{
    "chat_id": "",
    "messages": [
        {
            "party": "victim",
            "content": ".",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Hello",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "https://www.sendspace.com/file/[redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "hello",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "you need to decrypt files?",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "YES. whats the price and process ?I have attched a file as well",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "price 20 000$",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "after payment you will receive the decryption program, and the NAS password",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "will you be paying?",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Can you lower the price ? And show me the sample file",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "if you pay today. we\n are ready to make the price 17000$ you need to pay in bitcoin wallet \n[redacted] 0.26 bitcoin if you agree we \nwill make a test",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "?",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "we're waiting to hear back from you",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "https://www.sendspace.com/file/[redacted]  test file",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "will you be paying?",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "sorry. we had some \nproblems with our systems and just now were able to get back in. do you \nstill have the decrypotion program and NAS password available?",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "hi",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "yes",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "[redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "wallet",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "will you be paying?",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "will you be paying?",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Sorry for the delays here. Is the price still $17,000 USD?",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "[redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "yes pay",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "0.3 bitcoin",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Can yopu please \naccept 0.25 BTC if we pay today? We have to pay the broker for the \nbitcoin so altogether it will cost us more than $17K. Thank you.",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Can you please \naccept 0.25 BTC if we pay today? We have to pay the broker for the \nbitcoin so altogether it will cost us more than $17K. Thank you!",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "0.28 ok",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "when can I expect payment from you?",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "Our managers have agreed to the 0.28 BTC payment. We are starting the process now.",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "ok",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "we're waiting",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "txid: [redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "NAS password  [redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "to make a decriptor send us 4-5 files (1-10mb)",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "use https://www.file.io/",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "https://file.io/[redacted]",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "https://file.io/[redacted]",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "https://file.io/[redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "before running decrypt.exe Make a copy of important files!!! if decryption goes wrong, so that it can be restored.",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "https://file.io/[redacted]",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "password 123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "download and run as administrator, the program will decrypt all files automatically",
            "timestamp": ""
        },
        {
            "party": "victim",
            "content": "please send the password for the decrypt.zip file. thank you.",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "password 123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "password 123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "password 123",
            "timestamp": ""
        },
        {
            "party": "trinity",
            "content": "/Password 123",
            "timestamp": ""
        }
    ]
}