{
    "chat_id": "",
    "messages": [
        {
            "party": "Victim",
            "content": "How to buy Bitcoin for this amount?",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Hello!",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Moment please, let me prepare a manual for you.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "are you sure that you want to pay in bitcoin? maybe you prefer \nmonero? cause in case you want to pay in bitcoin, you have to pay in 20%\n more because of service fees.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "how monero works?",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "process is literally the same",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "give me a moment i provide a monero tutorial",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok good for monero",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "monero manual\n\nhere is the fastest and safest service to buy monero in your country https://localmonero.co/\nalternative way is to buy bitcoin via next manual and change it to monero here https://changelly.com/\n\nbitcoin manual\nhere are some services where you can safely buy and send bitcoin\nhttps://localcryptos.com/ manual how to buy and send is placed on the \nmain page, this is the simplest and fastest way, no any verification \nrequired///////\nhttps://paxful.com/ here is the short manual how to buy and send \nhttps://www.youtube.com/watch?v=EjB5qFW0bJ8 profile verification may be \nrequired////////\nhttps://www.coinbase.com/ here is the short manual how to buy and send \nhttps://www.youtube.com/watch?v=Neph3rjv0Co profile verification may be \nrequired///\nchose which one you like more, and buy bitcoin.\n\n\nhen text in chat and we provide the wallet for transfer",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok. I'm working on it",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok. I'm working on it",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi. The price is too high",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "could we find a mediation?",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "we do not have that amount of money. We are a little company",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "5.000\u20ac?",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "We do not make such big discounts.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Read about us on the Internet.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "5000 euro is impossible. you are not a small company,  we've been \nworking on your network, we have encryped 200tb of data, you can not be a\n small company, you have a whole data center.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "please give us a sustainable amount we are 80 people that works from [redacted location]",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "[redacted location]",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "we work for non profit organization like [redacted]",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "before the attack we checked info about your company, so it's \nabsolutely useless to prove us anything. discount is possible, but not \nin the amount you want. you can try to take a loan and find any \ncryptobrocker who will resolve all the cryptocurrency exchange.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "10.000\u20ac",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "You are wasting our time. Write when you have serious offers.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "discount x100 from first amount is impossible. \nwe can reduce the price by 50 000. so you have to pay 950 000 $",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "we do not have that amount.  Is out of our business",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "take a loan",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "I can make you an offer compatible with my availability and \ncomparable to the time it would take if I had to restore from backups",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "we know everything about your backups, if you could restore, you \nwouldn't text us at all. so please stop wasting our time and yours, you \nknow, that the only way to restore your business is to make the payment \nrequested",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "are we talking with recovery company right now? cause few hours ago this conversation had a bit another vector.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "no I move from home to office",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "go back home, you were much more pliable from there.",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "I'm talking to the CEO to unadestand how much can we pay",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Darkside",
            "content": "ok we are waiting",
            "timestamp": "9 days  ago"
        },
        {
            "party": "Victim",
            "content": "I talked with my CEO we want to solve the issue. We can offer \n75.000\u20ac to start the decryption process and 75.000 at the end of the \ndecryption. (in total 150.000\u20ac)",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "This amount is not enough. Raise the price and we will give you an additional discount.\nWe can refuse payment and not give you a decryptor. Can you afford it? What will you tell your clients?\nWe understand you and are ready to give you a decryptor right now. Give us a good offer.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Any phased payment options are not possible. You pay first, then we \ngive you decryptors. If you are not sure, you can give us test files and\n we will decrypt them for you.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "In Linux, we specially encrypt log files, they are small in size and you can upload them to chat.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "In you site you declare that you do not attack no.profit \norganization. We host the site of a lot of no profit organization that \ncurrently has the service down. Please accept our offer 150.000 all in \none",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Look, if you were a non-profit organization, you wouldn't be \nattacked by anyone. Everyone can say that they are helping someone.\nIn the current case, your offer does not meet our expectations. It will \nget you nowhere and you are wasting your time. Give us a better price \nand we will give you a discount.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "I want you to understand one thing, it doesn't matter to me how long\n it takes to discuss the price. This is important for you. The faster \nyou get decryptors, the faster you will continue to make money.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "I sent you a small files\n            \n\n[redacted].txt.[redacted]\n8.95 kB",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "File\n            \n[redacted].txt\n8.81 kB",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi, we had a crisis committee meeting. We evaluated your proposal. I\n know that you don't want waste time but trust me we are not so big as \nyou think.  We need time to get a reasonable amount of MONERO or \nBITCOIN. We try deliver an extra special effort and we can raise to   \n250.000\u20ac. We hope that this offers meet your expectation",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "i'm moving to home becouse of lock down and we had to go home at 10pm",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "We are ready to accept 700k dollars. We will give you a discount of $ 300k.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "We want to pay but we do not have 700k. We did the best effort to offer you 250.000",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "here is midnigth, i need to sleep and I hope to found some good news.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Let's get back to this question in the morning! you need to rest, you are right! Goodnight!",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "good moring......I hope",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "We've made you a 30% discount. Give us a better price and we will try to give you an additional discount.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "Trust me. We host site for no-profit organization that do not have a\n lot of money. You found a lot of data but this are our kind of \ncustomer. We made the best  250.000\u20ac is a very high amount for us. We \nhad also a problem to find this amount in a few days. The site that you \nsuggested offer MONERO at block of 5000 or 10.000\u20ac",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "We are 60 employee and only 6 on IT....we are working on this problem 24 hours....we need your help",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "I spoke to my boss and explained your situation to him. He approved a payment of 350k dollars.\nThere will be no more discounts. Now you are offering 300k dollars, raise your price by 50k and we will close this deal now.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "do you have a quick way to get that amount of MONERO?",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "we accept your proposal",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Price updated. Reload the page.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok. Give us a reference to get that amount of monero",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Yes, have you considered buying through the exchange? Or are you having trouble with it?",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "If you find it difficult to get Monero - buy Bitcoin first. Then change it to Monero.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "We want to buy through the exchange. But they exchange at block of 10.000\u20ac.",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "I think it is not difficult to buy bitcoin in your country. Use exchangers or crypto exchanges (binance, et al.).",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok. I will update you",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "we have to do change \u20ac on our wallet or directly charge on your wallet",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Change money on your wallet and then send us cryptocurrency",
            "timestamp": "8 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi, just to tell you that we are working to get cryptocurrency",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Darkside",
            "content": "OK, we wait.",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Victim",
            "content": "Good moring.  Very difficult to move on BTC that amount on one wallet. You need transaction from one wallet alone?",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Victim",
            "content": "can we make in more transcation?",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Victim",
            "content": "could you Decrypt some server?",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Darkside",
            "content": "We are waiting for xmr from you, not btc. If you decided to pay with btc, you have to pay additional 20%.",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Darkside",
            "content": "And you can use several transaction",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Darkside",
            "content": "After payment you will receive decryptor for all your network.",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Victim",
            "content": "several transaction from same wallet or we could use different wallet?",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Darkside",
            "content": "You can use different wallet",
            "timestamp": "7 days  ago"
        },
        {
            "party": "Victim",
            "content": "How many BTC we had to pay? Yesterday i saw 25.18, now I see 23.3",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Pay the amount that you see now",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Btc rate is not stable, so don't wait and pay quickly",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "do not change anymore because we had a lot o difficult to get crypto BTC",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "i can fixed the rate, but you have to pay for 6 hours",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "will pay for this time?",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "we'll try in 12 hours , but i'm not sure, maybe 24.",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "i have fixed your btc amount, for the next 24 hours it doesn't depend from btc rate",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "but you must pay as soon as possible",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "help us as soon as possible. We are very little to pay that amount \nbut we do....and also we had to work a lot of other days....give an hand\n as soon as you can....trust us",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "After payment I will immediately give you decryptors.",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi. Why the rate changed again?",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "you promise me to block the rate of BTC to 23.3",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "we already had a trade for that amount and we need to fix it",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "Are you there?",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Hello",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Rate was changed yesterday, before i fixed it",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "You actual amount for the next 12 hours 23.61 BTC",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "we bought yesterday 23.3 by an exchanger and we are waiting for the transaction. We cannot change the amount now",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "the payment is in process",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "okay, waiting for 23.3 BTC from you in next several hours",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Victim",
            "content": "ok. May I ask a partial decrypion of one server?",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "After payment you'll immediately receive decryptor for all network",
            "timestamp": "6 days  ago"
        },
        {
            "party": "Darkside",
            "content": "You have the last 3 hours to pay the fixed btc amount after that time the rate will be float again.",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "be patient",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "the transaction is in progress with our exchanger",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "technical time",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Our btc wallet is always actual and the same, so send as quickly as it possible.",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "what do you mean?",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "The wallet that you see on your page is always relevant",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "i'm here",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "operation is in progress",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "ok",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "be patient operation with exchanger is taking too long time",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "please",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "How many time you need?",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "The exchanger told me that operation should be in the morning. Now here are 20:47",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Take in mind, that after 35 hours your price will be doubled and this action cannot be undone.",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "we know. My mind now is about 23.3 BTC becouse operation is for that amount",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "If you don't pay tomorrow, i'll enable float rate again and don't fixed it anymore.",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "So, hurry up your exchanger.",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Good morning! Any updates?",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "I had a meeting scheduled with exchanger at 1PM",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "i don't know why he 's taking time. We yesterday moved \u20ac to exchanger",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Well, if anything, do not hesitate to write about the results",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "we need cryptocurrency to close the deal with you and my family will be happy becouse I have to work all weekend",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "I understand you, as far as I know in Europe there are bitcoin ATMs for a long time",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Victim",
            "content": "never seen",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "https://coinatmradar.com/country/[redacted]/",
            "timestamp": "5 days  ago"
        },
        {
            "party": "Darkside",
            "content": "We won't give you extra time, after 16 hours you price will be doubled, make payment faster.",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi, i'm in call with exchanger",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "we had to wait for the transfer of the amount",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "technica time between bank",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "I have the document that prove that we are moving money",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "but we need more time",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "till monday",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "in the week end bank do not operate",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Send the documents.",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "upload in progress\n            \n\nIMG_20201120_152201.jpg\n5.4 MB",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "3 pages\n            \n\nIMG_20201120_152152.jpg\n4.8 MB",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "last page\n            \n\nIMG_20201120_152145__02__01.jpg\n5.06 MB",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Ok, added time.",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "da you update the countdown on this page",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "?",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "Time ends on 23 Nov 2020, 09:51",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "in the morning is too eearly",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "the bank open in the morning",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "please set the deadline to 24 November 9 AM",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "so we are sure than on monday close the transaction",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Refresh the page",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "Ok thanks",
            "timestamp": "4 days  ago"
        },
        {
            "party": "Victim",
            "content": "Hi, we are at work.",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Hello! We, too, how is the exchange process going?",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Victim",
            "content": "only the bank does not work on the week end",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Victim",
            "content": "the decryption tool work per single file?",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Darkside",
            "content": "You will receive a master (universal) decryptor for your Linux and Windows network after payment",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Victim",
            "content": "it runs recursively o per file?",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Darkside",
            "content": "the process works as when encrypting only in the opposite direction, we \nwill also send all instructions, and provide support until you decrypt \nthe all network",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Victim",
            "content": "see you tomorrow",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Darkside",
            "content": "Ok! Have a nice day!",
            "timestamp": "2 days  ago"
        },
        {
            "party": "Darkside",
            "content": "After 17 hours your price will be doubled and we won't change it.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "i'm here",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "good morning",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we are almost ready",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "i'm worried about decryption process",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "there are a lot of file on a lot of volume",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Hello! the process of decryption is similar to the encryption process, \nyou do not need to worry, maximum 4-5 hours and your files will be \ndecrypted",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "on vmware do i need to execute decryption on one host esx that is \nconnected to all volume or do I have to execute on every single host?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "You should upload decryptor to each esxi, set 777 permissions and \nrun. That's all you need, after small time your esxis will be ready for \nwork.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "can we test the decryption process on one single vmdk file?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "We will send decryptor after payment and help with all. Don't worry, it's too easy.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we are doing the first transaction",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "what description in the transaction?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we sent the first little amount in order to test the correct transaction",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "it is ok?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "we can see your transaction",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "you can send all amount",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "ok",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we proceed",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "and after 3 confirmation of bitcoin network we will send you decryptors and instruction",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "with the next trance",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we sent half amount",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "please give us linux or windows decryptor now",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "we will send your decryptors only after you send us full amount.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "we are waiting for next part",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "one moment",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "sent",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "ok, we can see your transaction",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "waiting for 3 confirmation and then send you decryptors",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we are waiting for decryptor",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Windows:\n\nThe decryptor works in 2 modes:\n1. GUI\n2. Console\n\nThree functions are available in GUI mode:\n1. \"DECRYPT ALL\" - search and decrypt ALL encrypted files on the local \nPC and on network resources (Shares), where this PC has access.\n2. \"DECRYPT FOLDER\" - decrypts files in the specified folder, which you \ncan select in the \"Browse for folders\" window or drag and drop the \nfolder into the decryptor window.\n3. \"DECRYPT ONE FILE\" - decrypts a single file, which you can open in \nthe \"Open\" window or drag and drop the encrypted file into the decryptor\n window.\n\nIMPORTANT!\nExtension of encrypted files may not coincide with the extension of files, which the decryptor suggests to open!\nTo open encrypted files with other extensions, in the \"Open\" window \nselect, in the lower right corner of \"All Files (*. *)\" or just drag and\n drop the given file into the decryptor window.\nFile extension does not affect the decryption of file!\n\nConsole mode has two parameters:\n1. \"-all\" - search and decrypt ALL encrypted files on the local PC and on network resources (Shares), where this PC has access.\nYou can also use Group Policy to quickly decrypt your entire network.\n2. \"-path\" - decrypts files in the specified folder or a single file.\n3. Dragging and dropping an encrypted file or folder with encrypted files onto the decryptor file.\nIn this mode, the console window will open automatically, which will display the decryption process.\n\nCommand line examples:\n> decryptor.exe -all\n> decryptor.exe -path C:\\Folder\n> decryptor.exe -path C:\\Folder\\file.txt.[redacted]\n            \n\nwin_decryptor.exe\n76.5 kB",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "linux decryptor works alsa per files?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "also",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "linux decryptor decrypts all system, it cant decrypt certain files",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "may I ran on host that see all encrypted volume?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "just run the decryptor on each esxi, that's all, you don't need to do anything anymore",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "after decryption you can use your vms as before that",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we are at work",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Linux decryption instruction:\n1. Upload decryptor to esxi.\n2. Set run permissions: chmod 777 decryptor\n3. Run decryptor: ./decryptor\n            \n\njump_decryptor.out\n2.38 MB",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Use this one decryptor for you esxi",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "what is the difference?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "the decryptor did not decrypt some file",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "on esx",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Try the last decryptor.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Which file was not decrypted? Give more information.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "/vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted]-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V185E016/V185E016-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V157E016/V157E016_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V066E016 - [redacted]/V066E016 - [redacted]_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V079E016 - [redacted]/V079E016 - [redacted]-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V195E016/V195E016_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V000REPP/V000REPP_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V000PAS2/V000PAS2_1-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V060E016/V060E016-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V000TS1P_2012/V000TS1P_2012-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V144E016/V144E016-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V189E016/V189E016-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V067E016/V067E016-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V000AMQP/V000AMQP-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/V000AMMP/V000AMMP_3-flat.vmdk.darkside\n/vmfs/volumes/[redacted]/[redacted] - ArcGis DataStore/[redacted] - ArcGis DataStore-flat.vmdk.darkside",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "have other files been decrypted? Are virtual machines working?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Use the last decryptor. He will decrypt them.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "i will try the other decryptor becouse when i try to start [redacted] seems that a disk is missing",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Try the last one and write to me.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "[START #11] File \nPath.........../vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside\n[INFO] File Size................0mb (4096 Bytes)\n[ERROR] File Too Small, Ignored",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "What is the size of this file? Problem with one file or multiple?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "42",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "seems that some filese were modified and disk size of the VM was set to 0",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "so the VM does not start",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "what 42?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "42 useful file was not decrypted",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "and how much was decrypted?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "a lot",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "If the reason for the non-decryption is that there is 0 size, then I\n cannot help you. The decryptor cannot decrypt what is not.\nCheck all file sizes and tell me them. When you tried to start virtual \nmachines, the hypervisor could damage the encrypted files.\nI mean before you got the decryptor.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Are you having a problem with virtual machines on the same hypervisor? or at all?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we are having some problem",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "answer the questions so that I could understand what to tell you.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "the probelm is on esx",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "Task name\nPower On virtual machine\nTarget\nWD_[redacted]\nStatus\nFile /vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted].vmdk was not found",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "Look through ssh. Do you have a file?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "have a file of 4K with .darkside extension",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "we lost some vm",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "sigh!",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "The decryptor checks all checksums, it could not damage virtual \nmachines. This is the first time that a client talks about problems.\nDid you check the sized before decryption?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "How many virtual machines have you failed to recover? Were they on the same esxi?",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "You showed me a log in which the decryptor is trying to decrypt empty files. So the problem arose before decryption.\nWhy so, I can not answer you, there can be a lot of reasons.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "If you have any other problems with decryption - I will help you, just give me not empty files.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "the empty file has data of creation on 15Nov in the night",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "i don't know why",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "there is a format job runnin",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Victim",
            "content": "I need your little but useful help. On veem the volume where we have\n the backup , this morning was accessible but now the volume is RAW.",
            "timestamp": "1 day  ago"
        },
        {
            "party": "Darkside",
            "content": "I don't quite understand what you mean",
            "timestamp": "23 hours  ago"
        },
        {
            "party": "Victim",
            "content": "the tool that you used to encrypt our backup. At the end of encrypion does it do disprutive action?",
            "timestamp": "22 hours  ago"
        },
        {
            "party": "Darkside",
            "content": "No, it doesn't. If backups are on Windows - use the Windows decryptor.",
            "timestamp": "22 hours  ago"
        },
        {
            "party": "Darkside",
            "content": "Never interrupt the decryption process by closing the program \nmanually. The program may freeze during decryption, this is normal.",
            "timestamp": "22 hours  ago"
        },
        {
            "party": "Victim",
            "content": "Hi.",
            "timestamp": "19 hours  ago"
        },
        {
            "party": "Victim",
            "content": "we trusted in you",
            "timestamp": "19 hours  ago"
        },
        {
            "party": "Victim",
            "content": "but we need some files that miss",
            "timestamp": "19 hours  ago"
        },
        {
            "party": "Darkside",
            "content": "We gave you decryptors and they work, if you have problems with them, I will help you.",
            "timestamp": "17 hours  ago"
        },
        {
            "party": "Darkside",
            "content": "Before buying decryptors, you saw that some files were empty and you could not pay.",
            "timestamp": "17 hours  ago"
        },
        {
            "party": "Darkside",
            "content": "We fulfilled our part of the deal, I don't know why you have empty files. You didn't even tell me how many there are.",
            "timestamp": "17 hours  ago"
        }
    ]
}