The lead negotiator for the hackers, a laconic user named Nyx_0x7F , had sent a simple message: “Pay 50 Bitcoin. We deleted the seed.”

On his screen, a list scrolled past. Every shard of Project_Athena_Complete_Backup was there. But the cache didn’t just store shards. It stored their relationships . By stitching the cache back together, Marcus had reconstructed the archive’s internal file allocation table—the very map that the encryption had scrambled.

The hackers had encrypted the archive on their own machine, not Marcus’s. But they had made one mistake. To test the archive before deploying the ransomware, they had opened it once on a compromised Stellaris backup server.

At 3:01 AM, the final file wrote to disk: RENDER_ENGINE_KEY.bin .