{
  "ts": "2020-09-18T02:41:57.557561",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в 12 00"
}
{
  "ts": "2020-09-18T02:41:58.828174",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ждут файлы"
}
{
  "ts": "2020-09-18T02:42:01.793156",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписанные"
}
{
  "ts": "2020-09-18T02:42:05.277373",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "даже если смарт будет"
}
{
  "ts": "2020-09-18T02:43:54.733268",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/hNEN38/QybTBB"
}
{
  "ts": "2020-09-18T02:43:55.916051",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пасс 1"
}
{
  "ts": "2020-09-18T02:44:03.117886",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в экселе"
}
{
  "ts": "2020-09-18T02:44:05.385002",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пишу что как там"
}
{
  "ts": "2020-09-18T02:44:07.681076",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а то нервничать будут"
}
{
  "ts": "2020-09-18T02:44:11.075243",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чем раьше тем лучше"
}
{
  "ts": "2020-09-18T02:44:42.234928",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "пожаулйста"
}
{
  "ts": "2020-09-18T02:44:44.163858",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "[05:46:26] <target> Download: https://qaz.im/load/hNEN38/QybTBB \n[05:46:27] <target> пасс 1"
}
{
  "ts": "2020-09-18T02:44:48.878407",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сделай крипты утром до 12 00"
}
{
  "ts": "2020-09-18T02:44:50.722657",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "хотя бы 1"
}
{
  "ts": "2020-09-18T02:44:53.750518",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "и бентли скинь на подпись"
}
{
  "ts": "2020-09-18T06:09:44.945082",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "картер привет, надо срочно оплатить 173.232.146.236"
}
{
  "ts": "2020-09-18T06:32:40.563217",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в 12 00"
}
{
  "ts": "2020-09-18T06:32:40.565015",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ждут файлы"
}
{
  "ts": "2020-09-18T06:32:40.566101",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "подписанные"
}
{
  "ts": "2020-09-18T06:32:40.566936",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "даже если смарт будет"
}
{
  "ts": "2020-09-18T06:32:40.567871",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/hNEN38/QybTBB"
}
{
  "ts": "2020-09-18T06:32:40.568798",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пасс 1"
}
{
  "ts": "2020-09-18T06:32:40.569656",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в экселе"
}
{
  "ts": "2020-09-18T06:32:40.570430",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пишу что как там"
}
{
  "ts": "2020-09-18T06:32:40.571300",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а то нервничать будут"
}
{
  "ts": "2020-09-18T06:32:40.572188",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чем раьше тем лучше"
}
{
  "ts": "2020-09-18T06:37:33.377244",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Делаем крипт и подписываю"
}
{
  "ts": "2020-09-18T06:40:11.049913",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "картер привет, надо срочно оплатить 173.232.146.236"
}
{
  "ts": "2020-09-18T06:53:54.759552",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет! )))"
}
{
  "ts": "2020-09-18T06:54:07.801917",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Что собирать новым компилятором?"
}
{
  "ts": "2020-09-18T06:55:16.330306",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Да давай сделай для группы 1 или One"
}
{
  "ts": "2020-09-18T06:55:25.054327",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Будем теститровать )"
}
{
  "ts": "2020-09-18T06:55:25.101535",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "С утра автотест не работал. Вручную хотел запустить с дефом машину - заблокирована пишет, другую панель ВМ не смог открыть совсем. Как-то уныло у меня утро прошло."
}
{
  "ts": "2020-09-18T06:55:29.719330",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "one лучше"
}
{
  "ts": "2020-09-18T06:55:46.851032",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Сейчас работает крипторанель"
}
{
  "ts": "2020-09-18T06:55:52.010530",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хорошо, сейчас соберу"
}
{
  "ts": "2020-09-18T06:56:06.790684",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "криптопанель работала с утра"
}
{
  "ts": "2020-09-18T06:56:14.562730",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "автотесты не начинались"
}
{
  "ts": "2020-09-18T06:56:25.327284",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ааа а какие машины?"
}
{
  "ts": "2020-09-18T06:56:58.217055",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T06:57:05.173279",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "Так и не ответил мне вчера криптор"
}
{
  "ts": "2020-09-18T06:57:10.318504",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "Пусть мне напишет"
}
{
  "ts": "2020-09-18T06:57:15.081821",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mango@q3mcco35auwcstmt.onion",
  "body": "Пожалуйста )"
}
{
  "ts": "2020-09-18T07:02:03.403456",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "сначала все"
}
{
  "ts": "2020-09-18T07:02:31.804127",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "потом снова запустил, включилась и отстучала 2016, остальные не включились"
}
{
  "ts": "2020-09-18T07:08:09.931582",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "привет у тебя какой график ?"
}
{
  "ts": "2020-09-18T07:08:09.933066",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "напиши мне отчет по твоему бк и по каждому кодеру что у тебя"
}
{
  "ts": "2020-09-18T07:08:09.934193",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "и каждый день скидывай"
}
{
  "ts": "2020-09-18T07:08:09.934957",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "чем палятся бк"
}
{
  "ts": "2020-09-18T07:08:09.935863",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "и у кого на какой стадии"
}
{
  "ts": "2020-09-18T07:18:51.301334",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "GBRQWERasdzxc\nDownload: https://qaz.im/load/eQ47Tk/3FkTZS"
}
{
  "ts": "2020-09-18T07:18:59.812173",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "группа one"
}
{
  "ts": "2020-09-18T07:19:26.631657",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "надо залить бэкдор в one"
}
{
  "ts": "2020-09-18T07:22:24.417954",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Ок спс ))"
}
{
  "ts": "2020-09-18T07:33:48.910712",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T07:33:55.323408",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, mor125"
}
{
  "ts": "2020-09-18T07:34:57.321031",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T07:39:01.298168",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил, и чил для пола"
}
{
  "ts": "2020-09-18T07:39:14.533848",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T07:39:33.875708",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "И какой запуск у длл чил?"
}
{
  "ts": "2020-09-18T07:39:56.247142",
  "from": "bonen@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. Так ты решил вопрос с обфускацией WSTR?"
}
{
  "ts": "2020-09-18T07:45:41.010778",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Привет бро, криптани пжл\n\nDownload: https://qaz.im/load/hNDhyf/fZN6e2\nKey: dsfsdfsdfsdfsdf"
}
{
  "ts": "2020-09-18T07:47:21.005103",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "DllRegisterServer"
}
{
  "ts": "2020-09-18T07:47:28.240841",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "могу сделать другой"
}
{
  "ts": "2020-09-18T07:47:36.645636",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "какой нужен?"
}
{
  "ts": "2020-09-18T07:47:44.858267",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "А что Пол говрил?"
}
{
  "ts": "2020-09-18T07:47:51.168996",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ничего"
}
{
  "ts": "2020-09-18T07:48:09.175881",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "файл такой же как и вчера"
}
{
  "ts": "2020-09-18T07:48:26.853636",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "всмысле также запускается"
}
{
  "ts": "2020-09-18T07:49:13.695643",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Как вчера вечером да?"
}
{
  "ts": "2020-09-18T07:49:35.425715",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хотя стоп, вчера вечером его делали с запуском в DllMain"
}
{
  "ts": "2020-09-18T07:49:41.706000",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "такой же нужен?"
}
{
  "ts": "2020-09-18T07:49:50.630394",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тогда перезалью"
}
{
  "ts": "2020-09-18T07:50:02.419475",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Да давай"
}
{
  "ts": "2020-09-18T07:50:45.572520",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залил"
}
{
  "ts": "2020-09-18T07:50:57.191996",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T07:51:08.267492",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "запускаю regsvr32 да?"
}
{
  "ts": "2020-09-18T07:51:26.953002",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T07:51:39.256277",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T08:06:08.403285",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/0iTlRCEg#LTwzLwTZW"
}
{
  "ts": "2020-09-18T08:06:08.404986",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "почитай чтобы ты был вкурсе"
}
{
  "ts": "2020-09-18T08:06:08.407124",
  "from": "doloto@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": " ping"
}
{
  "ts": "2020-09-18T08:06:08.409877",
  "from": "bonen@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. Так ты решил вопрос с обфускацией WSTR?"
}
{
  "ts": "2020-09-18T08:07:36.748048",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[18:03:45] <Stern> с линка"
}
{
  "ts": "2020-09-18T08:08:31.734751",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "там очень важен сам линк. Деплой же проверяет скачкой с линка, бентли тоже. С файлообменника - все ок. С линка таргета - не ок.\nЯ же и говорю что тут детали важны.\nМы НЕ ЗНАЕМ линк таргета до того, как он на нем проверит. Т.е. для нормальной проверки мы должны получить от таргета список линков где проверять"
}
{
  "ts": "2020-09-18T08:28:27.930092",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Привет, я правильно понял, везде в lpEventCallback параметр pszEventInfo передавать 1024 байта?"
}
{
  "ts": "2020-09-18T08:28:52.721661",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "указатель на стек с массивом 1024 байт"
}
{
  "ts": "2020-09-18T08:31:30.764411",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет! прийми сборку БК для группы 6"
}
{
  "ts": "2020-09-18T08:31:38.581597",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "nE%hKa2Vnwxkd5hF"
}
{
  "ts": "2020-09-18T08:31:39.587059",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/FB6ZBD/aTEkn4\nDelete: https://qaz.im/index.php?a=delete&q=1713191000"
}
{
  "ts": "2020-09-18T08:31:48.168115",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T08:31:51.372458",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Принял"
}
{
  "ts": "2020-09-18T08:31:52.154127",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "версия в админке не меняется"
}
{
  "ts": "2020-09-18T08:31:58.423130",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T08:32:18.550440",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "просьба - проверяй с выключенным облаком (для некриптованного лоадера), по рекомендациям Бузы"
}
{
  "ts": "2020-09-18T08:32:30.169513",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T08:32:31.039783",
  "from": "kaktus@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "кингстону тоже направил"
}
{
  "ts": "2020-09-18T08:34:14.105111",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "naned@q3mcco35auwcstmt.onion",
  "body": "привет, да, не обязательно в стеке, но размер буфера 1024 байта"
}
{
  "ts": "2020-09-18T08:34:30.498029",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "понял"
}
{
  "ts": "2020-09-18T08:40:11.064015",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а остальные параметры указатели LPCSTR не нужно расширять до 1024 байт?"
}
{
  "ts": "2020-09-18T08:40:55.701772",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "там такой перечень параметров:\n typedef VOID (__stdcall *RemoteEventCallback)(PVOID hModuleHandle, LPCSTR pszEventName, LPCSTR pszEventInfo,\n  PVOID pvOutData, DWORD dwOutDataSize, LPCSTR pszOutDataTag, PVOID pvContext);"
}
{
  "ts": "2020-09-18T08:41:05.903214",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "naned@q3mcco35auwcstmt.onion",
  "body": "можно и там расширить, но пока проблем не было"
}
{
  "ts": "2020-09-18T08:41:17.163183",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T08:53:53.630844",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Поправил\nDownload: https://qaz.im/load/rZBR3Z/irD3ff\nDelete: https://qaz.im/index.php?a=delete&q=957833796\n\nUi}hvvT%Hbsv7p*ACNS~"
}
{
  "ts": "2020-09-18T08:58:00.430510",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "naned@q3mcco35auwcstmt.onion",
  "body": "ок, спс"
}
{
  "ts": "2020-09-18T09:00:31.642861",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:00:41.149913",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "У меня вопрос по регламенту подготовки БК"
}
{
  "ts": "2020-09-18T09:18:59.955652",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "на второй админке делай тоже чтбы ракета была, тот же скрипт"
}
{
  "ts": "2020-09-18T09:18:59.958261",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "и пометка что это ракета"
}
{
  "ts": "2020-09-18T09:19:18.217255",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "принял"
}
{
  "ts": "2020-09-18T09:19:23.903505",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "xenon@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T09:24:12.877174",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "kingston@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:24:29.503325",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "xenon@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:26:47.257268",
  "from": "xenon@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:28:01.078372",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет, я вел проект один, в нем еще был чел под мобильную платформу."
}
{
  "ts": "2020-09-18T09:28:05.154289",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, тройку"
}
{
  "ts": "2020-09-18T09:28:22.283370",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "джим тот либ"
}
{
  "ts": "2020-09-18T09:29:21.840296",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T09:33:44.482881",
  "from": "clickclack@q3mcco35auwcstmt.onion",
  "to": "rand@q3mcco35auwcstmt.onion",
  "body": "как дела?"
}
{
  "ts": "2020-09-18T09:41:22.478173",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, yas50 и yas51"
}
{
  "ts": "2020-09-18T09:41:50.559503",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T09:42:00.058658",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "51 длл?"
}
{
  "ts": "2020-09-18T09:42:09.994706",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "нет ехе оба"
}
{
  "ts": "2020-09-18T09:43:17.229978",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "залито"
}
{
  "ts": "2020-09-18T09:43:30.211109",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Спс"
}
{
  "ts": "2020-09-18T09:43:47.827078",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет. Как прошло тестирование?"
}
{
  "ts": "2020-09-18T09:44:22.262896",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Привет еще не тестировал сегодня чуть позже"
}
{
  "ts": "2020-09-18T09:49:19.590011",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "kerasid@q3mcco35auwcstmt.onion",
  "body": "idet delo bro?"
}
{
  "ts": "2020-09-18T09:50:40.456423",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пол просил закинуть exe, закинул"
}
{
  "ts": "2020-09-18T09:50:53.883884",
  "from": "hof@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "чил114"
}
{
  "ts": "2020-09-18T09:51:12.056576",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T09:51:17.557168",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "Только крипторов еще нет"
}
{
  "ts": "2020-09-18T09:52:11.146330",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "tilar@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:52:29.648234",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "пожаулйста"
}
{
  "ts": "2020-09-18T09:52:29.665253",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "[05:46:26] <target> Download: https://qaz.im/load/hNEN38/QybTBB \n[05:46:27] <target> пасс 1"
}
{
  "ts": "2020-09-18T09:52:29.666974",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "и бентли скинь на подпись"
}
{
  "ts": "2020-09-18T09:52:29.668813",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "хотя бы 1"
}
{
  "ts": "2020-09-18T09:52:29.670488",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сделай крипты утром до 12 00"
}
{
  "ts": "2020-09-18T09:52:29.671518",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Привет бро, криптани пжл\n\nDownload: https://qaz.im/load/hNDhyf/fZN6e2\nKey: dsfsdfsdfsdfsdf"
}
{
  "ts": "2020-09-18T09:55:23.879567",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T09:55:28.378700",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Будем криптовать?"
}
{
  "ts": "2020-09-18T09:55:51.185090",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет))"
}
{
  "ts": "2020-09-18T09:56:15.913115",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Пока чищу стабы"
}
{
  "ts": "2020-09-18T09:56:23.643196",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T09:56:27.505646",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "жду"
}
{
  "ts": "2020-09-18T09:56:34.992876",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "работы как всегда накопилось )"
}
{
  "ts": "2020-09-18T10:00:49.089078",
  "from": "mentos@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T10:01:29.351117",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "По ботам,  что заказали?"
}
{
  "ts": "2020-09-18T10:02:14.109701",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да  3 крипта для Таргета + крипт длл chil113 + mor124"
}
{
  "ts": "2020-09-18T10:03:02.743163",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "<target> Download: https://qaz.im/load/hNEN38/QybTBB\n[09:43:54] <target> пасс 1"
}
{
  "ts": "2020-09-18T10:05:58.133273",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я буду скидывать файл для теста тебе мор124. Вчера вечером у меня не палит, а у тебя был детект"
}
{
  "ts": "2020-09-18T10:06:20.344814",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "собрать код собрал, а не работает ("
}
{
  "ts": "2020-09-18T10:06:47.112219",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-09-18T10:09:01.047083",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T10:09:05.576966",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "срочно файлы нужны"
}
{
  "ts": "2020-09-18T10:09:16.143475",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "сделай плиз"
}
{
  "ts": "2020-09-18T10:09:48.786806",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T10:13:04.538156",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. Ты говорил скинуть название детекта. Win32/Wacatac и DefenseIvasion."
}
{
  "ts": "2020-09-18T10:15:40.563987",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/sd2DyF/575BzF\nDelete: https://qaz.im/index.php?a=delete&q=1970842797\nPass: DWQSAFDASADFASAFDASF"
}
{
  "ts": "2020-09-18T10:16:03.510179",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Не те файлы"
}
{
  "ts": "2020-09-18T10:16:16.476410",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "То один то второй. aclean в большинстве случаев показывает на символы memset из vcruntime.obj. Я эти функции не использую, их компилятор неявно вставляет. Наверное для инициализации каких то структур."
}
{
  "ts": "2020-09-18T10:16:17.951353",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Сейчас новый скину"
}
{
  "ts": "2020-09-18T10:17:10.429000",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T10:18:49.019356",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/RyKZhD/zAB8e9\nDelete: https://qaz.im/index.php?a=delete&q=1697753255\nPass: FDSQERSADFASADFASAFADS"
}
{
  "ts": "2020-09-18T10:19:38.024620",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-18T10:25:51.203803",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T10:33:52.744925",
  "from": "rand@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T10:36:22.587995",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Делаем крипт и подписываю"
}
{
  "ts": "2020-09-18T10:39:20.581607",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "3 файл стучит не туда, перекриптуй плиз"
}
{
  "ts": "2020-09-18T10:40:51.314948",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T10:40:54.862087",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "steller@q3mcco35auwcstmt.onion",
  "body": "маякни как будешь )"
}
{
  "ts": "2020-09-18T10:42:16.752006",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/7FG5ED/AG75F2\nDelete: https://qaz.im/index.php?a=delete&q=1890044971\nPass: fDSERQASDFASAFDASADF"
}
{
  "ts": "2020-09-18T10:42:47.104861",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Перезалью"
}
{
  "ts": "2020-09-18T10:44:27.769728",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/9SD4bh/nDYHAz\nDelete: https://qaz.im/index.php?a=delete&q=472695586"
}
{
  "ts": "2020-09-18T10:44:34.925312",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "123"
}
{
  "ts": "2020-09-18T10:48:52.160683",
  "from": "poll@q3mcco35auwcstmt.onion",
  "to": "kerasid@q3mcco35auwcstmt.onion",
  "body": "idet delo bro?"
}
{
  "ts": "2020-09-18T10:50:17.165091",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T10:50:17.166375",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "маякни как будешь"
}
{
  "ts": "2020-09-18T10:50:17.167394",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "У кого нибудь есть опыт управления проектами и группами программистов? И кто может быть онлайн 12+ часов за доп оплату?"
}
{
  "ts": "2020-09-18T10:51:18.917950",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил мор"
}
{
  "ts": "2020-09-18T10:53:22.741436",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет. Я тут."
}
{
  "ts": "2020-09-18T10:57:12.086132",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "я еще вчера написал картеру"
}
{
  "ts": "2020-09-18T10:57:27.978554",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "ща еще поебу голову"
}
{
  "ts": "2020-09-18T10:57:30.207174",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "ку"
}
{
  "ts": "2020-09-18T10:57:38.955591",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "получил просьбу мою?"
}
{
  "ts": "2020-09-18T10:57:49.090640",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "[18:03:45] <Stern> с линка"
}
{
  "ts": "2020-09-18T10:57:49.095664",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "там очень важен сам линк. Деплой же проверяет скачкой с линка, бентли тоже. С файлообменника - все ок. С линка таргета - не ок.\nЯ же и говорю что тут детали важны.\nМы НЕ ЗНАЕМ линк таргета до того, как он на нем проверит. Т.е. для нормальной проверки мы должны получить от таргета список линков где проверять"
}
{
  "ts": "2020-09-18T10:57:49.096562",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "принял"
}
{
  "ts": "2020-09-18T10:57:49.098705",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет, я вел проект один, в нем еще был чел под мобильную платформу."
}
{
  "ts": "2020-09-18T10:57:49.099441",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "собрать код собрал, а не работает ("
}
{
  "ts": "2020-09-18T10:58:25.109354",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "dick@q3mcco35auwcstmt.onion",
  "body": "ну так мы сразу прикрутим"
}
{
  "ts": "2020-09-18T10:58:30.007330",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "crbym rj"
}
{
  "ts": "2020-09-18T10:58:32.539665",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "скинь кош"
}
{
  "ts": "2020-09-18T11:04:51.972707",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T11:05:38.292739",
  "from": "gus@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "Тест"
}
{
  "ts": "2020-09-18T11:07:42.043193",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "Привет по оплате пиши мне 15 и 1 числа"
}
{
  "ts": "2020-09-18T11:07:59.544469",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "а то у нас нет бухгалтера"
}
{
  "ts": "2020-09-18T11:08:13.872857",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "кто будет дату считать поэтому просто скидывай платеж"
}
{
  "ts": "2020-09-18T11:08:22.021124",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "за просрочку кидай тоже платеж"
}
{
  "ts": "2020-09-18T11:08:50.331947",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:09:06.472993",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "За 1,5 месяца?"
}
{
  "ts": "2020-09-18T11:09:08.672128",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T11:09:16.236202",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "ты над каким нибудь проектом работаешь?"
}
{
  "ts": "2020-09-18T11:09:38.857692",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:10:21.477882",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Проекты от бузы - avclean и сканер ftp/ssh серверов. И документы ворд - проекты andy"
}
{
  "ts": "2020-09-18T11:11:58.642968",
  "from": "gus@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "Чек"
}
{
  "ts": "2020-09-18T11:12:17.740906",
  "from": "naned@q3mcco35auwcstmt.onion",
  "to": "buza@q3mcco35auwcstmt.onion",
  "body": "Привет, небольшое уточнение, у нас задача просто запустить произвольный код, до запуска антивируса, или вообще предотвратить его запуск?"
}
{
  "ts": "2020-09-18T11:15:11.544514",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "gus@q3mcco35auwcstmt.onion",
  "body": "Тест"
}
{
  "ts": "2020-09-18T11:15:11.556010",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "gus@q3mcco35auwcstmt.onion",
  "body": "Чек"
}
{
  "ts": "2020-09-18T11:19:09.648599",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "0.21241097 Bitcoin BTC, 34LyHG8jtKCDZtZDqjqmvFqCnBYUAyUGAa"
}
{
  "ts": "2020-09-18T11:19:37.155053",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:19:44.811488",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Сделай, пожалуйста, 2 крипта для Таргета"
}
{
  "ts": "2020-09-18T11:20:02.133321",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "<target> Download: https://qaz.im/load/hNEN38/QybTBB\n[09:43:54] <target> пасс 1"
}
{
  "ts": "2020-09-18T11:20:41.945675",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "И по 1 крипту yas51 b yas50 c иконками pdf"
}
{
  "ts": "2020-09-18T11:20:54.189041",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "1 крипт чил ехе и длл"
}
{
  "ts": "2020-09-18T11:21:52.020866",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Итак по тестам"
}
{
  "ts": "2020-09-18T11:21:52.229154",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "ага отлично"
}
{
  "ts": "2020-09-18T11:21:54.732060",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "буду иметь ввиду тогда"
}
{
  "ts": "2020-09-18T11:22:03.675033",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Привет у тебя на данный момент как с детектами?"
}
{
  "ts": "2020-09-18T11:22:03.877145",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "все 3 сборки лоадера деектятся при старте Дефом"
}
{
  "ts": "2020-09-18T11:22:22.156183",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "<mango> Microsoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/Persistence.GI!ml&threatid=2147737565&enterprise=0\n    Name: Behavior:Win32/Persistence.GI!ml\n    ID: 2147737565\n    Severity: Severe\n    Category: Suspicious Behavior\n    Path: file:_C:\\Users\\AndyPC\\Desktop\\dl7_x64_release_nologs.exe\n    Detection Origin: Local machine\n    Detection Type: Concrete\n    Detection Source: Real-Time Protection\n    User: DESKTOP-DN3JK31\\AndyPC\n    Process Name: C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\n    Security intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T11:22:43.833539",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "2 сборка"
}
{
  "ts": "2020-09-18T11:22:44.395934",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": " Microsoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n    Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\AndyPC\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Control Panel.lnk; file:_C:\\Users\\AndyPC\\Desktop\\dl7_x64_release_nologs.exe; regkey:_HKCU@S-1-5-21-1288813064-829899127-1566876809-1001\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\\\Skype Remote Control; runkey:_HKCU@S-1-5-21-1288813064-829899127-1566876809-1001\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\\\Skype Remote Control; startup:_C:\\Users\\AndyPC\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Control Panel.lnk\n    Detection Origin: Local machine\n    Detection Type: Concrete\n    Detection Source: Real-Time Protection\n    User: DESKTOP-DN3JK31\\AndyPC\n    Process Name: C:\\Windows\\System32\\svchost.exe\n    Security intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T11:23:01.330038",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "и 3 сборка"
}
{
  "ts": "2020-09-18T11:23:02.832235",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": " Microsoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n    Name: Trojan:Script/Wacatac.B!ml\n    ID: 2147735503\n    Severity: Severe\n    Category: Trojan\n    Path: file:_C:\\Users\\AndyPC\\Desktop\\dl7_x64_release_nologs.exe\n    Detection Origin: Local machine\n    Detection Type: Concrete\n    Detection Source: Real-Time Protection\n    User: DESKTOP-DN3JK31\\AndyPC\n    Process Name: C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\n    Security intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n    Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T11:23:35.331338",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "привет скинь кош"
}
{
  "ts": "2020-09-18T11:26:35.914461",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "просьба к тебе\n\nя сегодня отлучусь. и когда буду не знаю точно\n\nпо-поводу выходных стабов как обычно. скинешь в джабер в оба контакта\n\nа до 16.00 скинь плиз, 2 стаба, чтобы я автоапдейт поставил\n\nоке ?"
}
{
  "ts": "2020-09-18T11:29:32.562258",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:29:34.922696",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T11:31:27.990602",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "KJH6%CW^EVBRYTNbo6rIEG*V^wc4tsrEVB^ORNIYoj76tnbVEUWCR\n\n    Download: https://qaz.im/load/fQBiFr/K3Te48   \n    Delete: https://qaz.im/index.php?a=delete&q=1543952332"
}
{
  "ts": "2020-09-18T11:33:22.597594",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Мор сносит Деф при старте на 10"
}
{
  "ts": "2020-09-18T11:33:30.722640",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 1:31:04 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\mor124\\MOR124.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSecurity intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T11:34:36.399403",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "У меня не палит"
}
{
  "ts": "2020-09-18T11:35:22.219209",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "А АВ какой версии,"
}
{
  "ts": "2020-09-18T11:35:56.262134",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "1.323.1404"
}
{
  "ts": "2020-09-18T11:36:08.619836",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "твоего человека"
}
{
  "ts": "2020-09-18T11:36:10.637582",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "ждали утром"
}
{
  "ts": "2020-09-18T11:36:14.611127",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "он так ничего и не скинул"
}
{
  "ts": "2020-09-18T11:36:15.406188",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "трой"
}
{
  "ts": "2020-09-18T11:36:17.861856",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "это что тако"
}
{
  "ts": "2020-09-18T11:36:22.686804",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "я думал у вас строго с этим"
}
{
  "ts": "2020-09-18T11:37:11.265917",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Другая версия"
}
{
  "ts": "2020-09-18T11:38:09.049615",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Дальше буду чистить"
}
{
  "ts": "2020-09-18T11:38:33.677385",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Пока нет стабов"
}
{
  "ts": "2020-09-18T11:38:34.440495",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T11:38:39.360022",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ясно"
}
{
  "ts": "2020-09-18T11:39:10.958460",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T11:39:13.576636",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "кого еще поставили на лок"
}
{
  "ts": "2020-09-18T11:39:48.031215",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:40:22.639777",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Бро, пни плиз 173.232.146.199:31005 - зависла при удалении снапа"
}
{
  "ts": "2020-09-18T11:41:44.638113",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T11:41:47.972002",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "skywalker@q3mcco35auwcstmt.onion",
  "body": "привет, меня две недели не будет, поеду брюшко греть под солнышком )"
}
{
  "ts": "2020-09-18T11:41:48.187414",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:42:00.598659",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "привет скинь кош"
}
{
  "ts": "2020-09-18T11:42:44.373691",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "и во второй админке"
}
{
  "ts": "2020-09-18T11:42:48.423768",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "x1-x10"
}
{
  "ts": "2020-09-18T11:42:57.538759",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "там точно такие же настройки как и на первой ?"
}
{
  "ts": "2020-09-18T11:43:14.879469",
  "from": "green@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "проверь"
}
{
  "ts": "2020-09-18T11:43:24.751988",
  "from": "reshaev@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T11:43:28.500145",
  "from": "reshaev@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "bc1qht0lzvwddxgg5m3rlyymgptpfqa7calht68mq7"
}
{
  "ts": "2020-09-18T11:44:34.979194",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Ага работает. Спасибо )"
}
{
  "ts": "2020-09-18T11:45:01.585108",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "35 бтц докидываю"
}
{
  "ts": "2020-09-18T11:45:04.125763",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T11:45:08.594370",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "ок?"
}
{
  "ts": "2020-09-18T11:45:10.276478",
  "from": "reshaev@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T11:45:27.750881",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "reshaev@q3mcco35auwcstmt.onion",
  "body": "скинул"
}
{
  "ts": "2020-09-18T11:46:17.266620",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "а они есть на первой админке ?"
}
{
  "ts": "2020-09-18T11:46:36.951599",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "ну там же были"
}
{
  "ts": "2020-09-18T11:46:39.727293",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "200 юзеров одинаковых"
}
{
  "ts": "2020-09-18T11:47:02.268902",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "так я стер всех кто больше месяца офф"
}
{
  "ts": "2020-09-18T11:49:58.311045",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "а проекты от бузы не закончены еще ?"
}
{
  "ts": "2020-09-18T11:50:18.026086",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-18T11:50:19.378899",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "а помнишь"
}
{
  "ts": "2020-09-18T11:50:24.244399",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "там какие настройик были у них?"
}
{
  "ts": "2020-09-18T11:50:28.603394",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Еще нет"
}
{
  "ts": "2020-09-18T11:50:32.134577",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "помоему там единые комментарии были"
}
{
  "ts": "2020-09-18T11:50:38.731946",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "вот на второй админке надо такие же настройки"
}
{
  "ts": "2020-09-18T11:51:10.833944",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "А что не готово еще и что готово"
}
{
  "ts": "2020-09-18T11:51:31.384764",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "С ребятами обсуждаем некую сессию, зелёную, говорят там инфраструктура производственная, интересно им. Предлагают   взять доску для задач физическую"
}
{
  "ts": "2020-09-18T11:52:16.577094",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ну единые комменты я им и дал"
}
{
  "ts": "2020-09-18T11:52:28.971480",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T11:53:05.984952",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ftp/ssh еще не готово. А по avclean часть задания готово. Буза частями задания выдает."
}
{
  "ts": "2020-09-18T11:53:22.128452",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "скинь мне сюда \n\nlogin\nPassword"
}
{
  "ts": "2020-09-18T11:53:25.235413",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "всех 10 юзеров"
}
{
  "ts": "2020-09-18T11:53:28.177096",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "x1-x10"
}
{
  "ts": "2020-09-18T11:53:31.530447",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "на втрой админке"
}
{
  "ts": "2020-09-18T11:53:33.472027",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "По документам ворд - поддержка"
}
{
  "ts": "2020-09-18T11:54:06.236580",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "avclean это что за проект?"
}
{
  "ts": "2020-09-18T11:54:42.773195",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "На 2019 тоже спалил на старте?"
}
{
  "ts": "2020-09-18T11:55:01.928133",
  "from": "mavelek@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "mavelek: x1 f\\T48QQtZFE_237\nx2 SV<BA=g3qi]\nx3 wLTGg5vv\nx4 %3<(\"Ib^V`\nx5 ,><!n8?Cd=$\nx6 <xWF}wX_4n]JPJ>aX`#H\nx7 uCCs!u-{30aw?\nx8 GmY\\<|JXb\nx9 Zs]OPREG\nx10 E=ba=G)"
}
{
  "ts": "2020-09-18T11:55:14.757541",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavelek@q3mcco35auwcstmt.onion",
  "body": "принял"
}
{
  "ts": "2020-09-18T11:55:19.839555",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Автоматическая чистка от сигнатурных детектов.\nУтилита получает на вход файлы .exe и .map, на выходе выдает список символов, на которых АВ поставил сигнатуры."
}
{
  "ts": "2020-09-18T11:55:39.151951",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "нет там чисто"
}
{
  "ts": "2020-09-18T11:56:03.371830",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "а с какими ав работает?"
}
{
  "ts": "2020-09-18T11:56:33.050491",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/get23R01#TwGAU3YBV"
}
{
  "ts": "2020-09-18T11:56:42.559794",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "доступы к админке где светофор"
}
{
  "ts": "2020-09-18T11:58:08.590921",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Windows Defender, Eset NOD, Symantec Endpoint Protection. И еще реализовал интеграцию с dyncheck.com"
}
{
  "ts": "2020-09-18T12:00:58.971168",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "броооо"
}
{
  "ts": "2020-09-18T12:04:47.877937",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": ">И еще реализовал интеграцию с dyncheck.com\n\nа как ты оттуда список символов берешь на что детект?"
}
{
  "ts": "2020-09-18T12:05:43.854161",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T12:05:50.064543",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Таргет просит оплатить серты"
}
{
  "ts": "2020-09-18T12:05:54.175931",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "[13:05:45] <buza> я так понимаю что со времен неоплаты он не работает"
}
{
  "ts": "2020-09-18T12:05:56.409753",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "4-8 штук"
}
{
  "ts": "2020-09-18T12:05:59.428362",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "ты давно не работаешь?"
}
{
  "ts": "2020-09-18T12:06:07.953188",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "привет давай"
}
{
  "ts": "2020-09-18T12:06:11.492780",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "скинь кош и сумму"
}
{
  "ts": "2020-09-18T12:06:29.529312",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Последнюю неделю. Работу искал."
}
{
  "ts": "2020-09-18T12:06:40.041994",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": " <pulyamaster@xabber.org> 19fDN5tQkpLkMyA3RR9bCj5vH2rpsNoCnW\n[19:05:21] <pulyamaster@xabber.org> 20к за 8 сертов"
}
{
  "ts": "2020-09-18T12:06:57.296309",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Пока оплаты не было еще работал."
}
{
  "ts": "2020-09-18T12:07:32.267997",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "оплатил"
}
{
  "ts": "2020-09-18T12:07:47.406104",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T12:09:02.641675",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл таргету отправил"
}
{
  "ts": "2020-09-18T12:09:29.062310",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Привет. Бентли сегодня тестировал. Появился детект. Сейчас разбираюсь."
}
{
  "ts": "2020-09-18T12:10:14.174456",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Как называется?"
}
{
  "ts": "2020-09-18T12:11:08.427248",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Trojan:Script/Wacatac.B!ml\nBehavior:Win32/Persistence.GI!ml"
}
{
  "ts": "2020-09-18T12:11:39.878031",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Behavior:Win32/Persistence.GI!ml это наверное из-за того что в реестр пишешь."
}
{
  "ts": "2020-09-18T12:13:39.524585",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Может убрать запись в реестр? Оставить создание ярлыка и задания BITS?"
}
{
  "ts": "2020-09-18T12:15:05.256823",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Попробуй по одному попробовать, что уберёт детект то и оставляй."
}
{
  "ts": "2020-09-18T12:16:40.513568",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Второй файл таргету отправил"
}
{
  "ts": "2020-09-18T12:17:57.302595",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "мы размянулись"
}
{
  "ts": "2020-09-18T12:17:58.488369",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "оказывается"
}
{
  "ts": "2020-09-18T12:18:01.609035",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "все молодец он"
}
{
  "ts": "2020-09-18T12:23:27.352083",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет. У меня график 5/2, с 10 до 19. У моего БК палится загрузчик через Win Defender на данный момент. У Frog появился детект сегодня у Win Defender, разбирается. У Steller всё сделано загрузчик\\бот, детектов нет (у него загрузчик это ps1 сценарий). У Price сделан бот, он доделывает загрузчик к нему."
}
{
  "ts": "2020-09-18T12:24:22.650463",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Что у тебя из моего кода в загрузчике есть? У меня тоже Wacatac."
}
{
  "ts": "2020-09-18T12:26:27.615229",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T12:26:29.755217",
  "from": "dove@q3mcco35auwcstmt.onion",
  "to": "kaktus@q3mcco35auwcstmt.onion",
  "body": "привет, в общем сделал я вчера процедуру запуска powershell скриптов с возвратом данных через каналы, реализовал пока маленький скрипт получения разрядности ОС в residentLoader, работает"
}
{
  "ts": "2020-09-18T12:36:11.971816",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Модуль crypter.\nemercoinResolveDns"
}
{
  "ts": "2020-09-18T12:36:33.757425",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T12:37:14.569089",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "Буза передавал тебе проект поисковика ftp/ssh?"
}
{
  "ts": "2020-09-18T12:37:26.836937",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил мор, посмотри, пожалуйста сразу на 10-ке"
}
{
  "ts": "2020-09-18T12:37:31.658109",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "cosmos@q3mcco35auwcstmt.onion",
  "body": "Я продолжу его делать."
}
{
  "ts": "2020-09-18T12:37:42.955434",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T12:39:35.647830",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "Priwet"
}
{
  "ts": "2020-09-18T12:39:46.234831",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "тилар написал"
}
{
  "ts": "2020-09-18T12:39:59.977315",
  "from": "cosmos@q3mcco35auwcstmt.onion",
  "to": "bullet@q3mcco35auwcstmt.onion",
  "body": "ля начала нужен скрипт, который будет чекать FTP/SFTP и WSO шеллы на валид\nи по всем валидным запускать поиск следующих расширений файлов:\npdf, exe, zip, rar, gz, doc, docx, docm, xls, xlsx, xlsm\n\nсписок нужно выводить в тхт гуды и \"гуды с файлами\"\nв \"гуды с файлами\" FTP/SFTP или WSO и внизу список файлов с нашими расширениями и название (price.xls)\nпосле каждого гуда с файлами две пустых строки\n\n\nесли что то найдем интересное на ваших фтп, я напишу что надо делать, чтобы правильно выдавать файл\nу меня есть заготовки, может потребуется всего лишь внести правки в один файл"
}
{
  "ts": "2020-09-18T12:49:26.935394",
  "from": "ganesh@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T12:49:30.636857",
  "from": "ganesh@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "тут?"
}
{
  "ts": "2020-09-18T12:50:17.522261",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "ganesh@q3mcco35auwcstmt.onion",
  "body": "да, привет"
}
{
  "ts": "2020-09-18T12:50:50.929295",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Задетектил черз минуту работы"
}
{
  "ts": "2020-09-18T12:50:53.975049",
  "from": "ganesh@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "керасид тебе ищет срочно что то"
}
{
  "ts": "2020-09-18T12:50:59.795341",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 2:47:29 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\morfiu\\MORFIU.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T12:52:44.640369",
  "from": "carter@q3mcco35auwcstmt.onion",
  "to": "ganesh@q3mcco35auwcstmt.onion",
  "body": "ага, уже отписал ему, спасибо"
}
{
  "ts": "2020-09-18T12:53:44.717071",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T12:53:58.640216",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T12:54:04.424226",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "криптани плиз 2 стаба"
}
{
  "ts": "2020-09-18T12:54:13.868347",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "файлы те же, на ссылках"
}
{
  "ts": "2020-09-18T12:54:19.543531",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Yas50 отправил"
}
{
  "ts": "2020-09-18T12:54:26.964654",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Бро, подскажи, пожалуйста, как часто ты стабы чистишь? Ишем еще криптора у нам вот он спрашивает"
}
{
  "ts": "2020-09-18T12:54:29.945781",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "++"
}
{
  "ts": "2020-09-18T12:54:42.131576",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T12:54:45.253188",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T12:55:56.365552",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Проверка  локализации.\nЗакрепление в системе. \nУдаление хуков.\nНо все эти модули обфусцирую по-своему и них много менял. libraryproxy переписал по-своему."
}
{
  "ts": "2020-09-18T12:57:00.231950",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Стаб чищу по мере того как спалит defender"
}
{
  "ts": "2020-09-18T12:57:26.462497",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Практически каждый день"
}
{
  "ts": "2020-09-18T12:57:42.178276",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ага понял спс"
}
{
  "ts": "2020-09-18T12:57:49.043537",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "А хто спрашивает?"
}
{
  "ts": "2020-09-18T12:58:13.190766",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Потенциальный кандидат к нам в команду"
}
{
  "ts": "2020-09-18T12:58:45.004116",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил мор"
}
{
  "ts": "2020-09-18T12:58:53.213692",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T13:00:33.354569",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "хей"
}
{
  "ts": "2020-09-18T13:05:59.509225",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "привет бр"
}
{
  "ts": "2020-09-18T13:06:10.257897",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "по урьан"
}
{
  "ts": "2020-09-18T13:08:19.556046",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Yas51 отправил"
}
{
  "ts": "2020-09-18T13:08:29.560396",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "++"
}
{
  "ts": "2020-09-18T13:10:59.866970",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "yas50 деф сносит при старте"
}
{
  "ts": "2020-09-18T13:11:44.935043",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 3:10:43 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\yas50\\YAS50.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSecurity intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T13:11:45.164488",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "кароче бро"
}
{
  "ts": "2020-09-18T13:11:46.201212",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "и"
}
{
  "ts": "2020-09-18T13:12:00.542431",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 3:10:45 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\yas50\\YAS50.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSecurity intelligence Version: AV: 1.323.1404.0, AS: 1.323.1404.0, NIS: 1.323.1404.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T13:12:13.473225",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "бро"
}
{
  "ts": "2020-09-18T13:12:19.238173",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "по пдоку чето"
}
{
  "ts": "2020-09-18T13:12:21.179485",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "у вас?"
}
{
  "ts": "2020-09-18T13:12:27.314556",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "ексель 0 дей грущите или че?"
}
{
  "ts": "2020-09-18T13:12:33.117023",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "мне надо понимание"
}
{
  "ts": "2020-09-18T13:16:47.677318",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "hash@q3mcco35auwcstmt.onion",
  "body": "бро"
}
{
  "ts": "2020-09-18T13:16:52.727773",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "hash@q3mcco35auwcstmt.onion",
  "body": "ты прости"
}
{
  "ts": "2020-09-18T13:17:09.498921",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "hash@q3mcco35auwcstmt.onion",
  "body": "зйми  100 до неопределенного срока"
}
{
  "ts": "2020-09-18T13:21:19.706827",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Договорился с криптором, которого манго дал, на тестовую неделю. и 600$ в неделю на 5-10 криптов в день."
}
{
  "ts": "2020-09-18T13:23:23.829416",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Привет. Проверь этот загрузчик:\nDownload: https://qaz.im/load/Eb9aNe/SfenKz   \nDelete: https://qaz.im/index.php?a=delete&q=1709413496\nПароль: wQ;B(OX^qgf@oJo6h"
}
{
  "ts": "2020-09-18T13:23:43.088191",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T13:23:46.066002",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Группа 2?"
}
{
  "ts": "2020-09-18T13:23:51.782821",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да."
}
{
  "ts": "2020-09-18T13:23:58.056842",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T13:24:53.184478",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Когда мор пускают в работу его тоже через архив и потом на машине розархивируют и запускают"
}
{
  "ts": "2020-09-18T13:25:27.789692",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "я не знаю"
}
{
  "ts": "2020-09-18T13:25:57.407754",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://anonfiles.com/bd4620W9o9/MOR124_exe"
}
{
  "ts": "2020-09-18T13:26:07.194756",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Так у меня не спалился"
}
{
  "ts": "2020-09-18T13:26:23.642164",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "https://qaz.im/load/3Dihs4/FD4d2b"
}
{
  "ts": "2020-09-18T13:26:36.041632",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Когда через архив тогда палит"
}
{
  "ts": "2020-09-18T13:26:49.281754",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хотя файл один и тот же"
}
{
  "ts": "2020-09-18T13:26:51.691842",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да я через архив шлю понял"
}
{
  "ts": "2020-09-18T13:27:02.071959",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "на свою тестовую вм"
}
{
  "ts": "2020-09-18T13:27:14.747738",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "barmen@q3mcco35auwcstmt.onion",
  "body": "у этих там паника кого вы ломали"
}
{
  "ts": "2020-09-18T13:27:17.562962",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "barmen@q3mcco35auwcstmt.onion",
  "body": "передай игле"
}
{
  "ts": "2020-09-18T13:27:23.238216",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "barmen@q3mcco35auwcstmt.onion",
  "body": "лол0"
}
{
  "ts": "2020-09-18T13:29:08.733164",
  "from": "buza@q3mcco35auwcstmt.onion",
  "to": "bill@q3mcco35auwcstmt.onion",
  "body": "хей"
}
{
  "ts": "2020-09-18T13:42:09.757008",
  "from": "bill@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "KJH6%CW^EVBRYTNbo6rIEG*V^wc4tsrEVB^ORNIYoj76tnbVEUWCR\n\n    Download: https://qaz.im/load/fQBiFr/K3Te48   \n    Delete: https://qaz.im/index.php?a=delete&q=1543952332"
}
{
  "ts": "2020-09-18T13:42:09.758125",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "С ребятами обсуждаем некую сессию, зелёную, говорят там инфраструктура производственная, интересно им. Предлагают   взять доску для задач физическую"
}
{
  "ts": "2020-09-18T13:43:18.754673",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/FETeRR/YfhHQH\nDelete: https://qaz.im/index.php?a=delete&q=1201955066"
}
{
  "ts": "2020-09-18T13:43:22.755143",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Password 123"
}
{
  "ts": "2020-09-18T13:45:46.099995",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-18T13:46:51.106496",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "как дела?"
}
{
  "ts": "2020-09-18T13:47:17.006336",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Завал пока минут 30 гляну твой бк"
}
{
  "ts": "2020-09-18T13:47:35.001297",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок, позже подойду"
}
{
  "ts": "2020-09-18T13:47:54.007608",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Привет какие там адреса сейчас?"
}
{
  "ts": "2020-09-18T13:49:00.088166",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Адреса:\nлоадеры\n194.5.249.156\n85.143.221.85\n45.148.10.190\n86.104.194.77\n164.132.76.76\n164.68.107.165\n\n\nбот\n51.89.177.8 \n212.22.70.4\n194.156.98.46\n93.189.40.214\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-18T13:49:10.987875",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Адреса:\nлоадеры\n194.5.249.156\n85.143.221.85\n45.148.10.190\n86.104.194.77\n164.132.76.76\n164.68.107.165\n\n\nбот\n51.89.177.8 \n212.22.70.4\n194.156.98.46\n93.189.40.214\n54.37.237.253\n185.164.32.107"
}
{
  "ts": "2020-09-18T13:49:12.153963",
  "from": "atlant@q3mcco35auwcstmt.onion",
  "to": "kevin@q3mcco35auwcstmt.onion",
  "body": "кевин бля"
}
{
  "ts": "2020-09-18T13:53:28.321602",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Мор - ок выдаю"
}
{
  "ts": "2020-09-18T13:56:09.856701",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T13:58:20.132590",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Добрый день"
}
{
  "ts": "2020-09-18T13:58:22.249607",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Готов файл"
}
{
  "ts": "2020-09-18T13:58:22.692578",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "DNF,smdnkjndfg,nf,fhmoifkg"
}
{
  "ts": "2020-09-18T13:58:27.273594",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/tQinRz/8atiy9   \n    Delete: https://qaz.im/index.php?a=delete&q=568581930"
}
{
  "ts": "2020-09-18T14:02:02.476135",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "andy@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T14:02:14.967588",
  "from": "bullet@q3mcco35auwcstmt.onion",
  "to": "andy@q3mcco35auwcstmt.onion",
  "body": "Я работаю дальше"
}
{
  "ts": "2020-09-18T14:05:12.933340",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "Добрый день, друже."
}
{
  "ts": "2020-09-18T14:05:24.446047",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Добрый."
}
{
  "ts": "2020-09-18T14:05:43.854078",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "как дела?"
}
{
  "ts": "2020-09-18T14:06:28.117521",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T14:06:33.468173",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Тяжко..."
}
{
  "ts": "2020-09-18T14:06:47.767094",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "что так?"
}
{
  "ts": "2020-09-18T14:06:54.724660",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Ох, как тяжко."
}
{
  "ts": "2020-09-18T14:07:07.041316",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Да, работы до хрена."
}
{
  "ts": "2020-09-18T14:07:55.750277",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "тебе помощники нужны, чтоб как-то себя разгрузить)"
}
{
  "ts": "2020-09-18T14:08:29.725235",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Есть, но бывают задачи, которые перепоручить не получается."
}
{
  "ts": "2020-09-18T14:09:03.222018",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "тогда да..."
}
{
  "ts": "2020-09-18T14:09:35.549646",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Yas51 проверял"
}
{
  "ts": "2020-09-18T14:10:43.908398",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T14:10:49.669339",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Нет еще только 50"
}
{
  "ts": "2020-09-18T14:11:08.445314",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ща запущу"
}
{
  "ts": "2020-09-18T14:17:01.154270",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "51 тоже детектит при старте"
}
{
  "ts": "2020-09-18T14:17:09.144005",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 4:14:27 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\yas51\\yas51.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: Unknown\n \tSecurity intelligence Version: AV: 1.323.1409.0, AS: 1.323.1409.0, NIS: 1.323.1409.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T14:17:29.125643",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "и Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 4:14:29 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.B!ml&threatid=2147735505&enterprise=0\n \tName: Trojan:Win32/Wacatac.B!ml\n \tID: 2147735505\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\yas51\\yas51.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: System\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\explorer.exe\n \tSecurity intelligence Version: AV: 1.323.1409.0, AS: 1.323.1409.0, NIS: 1.323.1409.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T14:18:34.237976",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ТАкие же детекты на 2019"
}
{
  "ts": "2020-09-18T14:19:25.317373",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Посмотрел я на проблему."
}
{
  "ts": "2020-09-18T14:19:29.712513",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Да, задачка."
}
{
  "ts": "2020-09-18T14:19:37.563886",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Но, решение нашел."
}
{
  "ts": "2020-09-18T14:19:50.565593",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "braun@q3mcco35auwcstmt.onion",
  "body": "Запишу на выходных, в понедельник получишь."
}
{
  "ts": "2020-09-18T14:21:07.850927",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "А можешь 2 файлика для Таргета переделать там тоже дететк при запуске"
}
{
  "ts": "2020-09-18T14:21:32.041074",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "сегодня"
}
{
  "ts": "2020-09-18T14:21:34.314634",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "все до 00 00"
}
{
  "ts": "2020-09-18T14:21:35.244215",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "торчат"
}
{
  "ts": "2020-09-18T14:21:37.561569",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "dandis@q3mcco35auwcstmt.onion",
  "body": "ждут твоих задач"
}
{
  "ts": "2020-09-18T14:21:37.656689",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 2:09:43 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      AV-Defender2019\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.C!ml&threatid=2147749372&enterprise=0\n \tName: Trojan:Win32/Wacatac.C!ml\n \tID: 2147749372\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\client2\\Downloads\\Scrip.exe; webfile:_C:\\Users\\client2\\Downloads\\Scrip.exe|https://wikiapply.ir/Scrip.exe|pid:1620,ProcessStart:132449117822519362\n \tDetection Origin: Internet\n \tDetection Type: FastPath\n \tDetection Source: Downloads and attachments\n \tUser: AV-Defender2019\\client2\n \tProcess Name: Unknown\n \tSignature Version: AV: 1.323.1409.0, AS: 1.323.1409.0, NIS: 1.323.1409.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T14:22:53.826255",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "кого вы еще там локнули"
}
{
  "ts": "2020-09-18T14:25:27.178324",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T14:25:32.800820",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "есть бот на нем почему-то не как вчера"
}
{
  "ts": "2020-09-18T14:25:36.120790",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "криво запускается внц"
}
{
  "ts": "2020-09-18T14:25:48.146505",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "а именно -  мышка кликает не там где показывает"
}
{
  "ts": "2020-09-18T14:25:54.210400",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "а смещен курсор как-то"
}
{
  "ts": "2020-09-18T14:26:02.489081",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "и никак не могу настроиться куда он смещен"
}
{
  "ts": "2020-09-18T14:26:08.965140",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Привет."
}
{
  "ts": "2020-09-18T14:26:18.096652",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "что делает невозможнным работу, и я бы пропутил бота но он мне очень нужен"
}
{
  "ts": "2020-09-18T14:26:21.621169",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "что подскажешь сделать?"
}
{
  "ts": "2020-09-18T14:26:24.374768",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Попробуй его перегрузить."
}
{
  "ts": "2020-09-18T14:26:28.151085",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "я нажал запустить на боте внц еще раз"
}
{
  "ts": "2020-09-18T14:26:37.354667",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "вот уже минут пять не перезапускается"
}
{
  "ts": "2020-09-18T14:26:38.955612",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "И? Ничего?"
}
{
  "ts": "2020-09-18T14:26:39.159635",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T14:26:40.855172",
  "from": "dandis@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T14:26:41.263532",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "потмоу что я сижу на боте жду"
}
{
  "ts": "2020-09-18T14:26:51.611209",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "по классике"
}
{
  "ts": "2020-09-18T14:26:52.405399",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Дай индекс."
}
{
  "ts": "2020-09-18T14:26:54.275066",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "только тебе написал"
}
{
  "ts": "2020-09-18T14:26:57.607720",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "и перегружается"
}
{
  "ts": "2020-09-18T14:27:15.883807",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Понял.:-)"
}
{
  "ts": "2020-09-18T14:29:20.958078",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "красавец"
}
{
  "ts": "2020-09-18T14:29:22.049597",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "сделал все"
}
{
  "ts": "2020-09-18T14:29:23.639514",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "скинул"
}
{
  "ts": "2020-09-18T14:31:13.033111",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-18T14:32:03.266248",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "но вот вопрос, я эти вектор этих адресов вшил. Но в реальности они как будут в бот поставляться? Сейчас нужна перекомпиляция."
}
{
  "ts": "2020-09-18T14:33:27.995910",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "не помогло"
}
{
  "ts": "2020-09-18T14:33:30.953234",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "вчера все было ок"
}
{
  "ts": "2020-09-18T14:33:33.746120",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": " с этим же ботом"
}
{
  "ts": "2020-09-18T14:34:15.090245",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Зараза."
}
{
  "ts": "2020-09-18T14:34:55.101149",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Что же за фигня!"
}
{
  "ts": "2020-09-18T14:36:02.105337",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T14:36:28.180076",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Фалы проверял?"
}
{
  "ts": "2020-09-18T14:36:54.047149",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "price@q3mcco35auwcstmt.onion",
  "body": "Да."
}
{
  "ts": "2020-09-18T14:36:54.661192",
  "from": "forbes@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "\nпривет! \nпланирую траф хороший пустить, меня просят узнать у того кто криптует\nЧем накрывает файл, какие детекты на рантайм и скан с аптаймом инета в минуту\nhttps://prnt.sc/ujkovl"
}
{
  "ts": "2020-09-18T14:37:05.521207",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "да спс все ок"
}
{
  "ts": "2020-09-18T14:37:25.301554",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "меня не будет до 1 ночи примерно, сделай мне плиз ближе к твоему уходу 2 стаба плиз или 3"
}
{
  "ts": "2020-09-18T14:37:26.881917",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "ок ?"
}
{
  "ts": "2020-09-18T14:37:38.359055",
  "from": "mors@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "скинь в офф"
}
{
  "ts": "2020-09-18T14:37:49.446945",
  "from": "price@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-18T14:37:55.345160",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T14:37:59.526816",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Сделаю"
}
{
  "ts": "2020-09-18T14:38:06.387476",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "forbes@q3mcco35auwcstmt.onion",
  "body": "Так смотри. В идеале сделать тебе длл. Она меньше палится у нас сейчас сможете с ней работать?"
}
{
  "ts": "2020-09-18T14:40:47.952958",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "ну мне надо реить вопрос"
}
{
  "ts": "2020-09-18T14:40:54.210121",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "подсобишь чем-то?"
}
{
  "ts": "2020-09-18T14:41:07.753900",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Индекс дай, пожалуйста."
}
{
  "ts": "2020-09-18T14:41:12.485841",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Иначе - никак."
}
{
  "ts": "2020-09-18T14:41:23.684570",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Мне посмотреть надо."
}
{
  "ts": "2020-09-18T14:41:28.455048",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": " HOMEMAIN_W10018362.513ADB298A9D9581E24F7FF7FB73F337"
}
{
  "ts": "2020-09-18T14:41:34.185174",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Секунду."
}
{
  "ts": "2020-09-18T14:45:31.770538",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "жду тебя имей ввиду"
}
{
  "ts": "2020-09-18T14:45:50.995191",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Понятно-понятно."
}
{
  "ts": "2020-09-18T14:45:53.478857",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Смотрю."
}
{
  "ts": "2020-09-18T14:47:21.866573",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Привет!"
}
{
  "ts": "2020-09-18T14:47:58.527264",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Большая просьба, напомни как в админку ВНЦ попасть."
}
{
  "ts": "2020-09-18T14:48:09.249925",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Прежняя-то машина сдохла."
}
{
  "ts": "2020-09-18T14:50:25.979677",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл для таргета проверяешь через rar  архиве?"
}
{
  "ts": "2020-09-18T14:50:57.833075",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Рара в архиве и с прямой ссылкойчерез фтп"
}
{
  "ts": "2020-09-18T14:56:22.434394",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "https://shighil.com/Scrit.exe"
}
{
  "ts": "2020-09-18T14:56:33.246843",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "https://shighil.com/Scrip.exe"
}
{
  "ts": "2020-09-18T14:56:35.731182",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Djn nfr nj;t"
}
{
  "ts": "2020-09-18T14:56:35.865476",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Так."
}
{
  "ts": "2020-09-18T14:56:38.755961",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Вот так тоже"
}
{
  "ts": "2020-09-18T14:56:48.645207",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Дружище, толкни еще раз этот бот."
}
{
  "ts": "2020-09-18T14:56:49.331965",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "внимателен"
}
{
  "ts": "2020-09-18T14:56:58.151805",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "У меня доступа к админке нет."
}
{
  "ts": "2020-09-18T14:57:12.912917",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "сделал"
}
{
  "ts": "2020-09-18T14:57:22.245446",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Спасибо."
}
{
  "ts": "2020-09-18T14:58:52.229159",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Не стартует, зараза."
}
{
  "ts": "2020-09-18T15:01:11.047802",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл таргету отправил"
}
{
  "ts": "2020-09-18T15:01:30.333368",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T15:01:32.120062",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-09-18T15:02:07.070500",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "а чей то он..."
}
{
  "ts": "2020-09-18T15:03:16.563093",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Уже стартовал."
}
{
  "ts": "2020-09-18T15:03:25.413962",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Уже посотрел!"
}
{
  "ts": "2020-09-18T15:03:30.388626",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Посмотрел!"
}
{
  "ts": "2020-09-18T15:03:43.215910",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "Вот хрен его знает, что это такое!!!"
}
{
  "ts": "2020-09-18T15:03:55.666534",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "я уже всьречал"
}
{
  "ts": "2020-09-18T15:03:59.398615",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "ок выйди"
}
{
  "ts": "2020-09-18T15:04:04.721896",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "буду ебаться"
}
{
  "ts": "2020-09-18T15:04:46.433650",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "И что удивительно, так это то, что может появиться на любом боте."
}
{
  "ts": "2020-09-18T15:04:47.310805",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Детек Дефендер при старте"
}
{
  "ts": "2020-09-18T15:04:54.463603",
  "from": "baget@q3mcco35auwcstmt.onion",
  "to": "logan@q3mcco35auwcstmt.onion",
  "body": "А потом так же уйти."
}
{
  "ts": "2020-09-18T15:05:08.818190",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Log Name:   Microsoft-Windows-Windows Defender/Operational\nSource:    Microsoft-Windows-Windows Defender\nDate:     9/18/2020 5:46:13 PM\nEvent ID:   1116\nTask Category: None\nLevel:     Warning\nKeywords:   \nUser:     SYSTEM\nComputer:   DESKTOP-VN3CT0A\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\nFor more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Azden.A!cl&threatid=2147718745&enterprise=0\n   Name: Trojan:Win32/Azden.A!cl\n   ID: 2147718745\n   Severity: Severe\n   Category: Trojan\n   Path: file:_C:\\Users\\abhaz\\Downloads\\dl2\\dl2.exe\n   Detection Origin: Local machine\n   Detection Type: FastPath\n   Detection Source: Real-Time Protection\n   User: DESKTOP-VN3CT0A\\abhaz\n   Process Name: C:\\Windows\\explorer.exe\n   Security intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n   Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5\n---------------------------------------------------------------\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 5:46:32 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      DESKTOP-VN3CT0A\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\nFor more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Azden.A!cl&threatid=2147718745&enterprise=0\n      Name: Trojan:Win32/Azden.A!cl\n      ID: 2147718745\n      Severity: Severe\n      Category: Trojan\n      Path: file:_C:\\Users\\abhaz\\Downloads\\dl2\\dl2.exe\n      Detection Origin: Local machine\n      Detection Type: FastPath\n      Detection Source: Real-Time Protection\n      User: DESKTOP-VN3CT0A\\abhaz\n      Process Name: C:\\Windows\\explorer.exe\n      Security intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n      Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5\n\n=================================================\n\nLog Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 5:47:08 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      DESKTOP-VN3CT0A\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\nFor more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Azden.A!cl&threatid=2147718745&enterprise=0\n      Name: Trojan:Win32/Azden.A!cl\n      ID: 2147718745\n      Severity: Severe\n      Category: Trojan\n      Path: file:_C:\\Users\\abhaz\\Downloads\\dl2\\dl2.exe\n      Detection Origin: Local machine\n      Detection Type: FastPath\n      Detection Source: Real-Time Protection\n      User: DESKTOP-VN3CT0A\\abhaz\n      Process Name: C:\\Windows\\explorer.exe\n      Security intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n      Engine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T15:08:46.283763",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Уточнить хотел. В системе же закрепляется exe-файл (загрузчик имею ввиду), который запускается первым или тот, что загружается с сервера и запускается вторым тоже нужно закреплять в системе?"
}
{
  "ts": "2020-09-18T15:09:09.468126",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "так ну теперь не открывается у него"
}
{
  "ts": "2020-09-18T15:09:12.161953",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "хром"
}
{
  "ts": "2020-09-18T15:09:26.346979",
  "from": "logan@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "свернутый"
}
{
  "ts": "2020-09-18T15:10:04.903412",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Закрепляется один, если на сервере окажется другая версия, он скачивается и запускается."
}
{
  "ts": "2020-09-18T15:10:36.886526",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "То есть если скачался новый, то старый удаляется, новый уже сам закрепиться."
}
{
  "ts": "2020-09-18T15:13:55.430801",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что-то можешь сказать?"
}
{
  "ts": "2020-09-18T15:14:00.815124",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "https://shighil.com/Print.exe"
}
{
  "ts": "2020-09-18T15:14:09.856992",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Детектит при сохранении"
}
{
  "ts": "2020-09-18T15:14:22.520552",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Trojan:Win32/Azden.A!cl"
}
{
  "ts": "2020-09-18T15:14:31.894172",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ЩА"
}
{
  "ts": "2020-09-18T15:14:48.097518",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "надоел я тебе? )))"
}
{
  "ts": "2020-09-18T15:14:58.740992",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Да не"
}
{
  "ts": "2020-09-18T15:16:02.546953",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "А как правильно записывать информацию об антивируснике? Делал так: \n&av=name\nи так:\n&av[1]=name1&av[2]=name2\nНо что-то ни первый способ, ни второй не показывает потом информацию об антивируснике при нажатии на \"more bot info\". Хотя в самой команде вся информация есть."
}
{
  "ts": "2020-09-18T15:17:11.593737",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "твоего человека"
}
{
  "ts": "2020-09-18T15:17:11.597304",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "ждали утром"
}
{
  "ts": "2020-09-18T15:17:11.599860",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "он так ничего и не скинул"
}
{
  "ts": "2020-09-18T15:17:11.601617",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "трой"
}
{
  "ts": "2020-09-18T15:17:11.602640",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "это что тако"
}
{
  "ts": "2020-09-18T15:17:11.603966",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "я думал у вас строго с этим"
}
{
  "ts": "2020-09-18T15:17:11.605460",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "мы размянулись"
}
{
  "ts": "2020-09-18T15:17:11.606411",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "оказывается"
}
{
  "ts": "2020-09-18T15:17:11.607526",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "все молодец он"
}
{
  "ts": "2020-09-18T15:17:11.608635",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "кого вы еще там локнули"
}
{
  "ts": "2020-09-18T15:17:11.609389",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "красавец"
}
{
  "ts": "2020-09-18T15:17:11.610116",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "сделал все"
}
{
  "ts": "2020-09-18T15:17:11.610845",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "скинул"
}
{
  "ts": "2020-09-18T15:17:42.901622",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "20 минут доеду до дому"
}
{
  "ts": "2020-09-18T15:18:09.505958",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да ладно уже... отдыхай... пятница..."
}
{
  "ts": "2020-09-18T15:18:20.666577",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хороших выходных!"
}
{
  "ts": "2020-09-18T15:19:48.782738",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "&av[0]=name1&av[1]=name2&avp[0]=ver1&avp[1]=ver2"
}
{
  "ts": "2020-09-18T15:19:56.735047",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "У меня так."
}
{
  "ts": "2020-09-18T15:21:38.631190",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Спасибо\nБуза ещё сказал с митигациями разобраться и запрет на старт потоков сделать. Можно какой-нибудь пример посмотреть или почитать об этом где можно?"
}
{
  "ts": "2020-09-18T15:23:08.264097",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я файл архивирую заливаю на qaz.im скачиваю через ссылку"
}
{
  "ts": "2020-09-18T15:23:22.070904",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Файл не палится"
}
{
  "ts": "2020-09-18T15:23:58.428915",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Я сам ещё не разбирался, но думаю это типа этого https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-setprocessmitigationpolicy"
}
{
  "ts": "2020-09-18T15:24:49.832976",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Понятно, нужно разбираться"
}
{
  "ts": "2020-09-18T15:27:25.380175",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "baget@q3mcco35auwcstmt.onion",
  "body": "Спасибо, дружище)"
}
{
  "ts": "2020-09-18T15:27:36.479929",
  "from": "frog@q3mcco35auwcstmt.onion",
  "to": "mushroom@q3mcco35auwcstmt.onion",
  "body": "Задания BITS какой утилитой можно просматривать?"
}
{
  "ts": "2020-09-18T15:33:03.697380",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Детектть на Дефе"
}
{
  "ts": "2020-09-18T15:33:26.188662",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Так с попробу.ю."
}
{
  "ts": "2020-09-18T15:35:02.187688",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 5:21:36 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/DefenseEvasion.UM!ml&threatid=2147738649&enterprise=0\n \tName: Behavior:Win32/DefenseEvasion.UM!ml\n \tID: 2147738649\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\ld1_gr_one\\ld1_gr_one.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T15:35:49.388923",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "и на 2019"
}
{
  "ts": "2020-09-18T15:36:06.706998",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 8:21:14 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/DefenseEvasion.UM!ml&threatid=2147738649&enterprise=0\n \tName: Behavior:Win32/DefenseEvasion.UM!ml\n \tID: 2147738649\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ld1_gr_one\\ld1_gr_one.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T15:36:14.032647",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "в течении 1 минуты работы"
}
{
  "ts": "2020-09-18T15:41:57.477322",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Не знаешь как таргет в работе использует файл?"
}
{
  "ts": "2020-09-18T15:42:43.654929",
  "from": "total@q3mcco35auwcstmt.onion",
  "to": "shell@q3mcco35auwcstmt.onion",
  "body": "delal ottuda"
}
{
  "ts": "2020-09-18T15:43:13.421490",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Вот так каяает с линков"
}
{
  "ts": "2020-09-18T16:15:12.085912",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "barmen@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/rNKGT4/69EBrr\nDelete: https://qaz.im/index.php?a=delete&q=1126560542\nPass: FDSREQSADFASADFASADFS"
}
{
  "ts": "2020-09-18T16:15:14.084654",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да работает"
}
{
  "ts": "2020-09-18T16:15:17.873813",
  "from": "barmen@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/rNKGT4/69EBrr\nDelete: https://qaz.im/index.php?a=delete&q=1126560542\nPass: FDSREQSADFASADFASADFS"
}
{
  "ts": "2020-09-18T16:15:27.077331",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "barmen@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/rNKGT4/69EBrr\nDelete: https://qaz.im/index.php?a=delete&q=1126560542\nPass: FDSREQSADFASADFASADFS"
}
{
  "ts": "2020-09-18T16:17:04.662258",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Да работает"
}
{
  "ts": "2020-09-18T16:17:26.266805",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Привет. У меня график 5/2, с 10 до 19. У моего БК палится загрузчик через Win Defender на данный момент. У Frog появился детект сегодня у Win Defender, разбирается. У Steller всё сделано загрузчик\\бот, детектов нет (у него загрузчик это ps1 сценарий). У Price сделан бот, он доделывает загрузчик к нему."
}
{
  "ts": "2020-09-18T16:17:26.270345",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "Договорился с криптором, которого манго дал, на тестовую неделю. и 600$ в неделю на 5-10 криптов в день."
}
{
  "ts": "2020-09-18T16:18:18.767672",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "bitsadmin /list"
}
{
  "ts": "2020-09-18T16:18:28.217605",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "bitsadmin /list /verbose"
}
{
  "ts": "2020-09-18T16:18:34.614797",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "bitsadmin /reset"
}
{
  "ts": "2020-09-18T16:18:51.155995",
  "from": "mushroom@q3mcco35auwcstmt.onion",
  "to": "frog@q3mcco35auwcstmt.onion",
  "body": "Посмотреть, подробнее, удалить задания."
}
{
  "ts": "2020-09-18T16:28:09.193698",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет, от тебя пришли зашиврованные сообщения"
}
{
  "ts": "2020-09-18T16:28:17.314233",
  "from": "grant@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "что писал?"
}
{
  "ts": "2020-09-18T16:33:22.158761",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "Привет, дуржище!"
}
{
  "ts": "2020-09-18T16:33:25.278012",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "Как ты ?"
}
{
  "ts": "2020-09-18T16:33:30.519359",
  "from": "braun@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "Удалось что-то сделать?"
}
{
  "ts": "2020-09-18T16:35:05.151408",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Детектть на Дефе"
}
{
  "ts": "2020-09-18T16:35:05.154526",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 5:21:36 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/DefenseEvasion.UM!ml&threatid=2147738649&enterprise=0\n \tName: Behavior:Win32/DefenseEvasion.UM!ml\n \tID: 2147738649\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\ld1_gr_one\\ld1_gr_one.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T16:35:05.156189",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "и на 2019"
}
{
  "ts": "2020-09-18T16:35:05.158408",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 8:21:14 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/DefenseEvasion.UM!ml&threatid=2147738649&enterprise=0\n \tName: Behavior:Win32/DefenseEvasion.UM!ml\n \tID: 2147738649\n \tSeverity: Severe\n \tCategory: Suspicious Behavior\n \tPath: file:_C:\\Users\\Administrator\\Downloads\\ld1_gr_one\\ld1_gr_one.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: SRV2019II\\Administrator\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T16:35:05.160358",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "в течении 1 минуты работы"
}
{
  "ts": "2020-09-18T16:35:50.627618",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "капец"
}
{
  "ts": "2020-09-18T16:36:59.472812",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "в выходные буду искать в чем дело"
}
{
  "ts": "2020-09-18T16:37:26.517240",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Странно у меня при 2 запуске на 10 работает и у моего тестировщика на 2019 тоже"
}
{
  "ts": "2020-09-18T16:37:33.879855",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "А у меня опять снесло на 2019"
}
{
  "ts": "2020-09-18T16:39:22.179082",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "отлично"
}
{
  "ts": "2020-09-18T16:39:50.329160",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavemat@q3mcco35auwcstmt.onion",
  "body": "бот в оффе"
}
{
  "ts": "2020-09-18T16:39:58.741639",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "mavemat@q3mcco35auwcstmt.onion",
  "body": "сделай уведомления себе если такое случается"
}
{
  "ts": "2020-09-18T16:40:11.851652",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да, странно..."
}
{
  "ts": "2020-09-18T16:43:47.161974",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "А бот отстучал на всех 3 машинах"
}
{
  "ts": "2020-09-18T16:43:55.499438",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T16:43:58.645674",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "вижу"
}
{
  "ts": "2020-09-18T16:44:18.607436",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "При ребуте видимо помрет"
}
{
  "ts": "2020-09-18T16:44:25.361030",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ЗАпистить с логами?"
}
{
  "ts": "2020-09-18T16:45:02.050983",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "нет, с логами нет варианта, не настроил еще компилятор"
}
{
  "ts": "2020-09-18T16:45:37.118428",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "понял"
}
{
  "ts": "2020-09-18T16:45:42.448937",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "да я завтра позапускаю сам."
}
{
  "ts": "2020-09-18T16:45:49.198044",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T16:46:00.159154",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ребут сделай"
}
{
  "ts": "2020-09-18T16:46:22.692407",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T16:47:16.752965",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "я не мог включить сегодня утром 10_64_05_2, могу завтра ее использовать?"
}
{
  "ts": "2020-09-18T16:47:30.924425",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "или он не работает?"
}
{
  "ts": "2020-09-18T16:47:32.267600",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T16:47:45.424657",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "рабочая?"
}
{
  "ts": "2020-09-18T16:47:45.967685",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Лучше возьми 10 бентли на другом червере"
}
{
  "ts": "2020-09-18T16:47:50.033319",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "сервер"
}
{
  "ts": "2020-09-18T16:47:56.629570",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Она обновлена"
}
{
  "ts": "2020-09-18T16:47:59.755335",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "А эта - нет"
}
{
  "ts": "2020-09-18T16:48:34.121517",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а на ней дефендер тоже включен?"
}
{
  "ts": "2020-09-18T16:48:41.179601",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T16:48:48.104147",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Он там лучше работает"
}
{
  "ts": "2020-09-18T16:49:10.392914",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Win10-64-bentley - эта?"
}
{
  "ts": "2020-09-18T16:49:42.807818",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-18T16:50:49.987506",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хорошо"
}
{
  "ts": "2020-09-18T16:50:58.393559",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ребут будешь делать?"
}
{
  "ts": "2020-09-18T16:51:10.725742",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "делаю"
}
{
  "ts": "2020-09-18T16:51:21.986400",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "https://scrytnuuszglaugg.onion:4247/bots/command?id=dc7d678e5ce4cb827cc8ab9c748c18bf"
}
{
  "ts": "2020-09-18T16:51:34.391288",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Вот бот помощника и у него нет детекта на 2019 как он говрит"
}
{
  "ts": "2020-09-18T16:52:25.724433",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Привет"
}
{
  "ts": "2020-09-18T16:52:31.492609",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "ты batka сгрузил что нибудь7"
}
{
  "ts": "2020-09-18T16:52:32.712970",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-18T16:53:04.016309",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а я не вижу в списке этот бот"
}
{
  "ts": "2020-09-18T16:54:16.750967",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "А я вижу. Странно"
}
{
  "ts": "2020-09-18T16:56:46.191671",
  "from": "mango@q3mcco35auwcstmt.onion",
  "to": "tunri@q3mcco35auwcstmt.onion",
  "body": "привет стерн к тебе отправил по антику"
}
{
  "ts": "2020-09-18T16:57:02.721722",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "увидел, он не в тестовых"
}
{
  "ts": "2020-09-18T16:57:23.269621",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-18T16:57:34.494226",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так ему тоже надо ребут"
}
{
  "ts": "2020-09-18T16:58:10.725953",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "так у него уже был ребут, похоже"
}
{
  "ts": "2020-09-18T16:58:17.541810",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T16:58:51.854701",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "тогда надо проверить обновлен ли дефендер, включено ли облако"
}
{
  "ts": "2020-09-18T16:59:02.300943",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T17:00:33.343429",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "у тебя два бота из закрепа отстучали"
}
{
  "ts": "2020-09-18T17:01:02.836809",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а третий, похоже, сдох"
}
{
  "ts": "2020-09-18T17:16:38.906905",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "что делать?"
}
{
  "ts": "2020-09-18T17:17:02.327446",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Да 10 и 7 отстучали"
}
{
  "ts": "2020-09-18T17:18:46.368885",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а 2019?"
}
{
  "ts": "2020-09-18T17:21:24.114173",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ладно, спать пора )))"
}
{
  "ts": "2020-09-18T17:21:51.806860",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "хороших выходных тебе!!! Отдохни!"
}
{
  "ts": "2020-09-18T17:22:16.210059",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Тогда смотри 2019 тоже Бентли"
}
{
  "ts": "2020-09-18T17:22:52.510549",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "Протестите новый бот hof'a который на вторую админку"
}
{
  "ts": "2020-09-18T17:22:54.690080",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "а пароль?"
}
{
  "ts": "2020-09-18T17:22:55.105564",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "на всех ОС прогоните"
}
{
  "ts": "2020-09-18T17:23:04.857902",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "и networkDll тоже поставь там в загрузках"
}
{
  "ts": "2020-09-18T17:23:07.893144",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "в командах"
}
{
  "ts": "2020-09-18T17:23:09.758872",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "defender@q3mcco35auwcstmt.onion",
  "body": "как на первом"
}
{
  "ts": "2020-09-18T17:23:20.002378",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Сек ща гляну"
}
{
  "ts": "2020-09-18T17:27:10.077714",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": " 2019 JohnJackson21"
}
{
  "ts": "2020-09-18T17:27:16.769325",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "либо JohnJackson"
}
{
  "ts": "2020-09-18T17:27:17.141910",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T17:27:25.367223",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "ага"
}
{
  "ts": "2020-09-18T17:27:42.492136",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "пока-пока!"
}
{
  "ts": "2020-09-18T17:27:51.056772",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Fuf lj gjytltkmybrf )"
}
{
  "ts": "2020-09-18T17:27:54.811238",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "van@q3mcco35auwcstmt.onion",
  "body": "Жо понедельника"
}
{
  "ts": "2020-09-18T17:28:01.950551",
  "from": "van@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": ")))))"
}
{
  "ts": "2020-09-18T17:40:31.393435",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "poll@q3mcco35auwcstmt.onion",
  "body": "-----BEGIN PGP PUBLIC KEY BLOCK-----\nVersion: GnuPG v1\n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\nXWbhYYbbjBPuNRk8pL1TKUptFSNKfozrmQ6KkW9uU1lJuxZdbjM=\n=eQVv\n-----END PGP PUBLIC KEY BLOCK-----"
}
{
  "ts": "2020-09-18T17:50:45.393977",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "hof@q3mcco35auwcstmt.onion",
  "body": "а ты куда закинул?"
}
{
  "ts": "2020-09-18T17:53:48.211067",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Бро, пни плиз машину 173.232.146.199:32021"
}
{
  "ts": "2020-09-18T17:54:00.662345",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "Повешалась"
}
{
  "ts": "2020-09-18T17:58:18.142439",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "troy@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T17:58:31.395307",
  "from": "troy@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "hi"
}
{
  "ts": "2020-09-18T18:13:28.220065",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил мор"
}
{
  "ts": "2020-09-18T18:13:40.568908",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-09-18T18:13:46.700479",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "С анонфайла лучше?"
}
{
  "ts": "2020-09-18T18:14:03.242017",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Можешь как и раньше"
}
{
  "ts": "2020-09-18T18:14:18.149185",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Я через qaz.im в архиве смотрел"
}
{
  "ts": "2020-09-18T18:14:25.770137",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Не спалил"
}
{
  "ts": "2020-09-18T18:14:26.334657",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T18:14:54.532571",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "о, ты тут"
}
{
  "ts": "2020-09-18T18:14:57.523286",
  "from": "kerasid@q3mcco35auwcstmt.onion",
  "to": "green@q3mcco35auwcstmt.onion",
  "body": "слушай"
}
{
  "ts": "2020-09-18T18:16:11.258229",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "vRODE RAZOBRALYSA"
}
{
  "ts": "2020-09-18T18:16:13.859523",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "caps"
}
{
  "ts": "2020-09-18T18:16:29.851522",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Желательно в первую очередь на 10-ке. Я смотрел на 2019, а вот на 10-ке не могу посмотреть"
}
{
  "ts": "2020-09-18T18:16:47.393337",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T18:16:58.677317",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "tol'ko zamochek ne nazhimaetsya"
}
{
  "ts": "2020-09-18T18:17:05.047634",
  "from": "buri@q3mcco35auwcstmt.onion",
  "to": "strix@q3mcco35auwcstmt.onion",
  "body": "nado slat' pervoe soobschenie, chtobi on zarabotal"
}
{
  "ts": "2020-09-18T18:20:15.128830",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Детектит в течении 1 минуты работы"
}
{
  "ts": "2020-09-18T18:20:23.195209",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 8:19:01 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.G!ml&threatid=2147749376&enterprise=0\n \tName: Trojan:Win32/Wacatac.G!ml\n \tID: 2147749376\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\mor1224\\MOR1224.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T18:20:28.955391",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "и 2019 тоже"
}
{
  "ts": "2020-09-18T18:20:51.657399",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 11:19:05 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.G!ml&threatid=2147749376&enterprise=0\n \tName: Trojan:Win32/Wacatac.G!ml\n \tID: 2147749376\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\INetCache\\իՈկՄԸհԲՏֆԳգրՍզւՋփԾՊպԼշոՃ\\իՈկՄԸհԲՏֆԳգրՍզւՋփԾՊպԼշոՃ.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T18:20:53.384508",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "и"
}
{
  "ts": "2020-09-18T18:21:07.368916",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 11:19:06 AM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.G!ml&threatid=2147749376&enterprise=0\n \tName: Trojan:Win32/Wacatac.G!ml\n \tID: 2147749376\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\INetCache\\իՈկՄԸհԲՏֆԳգրՍզւՋփԾՊպԼշոՃ\\իՈկՄԸհԲՏֆԳգրՍզւՋփԾՊպԼշոՃ.exe; file:_C:\\Users\\Administrator\\Downloads\\mor1224\\MOR1224.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T18:21:22.969156",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Хотя бот стучит и там и там"
}
{
  "ts": "2020-09-18T18:21:32.432449",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Чил залил"
}
{
  "ts": "2020-09-18T18:21:44.757880",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T18:22:05.214190",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "> Хотя бот стучит и там и там\nЗначит успел заинжектить в wermgr"
}
{
  "ts": "2020-09-18T18:22:15.979939",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ага"
}
{
  "ts": "2020-09-18T18:23:34.264805",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Как запустить dll"
}
{
  "ts": "2020-09-18T18:24:26.051973",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": " <bentley> запускаю regsvr32 да?\n[14:51:30] <hof> да"
}
{
  "ts": "2020-09-18T18:36:51.732785",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Анкриптед dll запускал"
}
{
  "ts": "2020-09-18T18:37:41.413558",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Нет"
}
{
  "ts": "2020-09-18T18:37:41.514223",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "?"
}
{
  "ts": "2020-09-18T18:37:44.941636",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Щас гляну"
}
{
  "ts": "2020-09-18T18:37:56.530133",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Хоф говрит через рексвр32"
}
{
  "ts": "2020-09-18T18:38:29.139635",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да я так и сделал"
}
{
  "ts": "2020-09-18T18:39:27.343001",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "После запуска должен появится процесс Wermgr"
}
{
  "ts": "2020-09-18T18:39:37.946531",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Его не было"
}
{
  "ts": "2020-09-18T18:39:58.783849",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Может быть hof что-то поменял"
}
{
  "ts": "2020-09-18T18:40:28.247486",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Может"
}
{
  "ts": "2020-09-18T18:41:08.956537",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Запусти у себя анкрипт dll"
}
{
  "ts": "2020-09-18T18:41:55.393989",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Запустил"
}
{
  "ts": "2020-09-18T18:42:16.842702",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Стучит"
}
{
  "ts": "2020-09-18T18:43:14.250936",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Процесс wermgr появился"
}
{
  "ts": "2020-09-18T18:43:46.860139",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T18:47:47.630992",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил мор"
}
{
  "ts": "2020-09-18T18:47:48.396261",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Чил - ок"
}
{
  "ts": "2020-09-18T18:47:52.576911",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-09-18T18:48:55.454770",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "Ujnjd xbk t[t"
}
{
  "ts": "2020-09-18T18:48:59.489789",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "Готов чил ехе"
}
{
  "ts": "2020-09-18T18:49:13.772784",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "&FDJhbskdjhgbkjhgb"
}
{
  "ts": "2020-09-18T18:49:18.851276",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "clickclack@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/hTBDdZ/AY6Ert   \n    Delete: https://qaz.im/index.php?a=delete&q=929711338"
}
{
  "ts": "2020-09-18T18:57:14.617079",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Хорошо"
}
{
  "ts": "2020-09-18T18:59:37.803127",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "По чилам отмена"
}
{
  "ts": "2020-09-18T19:00:15.432431",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Тогда яси остались"
}
{
  "ts": "2020-09-18T19:00:26.114720",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "И таргет"
}
{
  "ts": "2020-09-18T19:00:27.371015",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ага и все"
}
{
  "ts": "2020-09-18T19:00:33.789254",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Таргет сейчас узнаю"
}
{
  "ts": "2020-09-18T19:01:34.675712",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Еще 1 файл"
}
{
  "ts": "2020-09-18T19:01:35.442467",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "*FDnbkdjhslnkgjnlkhjnkjnJASDKJ"
}
{
  "ts": "2020-09-18T19:01:40.008523",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/kTHQtz/i6Hf9h   \n    Delete: https://qaz.im/index.php?a=delete&q=913365692"
}
{
  "ts": "2020-09-18T19:02:29.444399",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Для таргета сдеалем 2 крипта? Мор - ок"
}
{
  "ts": "2020-09-18T19:02:45.949319",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Таргет - отмена 2 яса только"
}
{
  "ts": "2020-09-18T19:07:09.358632",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T19:07:22.536759",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Ссылка та-же?"
}
{
  "ts": "2020-09-18T19:07:32.869722",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "да"
}
{
  "ts": "2020-09-18T19:15:59.561987",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-09-18T19:16:10.425504",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-09-18T19:32:58.731831",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Яс перезалил"
}
{
  "ts": "2020-09-18T19:33:32.319940",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Ок"
}
{
  "ts": "2020-09-18T19:49:43.447385",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Яс50 - ок"
}
{
  "ts": "2020-09-18T19:56:00.292147",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Сделаешь еще 1 крипт?"
}
{
  "ts": "2020-09-18T19:57:07.529192",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-18T19:57:20.188783",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Пока морсу делаю"
}
{
  "ts": "2020-09-18T19:57:34.037805",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "ок"
}
{
  "ts": "2020-09-18T20:00:04.819457",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Yas51 отправил"
}
{
  "ts": "2020-09-18T20:00:27.359846",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "+"
}
{
  "ts": "2020-09-18T20:08:58.132243",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Палится"
}
{
  "ts": "2020-09-18T20:09:06.607267",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 10:05:32 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      WIN10IITST\nDescription:\nMicrosoft Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\TST10ENG\\Downloads\\ys51\\ys51.exe\n \tDetection Origin: Local machine\n \tDetection Type: FastPath\n \tDetection Source: Real-Time Protection\n \tUser: WIN10IITST\\TST10ENG\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSecurity intelligence Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T20:09:29.693547",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "и на сервере"
}
{
  "ts": "2020-09-18T20:09:36.955765",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 1:06:50 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\INetCache\\นหะ่ืปะ้ทนหะ่ืเแไหอังๆงแ้หืบผี่มยฟ้กืผี่มยฟ้กืรสำกิ\\นหะ่ืปะ้ทนหะ่ืเแไหอังๆงแ้หืบผี่มยฟ้กืผี่มยฟ้กืรสำกิ.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T20:09:38.364427",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "и"
}
{
  "ts": "2020-09-18T20:09:53.799321",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Log Name:      Microsoft-Windows-Windows Defender/Operational\nSource:        Microsoft-Windows-Windows Defender\nDate:          9/18/2020 1:06:51 PM\nEvent ID:      1116\nTask Category: None\nLevel:         Warning\nKeywords:      \nUser:          SYSTEM\nComputer:      SRV2019II\nDescription:\nWindows Defender Antivirus has detected malware or other potentially unwanted software.\n For more information please see the following:\nhttps://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0\n \tName: Trojan:Script/Wacatac.B!ml\n \tID: 2147735503\n \tSeverity: Severe\n \tCategory: Trojan\n \tPath: file:_C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\INetCache\\นหะ่ืปะ้ทนหะ่ืเแไหอังๆงแ้หืบผี่มยฟ้กืผี่มยฟ้กืรสำกิ\\นหะ่ืปะ้ทนหะ่ืเแไหอังๆงแ้หืบผี่มยฟ้กืผี่มยฟ้กืรสำกิ.exe; file:_C:\\Users\\Administrator\\Downloads\\ys51\\ys51.exe\n \tDetection Origin: Local machine\n \tDetection Type: Concrete\n \tDetection Source: Real-Time Protection\n \tUser: NT AUTHORITY\\SYSTEM\n \tProcess Name: C:\\Windows\\System32\\svchost.exe\n \tSignature Version: AV: 1.323.1415.0, AS: 1.323.1415.0, NIS: 1.323.1415.0\n \tEngine Version: AM: 1.1.17400.5, NIS: 1.1.17400.5"
}
{
  "ts": "2020-09-18T20:41:15.228469",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/KAQSae/SdStZh\nDelete: https://qaz.im/index.php?a=delete&q=2085768855\nPass: dfSerqwfdasDFASADFASADFAASFD"
}
{
  "ts": "2020-09-18T20:41:22.347198",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Там 5 стабов"
}
{
  "ts": "2020-09-18T20:41:50.518443",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Хороших выходные, до воскресенья))"
}
{
  "ts": "2020-09-18T20:43:33.844076",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Залил"
}
{
  "ts": "2020-09-18T20:43:49.428552",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Смотрю"
}
{
  "ts": "2020-09-18T20:43:49.496877",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Первый норм. был?"
}
{
  "ts": "2020-09-18T20:43:55.410412",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Да"
}
{
  "ts": "2020-09-18T20:44:00.674899",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": " но палился с сайта"
}
{
  "ts": "2020-09-18T20:44:18.000433",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "https://nutritionprofbob.com/Preview.exe"
}
{
  "ts": "2020-09-18T20:44:28.287207",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "С qaz.im каогда грузил - ок было"
}
{
  "ts": "2020-09-18T20:45:59.160508",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "До понедельника, хороших выходных))"
}
{
  "ts": "2020-09-18T20:46:14.225740",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "deploy@q3mcco35auwcstmt.onion",
  "body": "Ааг и тебе )"
}
{
  "ts": "2020-09-18T20:51:51.062349",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/3b3R2T/6zy3AY\nDelete: https://qaz.im/index.php?a=delete&q=818078343"
}
{
  "ts": "2020-09-18T20:51:56.516324",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Password 123"
}
{
  "ts": "2020-09-18T20:54:13.897180",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "Давай уже 51 на понедельник"
}
{
  "ts": "2020-09-18T20:54:33.795792",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "Давай"
}
{
  "ts": "2020-09-18T20:54:43.222213",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "я уже засыпаю"
}
{
  "ts": "2020-09-18T20:54:47.195096",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "marsel@q3mcco35auwcstmt.onion",
  "body": "До понедельника"
}
{
  "ts": "2020-09-18T20:55:00.426124",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "bentley@q3mcco35auwcstmt.onion",
  "body": "До понедельника))"
}
{
  "ts": "2020-09-18T21:08:59.672099",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Еще 1 файл"
}
{
  "ts": "2020-09-18T21:08:59.673825",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "*FDnbkdjhslnkgjnlkhjnkjnJASDKJ"
}
{
  "ts": "2020-09-18T21:08:59.674868",
  "from": "bentley@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "\n    Download: https://qaz.im/load/kTHQtz/i6Hf9h   \n    Delete: https://qaz.im/index.php?a=delete&q=913365692"
}
{
  "ts": "2020-09-18T21:08:59.676510",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/KAQSae/SdStZh\nDelete: https://qaz.im/index.php?a=delete&q=2085768855\nPass: dfSerqwfdasDFASADFASADFAASFD"
}
{
  "ts": "2020-09-18T21:08:59.677932",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Там 5 стабов"
}
{
  "ts": "2020-09-18T21:08:59.678692",
  "from": "deploy@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Хороших выходные, до воскресенья))"
}
{
  "ts": "2020-09-18T21:08:59.679452",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Download: https://qaz.im/load/3b3R2T/6zy3AY\nDelete: https://qaz.im/index.php?a=delete&q=818078343"
}
{
  "ts": "2020-09-18T21:08:59.680243",
  "from": "marsel@q3mcco35auwcstmt.onion",
  "to": "mors@q3mcco35auwcstmt.onion",
  "body": "Password 123"
}
{
  "ts": "2020-09-18T21:32:17.270897",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "vserv455 FAIL 62.75.216.38 on port 53 failed\nvserv455 FAIL 185.86.148.63 on port 53 failed"
}
{
  "ts": "2020-09-18T21:32:22.614279",
  "from": "defender@q3mcco35auwcstmt.onion",
  "to": "carter@q3mcco35auwcstmt.onion",
  "body": "что с ними?"
}
{
  "ts": "2020-09-18T22:17:47.899716",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "привет"
}
{
  "ts": "2020-09-18T22:17:47.900976",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "кого еще поставили на лок"
}
{
  "ts": "2020-09-18T22:17:47.902035",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "https://privnote.com/get23R01#TwGAU3YBV"
}
{
  "ts": "2020-09-18T22:17:47.903010",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "voron@q3mcco35auwcstmt.onion",
  "body": "доступы к админке где светофор"
}
{
  "ts": "2020-09-18T22:48:11.912711",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "стерн, поздравляю нас с первой выплатой по совместной работе с иглой"
}
{
  "ts": "2020-09-18T22:48:15.901748",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "9.8 мл выплатили"
}
{
  "ts": "2020-09-18T22:57:53.241732",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "привет старый ворчливый дед"
}
{
  "ts": "2020-09-18T22:57:55.658999",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": ")) что у вас там"
}
{
  "ts": "2020-09-18T22:57:58.428586",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "происходит"
}
{
  "ts": "2020-09-18T22:58:04.429654",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "я уже думса пытал"
}
{
  "ts": "2020-09-18T22:58:06.932564",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "на тему чего ты молчишь"
}
{
  "ts": "2020-09-18T22:58:12.928748",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "он сказал ты такой какой есть)"
}
{
  "ts": "2020-09-18T22:58:18.717694",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "ну сказал бы пару слов"
}
{
  "ts": "2020-09-18T22:58:20.965763",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "старику таргету"
}
{
  "ts": "2020-09-18T22:58:25.210218",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "professor@q3mcco35auwcstmt.onion",
  "body": "и не трогаю дальше)"
}
{
  "ts": "2020-09-18T23:20:23.830803",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "стерн, поздравляю нас с первой выплатой по совместной работе с иглой"
}
{
  "ts": "2020-09-18T23:20:23.832106",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "9.8 мл выплатили"
}
{
  "ts": "2020-09-18T23:21:21.653084",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ghbdtn"
}
{
  "ts": "2020-09-18T23:21:27.188028",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "привет)"
}
{
  "ts": "2020-09-18T23:21:35.303868",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "поздравляю"
}
{
  "ts": "2020-09-18T23:21:54.471386",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "спасибо и тебя тоже поздравляю"
}
{
  "ts": "2020-09-18T23:22:00.822197",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "с ребятами супер легко работать, я блин забыл что такое легкая работа и с хорошим настроем"
}
{
  "ts": "2020-09-18T23:22:05.189102",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-18T23:22:06.867186",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "пошла движуха ага )"
}
{
  "ts": "2020-09-18T23:23:34.847056",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "ща он закинет я тебе закину"
}
{
  "ts": "2020-09-18T23:23:46.048313",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "прикол еще знаешь в чем"
}
{
  "ts": "2020-09-18T23:23:49.202882",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "я думаю ты понял"
}
{
  "ts": "2020-09-18T23:23:53.222732",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "что те готовы 4 млн были заплатить"
}
{
  "ts": "2020-09-18T23:24:01.531826",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "игла им ответил, 890 или идите на хуй )"
}
{
  "ts": "2020-09-18T23:24:13.107276",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "да видел))"
}
{
  "ts": "2020-09-18T23:24:17.613198",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и они каждую минуту строчили там))"
}
{
  "ts": "2020-09-18T23:24:20.978651",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "типо давайте 890"
}
{
  "ts": "2020-09-18T23:24:26.485090",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я думал щас еще ноль допишут )"
}
{
  "ts": "2020-09-18T23:24:31.360754",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "лишь бы дали ключ"
}
{
  "ts": "2020-09-18T23:40:55.268737",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "там новый криптер"
}
{
  "ts": "2020-09-18T23:40:57.803334",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "бентли его тестил сегодня"
}
{
  "ts": "2020-09-18T23:41:04.095813",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "он его тебе даст в понедельник на тест, с форума"
}
{
  "ts": "2020-09-18T23:41:18.735421",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "в целом всех криптеров кто есть вобще протестим с тобой"
}
{
  "ts": "2020-09-18T23:41:27.106121",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "думаю найдем"
}
{
  "ts": "2020-09-18T23:41:36.894874",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "если их будет 5-10, хотя бы пару криптор в день будет"
}
{
  "ts": "2020-09-18T23:41:40.837782",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "криптов"
}
{
  "ts": "2020-09-18T23:41:45.022150",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "дай кош"
}
{
  "ts": "2020-09-18T23:42:30.587094",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "понял, мы тоже всем писали, криптер решит почти все проблемы текущие"
}
{
  "ts": "2020-09-18T23:42:36.792436",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "1EZY2exVq9LvbwBaXWPoR7bYhfNRBXC3m5"
}
{
  "ts": "2020-09-18T23:43:17.364065",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "добавь к себе еще many@ - он алкаш, но криптует лучше остальных"
}
{
  "ts": "2020-09-18T23:43:21.413356",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "не постоянный"
}
{
  "ts": "2020-09-18T23:43:58.060426",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "))))))))) знаю его, защищал его даже в конфликте с кем то )))) выгораживал"
}
{
  "ts": "2020-09-18T23:44:02.346933",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "принял спс"
}
{
  "ts": "2020-09-18T23:44:45.961079",
  "from": "stern@q3mcco35auwcstmt.onion",
  "to": "target@q3mcco35auwcstmt.onion",
  "body": "311.5/2 = 155.75"
}
{
  "ts": "2020-09-18T23:46:30.739190",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "спасибо"
}
{
  "ts": "2020-09-18T23:46:42.197128",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "результат отличный"
}
{
  "ts": "2020-09-18T23:46:50.159611",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "все рады вижу"
}
{
  "ts": "2020-09-18T23:46:51.103477",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "приятно"
}
{
  "ts": "2020-09-18T23:46:57.967958",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "но честно скажу"
}
{
  "ts": "2020-09-18T23:47:13.285038",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "я тащусь от работы с троем ))) прямо хочется загрузить их работой )"
}
{
  "ts": "2020-09-18T23:47:17.772271",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "он мегапозитивный"
}
{
  "ts": "2020-09-18T23:47:22.634115",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "и легкий на подъем"
}
{
  "ts": "2020-09-18T23:47:36.401655",
  "from": "target@q3mcco35auwcstmt.onion",
  "to": "stern@q3mcco35auwcstmt.onion",
  "body": "то что нужно вообщем для общего успеха"
}
