:44:24.229487",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "задача дропа получить гифт, стереть защитный слой монеткой, сделать фотку"
}
{
  "ts": "2020-09-07T17:44:35.316569",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "сразу сомдешь проверить или дроп не кидала"
}
{
  "ts": "2020-09-07T17:44:42.931226",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "и те же 15% заложить в совю прибыль"
}
{
  "ts": "2020-09-07T17:44:45.719172",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "дозаказы частые"
}
{
  "ts": "2020-09-07T17:48:38.074575",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "давай затестим"
}
{
  "ts": "2020-09-07T17:48:46.321309",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "kagas@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T17:57:42.582385",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "да дропа так особо не проверишь"
}
{
  "ts": "2020-09-07T17:57:53.329186",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "вот если ты стафф будешь слать на моих дропов это интереснее"
}
{
  "ts": "2020-09-07T17:57:58.278806",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "и сколько гифтов на один адрес?"
}
{
  "ts": "2020-09-07T17:58:06.868910",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "ну как получится"
}
{
  "ts": "2020-09-07T17:58:12.186567",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "но всрегда стараемся дозаказть"
}
{
  "ts": "2020-09-07T17:58:16.224587",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "вообще с амазона высылаем"
}
{
  "ts": "2020-09-07T17:58:22.363233",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "профитность с гифтов выше"
}
{
  "ts": "2020-09-07T17:58:24.158329",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "деьнги сразу"
}
{
  "ts": "2020-09-07T17:58:29.889664",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "стаф туда суда , вышлет не вышлет"
}
{
  "ts": "2020-09-07T17:58:34.019279",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "это уже из опыта"
}
{
  "ts": "2020-09-07T17:59:12.695871",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "ceram@q3mcco35auwcstmt.onion",
  "body": "отлично"
}
{
  "ts": "2020-09-07T17:59:12.697458",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "ceram@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T17:59:39.761599",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "ун мне это интересно, если паки от вас пойдут бро"
}
{
  "ts": "2020-09-07T17:59:51.073272",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "так карточками этими заниматься просто смысла даже нет"
}
{
  "ts": "2020-09-07T17:59:59.851232",
  "from": "ceram@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Проинструктируйте меня. Что делать?"
}
{
  "ts": "2020-09-07T18:00:08.228161",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "ну у тебя заложено сколько 15% разница скуп \\ стаффер"
}
{
  "ts": "2020-09-07T18:00:53.868161",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "а как же нет смысла?  600 номинал карт,  заработай 15% когда я получу фотку , я почти инстант продаю эти гифты"
}
{
  "ts": "2020-09-07T18:01:04.598424",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "потом дозаказ , там очень часто дозаказ"
}
{
  "ts": "2020-09-07T18:01:09.109424",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "и опять получи свои 15%"
}
{
  "ts": "2020-09-07T18:01:12.080465",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "с 600"
}
{
  "ts": "2020-09-07T18:01:32.219765",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "при условии что дроп тебе по деливеред сделает фото, и ты в этот же день получишь свои 15%"
}
{
  "ts": "2020-09-07T18:01:45.644535",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "почему тебе это не интересно? это по всем параметрам лучше чем стаф."
}
{
  "ts": "2020-09-07T18:02:01.311785",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да все ок"
}
{
  "ts": "2020-09-07T18:02:22.700793",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "ну давай попробуем, убедил"
}
{
  "ts": "2020-09-07T18:02:31.774222",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "щас саппа дам контакт"
}
{
  "ts": "2020-09-07T18:02:33.455632",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "мне андо доступ в админку"
}
{
  "ts": "2020-09-07T18:02:40.985582",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "у тебя такая же как у всех?"
}
{
  "ts": "2020-09-07T18:02:42.314845",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "зеленая?"
}
{
  "ts": "2020-09-07T18:02:44.127793",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "надеюсь"
}
{
  "ts": "2020-09-07T18:03:33.931429",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Доменное имя сайта: https://wormjim.io \nsupport@wormjim.net — суппорт\nСаппорта обязательно добавь - он ведет все паки и дропов, делает подсчеты, работает с 16-00 по МСК до 00-00\nAdmin (тобишь я) оплачиваю паки и обсуждаю предложения и нововведения.\nДропов запрашиваешь под шоп свой, я или сапп апрувят их\nВот доступ в панель, саппорта добавь ОБЯЗАТЕЛЬНО!!!\n\nЛогин: logan\nПароль: IN9J7HBWQZJu1Fh\n\n\n\n    1. При входе в панель появляется общее окно ваших посылок показывающее вашу статистику в дальнейшем.\n\n    2. Обычно первым делом нужно запросить курьера находим слева МЕНЮ\n        \n            -> Кликаем на КУРЬРЕРЫ\n            -> Доступные\n            -> Отмечаем нужных нам курьеров галочками после чего нажимаем иконку в правом верхнем углу \"Запросить выбраных курьеров\" под нужный шоп например bestbuy.com newegg.com\n            -> Запросить\n            -> Ждем одобрения саппорта\n        \n\n    3. Далее запрос отправляется и саппорт вам одобряет курьеров (заходим КУРЬРЕРЫ->Мои появляются дропы с открытыми адрессами),но если запрос не получился или появилась ошибка то данный шоп скорей всего уже занят.\n\n    4. Курьеры разделены на 4 цвета:\n            \n                - Желтый ТЕСТ -> только начал работать,запрос на свой страх и риск но если пак высылается есть возможность заработать +5%\n                - Зеленый ГУД -> сразу можно запрашивать\n                - Голубой НА ВЫХОДЕ -> либо заканчивает работу или что то пошло не так и курьер может в любой момент закончить работу(уточнять всегда у саппа)\n                - Красный смерть курьера -> не работоспособен\n            \n    \n\n    5. Далее вам нужно будет добавить сделаный пак на дропа и ознакомится с разделом Товары который разделен на 5 частей\n        \n            5.1) В процессе - здесь будут показаны все ваши посылки которые идут на курьеров\n            5.2) к оплате - здесь будут показаны паки на выплату\n            5.3) Оплаченые - здесь будут показаны уже оплаченные посылки\n            5.4) Проваленные - неудачные паки которые либо развернуты либо потерпели неудачу\n            5.5) Добавить новый - добавление пака в панель\n        \n        При добавление паков вам нужно указать следующее\n        \n            - Название (указываем коротко и ясно итем без -*#!)\n            - Цена (цена указывается без учетов доставок и удержек)\n            - Вес (необезательное поле можно указать приблизительно)\n            - Категория (указываем процент % согласно прайсу)\n            - Магазин (шоп откуда идет данный пак)\n            - Ссылка (линк на товар,необезательное поле так как саппорт при проценке все равно поставит минималку по юсе)\n            - Комментарий (здесь вы можете написать дополнительную информацию о пысылке(пикап инфо,доп инфо о итемах если их много)\n            - Холдер (обычно на кого идет пак или владелец карты)\n            - Курьер (дроп на которого вы повесили пак)\n            - Треки (трек номер отправления до дропа)\n        \n    \n\n    6. Бывают такие случаи когда в паке 2-3-4 итема и если они одиннаковые то не нужно добавлять 2-3-4 пака можно указать в названи кол-во и общую ценну (например 2xiphone 8 или 4xApple mackbook)"
}
{
  "ts": "2020-09-07T18:03:38.642209",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "У Деплоя получилось закриптовать mor120"
}
{
  "ts": "2020-09-07T18:03:40.994961",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "UFDYbjhsbkgjhbghjkb"
}
{
  "ts": "2020-09-07T18:03:46.144197",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/4da52S/yh8dr3   \n    Delete: https://qaz.im/index.php?a=delete&q=2002995939"
}
{
  "ts": "2020-09-07T18:03:47.538066",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "\n что значит зеленая?)"
}
{
  "ts": "2020-09-07T18:04:26.096101",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "у меня точно ни как у всех)"
}
{
  "ts": "2020-09-07T18:05:02.308507",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "блять ворм :)"
}
{
  "ts": "2020-09-07T18:05:05.023399",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "это скарлет"
}
{
  "ts": "2020-09-07T18:05:16.219905",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Отлично!"
}
{
  "ts": "2020-09-07T18:05:18.901916",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "аа епт"
}
{
  "ts": "2020-09-07T18:05:19.385331",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": ")"
}
{
  "ts": "2020-09-07T18:05:36.487176",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "здарова"
}
{
  "ts": "2020-09-07T18:05:36.533469",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "мне надо будет подточитсья навреное под твою админку"
}
{
  "ts": "2020-09-07T18:05:41.004074",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага! Мастер!"
}
{
  "ts": "2020-09-07T18:05:44.418753",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "dominik@q3mcco35auwcstmt.onion",
  "body": "скоьлко уетбя дропов активных?"
}
{
  "ts": "2020-09-07T18:05:47.617172",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "а что именно надо?"
}
{
  "ts": "2020-09-07T18:05:50.634130",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "да хуй знает"
}
{
  "ts": "2020-09-07T18:05:54.098224",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "сапп занимается стаффом))"
}
{
  "ts": "2020-09-07T18:05:54.817062",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Там детекты бывают, в зависимости от имени файла"
}
{
  "ts": "2020-09-07T18:06:10.885523",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "> Ага! Мастер!\n\nСтараюсь)"
}
{
  "ts": "2020-09-07T18:06:20.499326",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "щас глянут, там вобще хуйня"
}
{
  "ts": "2020-09-07T18:06:27.254487",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "набор только делать будем"
}
{
  "ts": "2020-09-07T18:06:27.320740",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "(Y)"
}
{
  "ts": "2020-09-07T18:06:32.063923",
  "from": "dominik@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "2 недели в отпуске были"
}
{
  "ts": "2020-09-07T18:07:02.479733",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "2 стаба плиз"
}
{
  "ts": "2020-09-07T18:08:00.746342",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T18:14:49.518716",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "будешь работать?"
}
{
  "ts": "2020-09-07T18:15:18.376530",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T18:15:24.988364",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я ведь уже работаю"
}
{
  "ts": "2020-09-07T18:16:03.887387",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "над бэкдором"
}
{
  "ts": "2020-09-07T18:16:24.452260",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T18:16:35.815259",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "можно тебе на проверку первую часть скинуть?"
}
{
  "ts": "2020-09-07T18:18:17.881365",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Buer отправил"
}
{
  "ts": "2020-09-07T18:18:31.830458",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "смотрю"
}
{
  "ts": "2020-09-07T18:22:53.522855",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "надо результат быстрее выкатывать?"
}
{
  "ts": "2020-09-07T18:23:50.723751",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "сроки конкретные не были установлены"
}
{
  "ts": "2020-09-07T18:24:21.317902",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Бро привет, извини что позню со сроками- наметился переезд , а в новой квартире нету кабеля интернета - то есть системник с памятью так нужной нам нету"
}
{
  "ts": "2020-09-07T18:24:29.372022",
  "from": "derek@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "я не знаю как это всё собрать"
}
{
  "ts": "2020-09-07T18:31:33.313712",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/Ze2sH4/dnfkiS"
}
{
  "ts": "2020-09-07T18:31:42.330586",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-07T18:31:49.638573",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "dr1"
}
{
  "ts": "2020-09-07T18:32:07.930420",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-07T18:32:29.501272",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пиво?"
}
{
  "ts": "2020-09-07T18:32:40.030071",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Можно ща"
}
{
  "ts": "2020-09-07T18:34:51.255291",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-07T18:35:11.762269",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "1Q2gW9D2SfhX2UkrDALz7v4ujXT1FWNWRR"
}
{
  "ts": "2020-09-07T18:41:27.849820",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Спасибо )"
}
{
  "ts": "2020-09-07T18:44:42.717721",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "\n[21:42:25] <logan> тебе что-то надо для работы?"
}
{
  "ts": "2020-09-07T18:44:49.620872",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "я сомгу предоставить тебе то что надо"
}
{
  "ts": "2020-09-07T18:45:09.305667",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "это ясно"
}
{
  "ts": "2020-09-07T18:45:21.398795",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "тебе доступ в панель у стерна подрезали тоже?"
}
{
  "ts": "2020-09-07T18:45:44.725656",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "я смогу тебе предоставить необходимый тебе матерьял"
}
{
  "ts": "2020-09-07T18:45:52.370335",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "sunday@q3mcco35auwcstmt.onion",
  "body": "если тебе что-то надо будет для работы - сообщи"
}
{
  "ts": "2020-09-07T18:46:03.084762",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "у тя остался доступ?"
}
{
  "ts": "2020-09-07T18:46:10.053050",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "пас тебе не сменили?"
}
{
  "ts": "2020-09-07T18:48:00.117450",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "привет, можно"
}
{
  "ts": "2020-09-07T18:48:19.747613",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "в архиве с паролем, через файлообменник"
}
{
  "ts": "2020-09-07T18:50:39.181014",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "или ты новый софт нашел?"
}
{
  "ts": "2020-09-07T18:50:43.380387",
  "from": "sunday@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "или на том же"
}
{
  "ts": "2020-09-07T18:55:21.313416",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[21:40:46] <Support> Если отправляли - просьба ссылку на блокчейн с taxid выслать, чтобы нашел платеж"
}
{
  "ts": "2020-09-07T18:55:48.815523",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Буер палится"
}
{
  "ts": "2020-09-07T18:55:57.791373",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/7/2020 11:30:31 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\buer\\buer.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSignature Version: AV: 1.323.698.0, AS: 1.323.698.0, NIS: 1.323.698.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-07T18:56:08.622570",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Голд говрит уже на завтра Буер"
}
{
  "ts": "2020-09-07T18:56:30.640613",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T19:01:42.063772",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/RSzZGK/bhFk2b\nDelete: https://qaz.im/index.php?a=delete&q=1104445117\nPass: FDSQERSADFSAADFASADF"
}
{
  "ts": "2020-09-07T19:03:12.543204",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "dr1- jr"
}
{
  "ts": "2020-09-07T19:03:14.489682",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ok"
}
{
  "ts": "2020-09-07T19:03:18.166799",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "нет, не идет загрузка"
}
{
  "ts": "2020-09-07T19:03:22.063261",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "не получается отправить"
}
{
  "ts": "2020-09-07T19:03:28.357287",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "До завтра ))"
}
{
  "ts": "2020-09-07T19:03:28.861793",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "нужны какие-то доп настройки?"
}
{
  "ts": "2020-09-07T19:03:40.119187",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "через файлообменник"
}
{
  "ts": "2020-09-07T19:03:42.525893",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "До завтра ))"
}
{
  "ts": "2020-09-07T19:03:44.998067",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "sendspace.com"
}
{
  "ts": "2020-09-07T19:03:57.846106",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "До завтра))"
}
{
  "ts": "2020-09-07T19:03:58.520235",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а"
}
{
  "ts": "2020-09-07T19:04:02.294702",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "туплю"
}
{
  "ts": "2020-09-07T19:04:05.338221",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/"
}
{
  "ts": "2020-09-07T19:06:20.080544",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-07T19:06:28.769403",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "До зпвтра))"
}
{
  "ts": "2020-09-07T19:07:14.056876",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/NR73rR/eRTk9k"
}
{
  "ts": "2020-09-07T19:07:24.796756",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "nRMy3CTMCRCjCJQzQ"
}
{
  "ts": "2020-09-07T19:07:26.899608",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "jr"
}
{
  "ts": "2020-09-07T19:07:28.751180",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "ok"
}
{
  "ts": "2020-09-07T19:07:38.439303",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "у меня еще вопрос"
}
{
  "ts": "2020-09-07T19:07:48.072610",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "мне stern написал"
}
{
  "ts": "2020-09-07T19:07:52.913929",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "буду ли я работать"
}
{
  "ts": "2020-09-07T19:08:05.882267",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я не понял вопроса"
}
{
  "ts": "2020-09-07T19:08:09.324238",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "всмысле спрашивал?"
}
{
  "ts": "2020-09-07T19:08:12.569873",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T19:08:29.851845",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "ну это руководство, он будет платить"
}
{
  "ts": "2020-09-07T19:08:40.380757",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "что ты ответил?"
}
{
  "ts": "2020-09-07T19:08:52.200848",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "что я уже работаю над бэкдором"
}
{
  "ts": "2020-09-07T19:09:00.151646",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "а, ну отлично"
}
{
  "ts": "2020-09-07T19:09:11.172491",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "и спросил имеет ли он ввиду, что я может медленно работаю"
}
{
  "ts": "2020-09-07T19:09:30.349186",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я подумал, может в этом смысле"
}
{
  "ts": "2020-09-07T19:09:56.572528",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "не знаю, но врядли. Может редко в сети тебя видит"
}
{
  "ts": "2020-09-07T19:10:02.867226",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "а ты тут еще будешь?"
}
{
  "ts": "2020-09-07T19:10:14.849138",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "можешь новый ехе криптануть?"
}
{
  "ts": "2020-09-07T19:10:25.108502",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я его раньше про оплату спросил"
}
{
  "ts": "2020-09-07T19:10:34.034481",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "у тебя вообще какой график?"
}
{
  "ts": "2020-09-07T19:10:49.166542",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "он меня спросил на сколько договаривались с тем кто скидывал тз?"
}
{
  "ts": "2020-09-07T19:10:54.177116",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-07T19:10:54.179196",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "До зпвтра))"
}
{
  "ts": "2020-09-07T19:11:23.146638",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "в течении дня я могу работать над проектом"
}
{
  "ts": "2020-09-07T19:11:27.707798",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "но не всегда"
}
{
  "ts": "2020-09-07T19:11:37.487597",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а так всегда вечером до поздней ночи"
}
{
  "ts": "2020-09-07T19:12:12.308020",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Уже выхожу"
}
{
  "ts": "2020-09-07T19:12:21.091126",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "там по коду еще"
}
{
  "ts": "2020-09-07T19:12:30.596575",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Уже есть .exe?"
}
{
  "ts": "2020-09-07T19:12:57.294687",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "есть"
}
{
  "ts": "2020-09-07T19:12:59.696786",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "на ссылках"
}
{
  "ts": "2020-09-07T19:13:08.141410",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "в админку закинул \nroot 5.9.178.75 9uHGqu5y5Xk8            |Germany\nroot 45.138.158.53 T429F2oe1x89         |Latvia\nroot 195.123.239.102 PhtJFr0fvBk2       |Singapore\nroot 195.22.149.160 73uEu00h7F7l        |Bulgaria\nroot 179.43.158.187 8XJ1oc9c9iQ8AIAp9n  |Switzerland\nroot 79.143.30.152 z2qay9jiwm           |Moldova\nroot 185.183.98.14 zTAbb4sxgV2DI8n      |Netherlands\nroot 80.249.147.22 hopdyhxbg3           |Romania\nroot 164.132.76.175 5P1hWfF90BdR        |France\n\n103.216.92.31 system OkwKcECs8qJP2Z\n202.9.123.12 system OkwKcECs8qJP2Z\n103.209.143.235 system OkwKcECs8qJP2Z\n103.255.74.138 system OkwKcECs8qJP2Z\n117.222.60.147 system OkwKcECs8qJP2Z\n117.196.229.213 admin 0l0ctyQh243O63uD\n117.241.99.24 admin 0l0ctyQh243O63uD\n117.197.40.27 system OkwKcECs8qJP2Z\n117.197.40.37 system OkwKcECs8qJP2Z\n117.212.192.178 admin 0l0ctyQh243O63uD\n103.44.139.147 admin 0l0ctyQh243O63uD\n103.75.164.64 admin 0l0ctyQh243O63uD\n112.196.167.42 admin 0l0ctyQh243O63uD\n112.196.167.58 admin 0l0ctyQh243O63uD\n117.210.208.157 admin 0l0ctyQh243O63uD\n117.252.66.77 admin 0l0ctyQh243O63uD\n103.69.216.90 admin 0l0ctyQh243O63uD"
}
{
  "ts": "2020-09-07T19:13:24.015303",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я получается зарезолвил нужные домены, сделал запросы через winhttp с шифрованием, сделал соединение через прокси если таковой указан в настройках системы"
}
{
  "ts": "2020-09-07T19:13:30.487694",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Сейчас перекачаю"
}
{
  "ts": "2020-09-07T19:13:35.041371",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "только шифрование идет TLSv1.2"
}
{
  "ts": "2020-09-07T19:13:38.135073",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "спасибор большое"
}
{
  "ts": "2020-09-07T19:15:14.049659",
  "from": "kagas@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Завтра запустим, там  с сервером что-то, деф правит \n[22:16:15] <hof> сервер не доступен\n[22:16:31] <hof> отписал дефу, сказал сейчас решит проблему"
}
{
  "ts": "2020-09-07T19:16:18.866663",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "шифрование от системы зависит"
}
{
  "ts": "2020-09-07T19:16:35.967687",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "ок, завтра проверим, напишу тогда"
}
{
  "ts": "2020-09-07T19:17:29.461424",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а по оплате как?"
}
{
  "ts": "2020-09-07T19:18:02.377886",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "а при приеме на работу как ты договаривался?"
}
{
  "ts": "2020-09-07T19:18:45.235530",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "я задал вопрос stern"
}
{
  "ts": "2020-09-07T19:19:00.665414",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а"
}
{
  "ts": "2020-09-07T19:19:07.071011",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ну когда в самом начале"
}
{
  "ts": "2020-09-07T19:19:29.563226",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "а стерн тебе не ответил?"
}
{
  "ts": "2020-09-07T19:19:54.984914",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "он меня спросил на сколько договаривались с тем кто скидывал тз?"
}
{
  "ts": "2020-09-07T19:22:24.741767",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "все, я нашел письмо"
}
{
  "ts": "2020-09-07T19:22:33.748527",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "которое мне в самом начале написали"
}
{
  "ts": "2020-09-07T19:22:45.440725",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Уровень зарплаты \n определяется по итогам тестового задания и собеседования(60тыс-200тыс)"
}
{
  "ts": "2020-09-07T19:23:44.882559",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "cany@q3mcco35auwcstmt.onion",
  "body": "ок, завтра проверят исходник, спишусь со стерном"
}
{
  "ts": "2020-09-07T19:24:50.195809",
  "from": "cany@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T19:26:49.951513",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/YshZKA/Bk7btY\nDelete: https://qaz.im/index.php?a=delete&q=604306953\nPass: SQERASSSSSSDAAWWW"
}
{
  "ts": "2020-09-07T19:26:53.376561",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "агаэ"
}
{
  "ts": "2020-09-07T19:26:56.923462",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Чекни"
}
{
  "ts": "2020-09-07T19:27:02.958607",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-07T19:27:11.088904",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "быстро сделаю"
}
{
  "ts": "2020-09-07T19:27:46.775033",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "983\n984\n\n?"
}
{
  "ts": "2020-09-07T19:28:05.745762",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-07T19:29:14.870956",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "hi again"
}
{
  "ts": "2020-09-07T19:29:33.798738",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "что там с 148.72.149.119 ?"
}
{
  "ts": "2020-09-07T19:29:57.502384",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "срочно надо"
}
{
  "ts": "2020-09-07T19:30:06.105328",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "привет, должен работать, оплачивал уже"
}
{
  "ts": "2020-09-07T19:30:20.588644",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "все ок"
}
{
  "ts": "2020-09-07T19:31:03.607800",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ага, точно, поднялся"
}
{
  "ts": "2020-09-07T19:31:07.464513",
  "from": "strix@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-07T19:31:39.846535",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Доброй ночи)"
}
{
  "ts": "2020-09-07T19:35:58.153383",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "привет, криптани плиз"
}
{
  "ts": "2020-09-07T19:36:02.367889",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "файлы на ссылках"
}
{
  "ts": "2020-09-07T20:28:01.449594",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-07T20:28:03.842869",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-07T20:28:53.358257",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "жду"
}
{
  "ts": "2020-09-07T20:29:01.611421",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Строку добавить?"
}
{
  "ts": "2020-09-07T20:29:06.526002",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-07T21:00:55.490808",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/yGd5T3/AQQ2bk\nDelete: https://qaz.im/index.php?a=delete&q=612325410"
}
{
  "ts": "2020-09-07T21:01:00.656844",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Password 123"
}
{
  "ts": "2020-09-07T21:01:05.245473",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-07T21:36:09.486852",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/21L4AlCu#iybwuWNT7"
}
{
  "ts": "2020-09-07T21:50:47.749098",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "dorirus@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/iszAIBin#CbHdhzCTx"
}
{
  "ts": "2020-09-07T22:13:22.335725",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "doloto@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/iweGXlNt#Fbkq9zvvC"
}
