{"report_id":"f4537dfc-28a9-4562-8967-30d4a9441d41","version":6,"status":"done","tags":[],"date":"2025-01-29T22:27:20Z","url":{"schema":"http","addr":"loader.colortune.ru/Defender%20Control%20v2.1.zip","fqdn":"loader.colortune.ru","domain":"colortune.ru","tld":"ru"},"ip":{"addr":"45.130.41.108","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-09T22:27:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"loader.colortune.ru","ip":{"addr":"45.130.41.108","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-15","domain_rank":0,"first_seen":"2025-01-29T22:27:20.26081Z","last_seen":"2025-01-29T22:27:20.260811Z","alert_count":1,"request_count":1,"received_data":459222,"sent_data":515,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"bfdecdb70bff7e8c8e70cc31e52cb4cb","sha1":"3d318d78cf5690c982eb9e3f229a1a4104dcd5cc","sha256":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","sha512":"c686c79173dbd2582476c2a997852c935d38e6006385200857a049ec157b30626bf364f92d717b7af9424fb178b8845dfeb181ee3823570b6c58d396ed5230c3","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":458899,"url":{"schema":"https","addr":"loader.colortune.ru/Defender%20Control%20v2.1.zip","fqdn":"loader.colortune.ru","domain":"colortune.ru","tld":"ru"},"ip":{"addr":"45.130.41.108","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"archive":[{"path":"Defender Control v2.1/dControl.exe","filename":"dControl.exe","modified":"2022-03-01T15:30:28Z","Modified":"","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections","size":457984,"md5":"58008524a6473bdf86c1040a9a9e39c3","sha1":"cb704d2e8df80fd3500a5b817966dc262d80ddb8","sha256":"1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","sha512":"8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-29","alert":"Detects malware by known bad imphash or rich_pe_header_hash","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2023-03-20","description":"Detects malware by known bad imphash or rich_pe_header_hash","hash":"866e3ea86671a62b677214f07890ddf7e8153bec56455ad083c800e6ab51be37","license":"Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License","modified":"2023-03-22","reference":"https://yaraify.abuse.ch/statistics/","rule":"MAL_Malware_Imphash_Mar23_1","score":"75"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2025-01-29","alert":"Identifies Defender Control, used by attackers to disable Windows Defender.","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2021-04-01","description":"Identifies Defender Control, used by attackers to disable Windows Defender.","fingerprint":"0afa43f0e67bfa81406319e6e4f3ab71e2fe63476a1b7cc06660a68369155cbb","first_imported":"2021-12-30","id":"5wrFItxbjAcaTcQm9RW9IR","last_modified":"2021-12-30","malware":"DEFENDERCONTROL","reference":"https://www.sordum.org/9480/defender-control-v1-8/","rule":"DefenderControl","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-29","alert":"Scan result 55/72","trigger":"1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","verdict":"malicious","severity":"","comment":"malicious - 55/72","link":"https://www.virustotal.com/gui/file/1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","meta":null}]}},{"path":"Defender Control v2.1/dControl.ini","filename":"dControl.ini","modified":"2022-12-15T11:43:48Z","Modified":"","magic":"Unicode text, UTF-16, little-endian text, with CRLF line terminators","size":87896,"md5":"05450ff06366ae22654b63a6e27d1624","sha1":"11453c370f41287fb6339e509bb9d3c91842b379","sha256":"8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd","sha512":"ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2","alerts":{"urlquery":null,"analyzer":null}},{"path":"Defender Control v2.1/Defender_Settings.vbs","filename":"Defender_Settings.vbs","modified":"2021-09-10T15:23:30Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":313,"md5":"b0bf0a477bcca312021177572311e666","sha1":"ea77332d7779938ae8e92ad35d6dea4f4be37a92","sha256":"af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9","sha512":"09366608f2670d2eb0e8ddcacd081a7b2d7b680c4cdd02494d08821dbdf17595b30e88f6ce0888591592e7caa422414a895846a268fd63e8243074972c9f52d8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Defender Control v2.1/ReadMe.txt","filename":"ReadMe.txt","modified":"2022-03-01T17:18:40Z","Modified":"","magic":"Non-ISO extended-ASCII text, with CRLF line terminators","size":2726,"md5":"8dbe87a9bf6342c4e2ea406fa86e76bb","sha1":"35fe083b3f5793fe1b803d091262e4dee2cd0c4d","sha256":"d3b0219253a58ccb394559751299bd16dba1120e02cb11571c3b6a085b1027f8","sha512":"3fca076f1c6fe286bef4d211fad2643e2c2e426d75e665c1a1c8dd241689fbd3911544b90f65e0b2ab25ce0ff63fc5520684ff7c1c2fb71be9cda6359a8b1c8e","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-29","alert":"Detects malware by known bad imphash or rich_pe_header_hash","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2023-03-20","description":"Detects malware by known bad imphash or rich_pe_header_hash","hash":"866e3ea86671a62b677214f07890ddf7e8153bec56455ad083c800e6ab51be37","license":"Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License","modified":"2023-03-22","reference":"https://yaraify.abuse.ch/statistics/","rule":"MAL_Malware_Imphash_Mar23_1","score":"75"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2025-01-29","alert":"Identifies Defender Control, used by attackers to disable Windows Defender.","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2021-04-01","description":"Identifies Defender Control, used by attackers to disable Windows Defender.","fingerprint":"0afa43f0e67bfa81406319e6e4f3ab71e2fe63476a1b7cc06660a68369155cbb","first_imported":"2021-12-30","id":"5wrFItxbjAcaTcQm9RW9IR","last_modified":"2021-12-30","malware":"DEFENDERCONTROL","reference":"https://www.sordum.org/9480/defender-control-v1-8/","rule":"DefenderControl","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-08-18","alert":"Scan result 47/69","trigger":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","verdict":"malicious","severity":"","comment":"malicious - 47/69","link":"https://www.virustotal.com/gui/file/19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"bfdecdb70bff7e8c8e70cc31e52cb4cb","sha1":"3d318d78cf5690c982eb9e3f229a1a4104dcd5cc","sha256":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","sha512":"c686c79173dbd2582476c2a997852c935d38e6006385200857a049ec157b30626bf364f92d717b7af9424fb178b8845dfeb181ee3823570b6c58d396ed5230c3","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":458899,"url":{"schema":"https","addr":"loader.colortune.ru/Defender%20Control%20v2.1.zip","fqdn":"loader.colortune.ru","domain":"colortune.ru","tld":"ru"},"ip":{"addr":"45.130.41.108","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"archive":[{"path":"Defender Control v2.1/dControl.exe","filename":"dControl.exe","modified":"2022-03-01T15:30:28Z","Modified":"","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections","size":457984,"md5":"58008524a6473bdf86c1040a9a9e39c3","sha1":"cb704d2e8df80fd3500a5b817966dc262d80ddb8","sha256":"1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","sha512":"8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-29","alert":"Detects malware by known bad imphash or rich_pe_header_hash","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2023-03-20","description":"Detects malware by known bad imphash or rich_pe_header_hash","hash":"866e3ea86671a62b677214f07890ddf7e8153bec56455ad083c800e6ab51be37","license":"Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License","modified":"2023-03-22","reference":"https://yaraify.abuse.ch/statistics/","rule":"MAL_Malware_Imphash_Mar23_1","score":"75"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2025-01-29","alert":"Identifies Defender Control, used by attackers to disable Windows Defender.","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2021-04-01","description":"Identifies Defender Control, used by attackers to disable Windows Defender.","fingerprint":"0afa43f0e67bfa81406319e6e4f3ab71e2fe63476a1b7cc06660a68369155cbb","first_imported":"2021-12-30","id":"5wrFItxbjAcaTcQm9RW9IR","last_modified":"2021-12-30","malware":"DEFENDERCONTROL","reference":"https://www.sordum.org/9480/defender-control-v1-8/","rule":"DefenderControl","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-29","alert":"Scan result 55/72","trigger":"1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","verdict":"malicious","severity":"","comment":"malicious - 55/72","link":"https://www.virustotal.com/gui/file/1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326","meta":null}]}},{"path":"Defender Control v2.1/dControl.ini","filename":"dControl.ini","modified":"2022-12-15T11:43:48Z","Modified":"","magic":"Unicode text, UTF-16, little-endian text, with CRLF line terminators","size":87896,"md5":"05450ff06366ae22654b63a6e27d1624","sha1":"11453c370f41287fb6339e509bb9d3c91842b379","sha256":"8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd","sha512":"ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2","alerts":{"urlquery":null,"analyzer":null}},{"path":"Defender Control v2.1/Defender_Settings.vbs","filename":"Defender_Settings.vbs","modified":"2021-09-10T15:23:30Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":313,"md5":"b0bf0a477bcca312021177572311e666","sha1":"ea77332d7779938ae8e92ad35d6dea4f4be37a92","sha256":"af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9","sha512":"09366608f2670d2eb0e8ddcacd081a7b2d7b680c4cdd02494d08821dbdf17595b30e88f6ce0888591592e7caa422414a895846a268fd63e8243074972c9f52d8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Defender Control v2.1/ReadMe.txt","filename":"ReadMe.txt","modified":"2022-03-01T17:18:40Z","Modified":"","magic":"Non-ISO extended-ASCII text, with CRLF line terminators","size":2726,"md5":"8dbe87a9bf6342c4e2ea406fa86e76bb","sha1":"35fe083b3f5793fe1b803d091262e4dee2cd0c4d","sha256":"d3b0219253a58ccb394559751299bd16dba1120e02cb11571c3b6a085b1027f8","sha512":"3fca076f1c6fe286bef4d211fad2643e2c2e426d75e665c1a1c8dd241689fbd3911544b90f65e0b2ab25ce0ff63fc5520684ff7c1c2fb71be9cda6359a8b1c8e","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-29","alert":"Detects malware by known bad imphash or rich_pe_header_hash","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2023-03-20","description":"Detects malware by known bad imphash or rich_pe_header_hash","hash":"866e3ea86671a62b677214f07890ddf7e8153bec56455ad083c800e6ab51be37","license":"Detection Rule License 1.1 https://github.com/SigmaHQ/Detection-Rule-License","modified":"2023-03-22","reference":"https://yaraify.abuse.ch/statistics/","rule":"MAL_Malware_Imphash_Mar23_1","score":"75"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public InfoSec YARA rules","scan_date":"2025-01-29","alert":"Identifies Defender Control, used by attackers to disable Windows Defender.","trigger":"Defender Control v2.1/dControl.exe","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/bartblaze/Yara-rules","meta":{"author":"@bartblaze","category":"MALWARE","creation_date":"2021-04-01","description":"Identifies Defender Control, used by attackers to disable Windows Defender.","fingerprint":"0afa43f0e67bfa81406319e6e4f3ab71e2fe63476a1b7cc06660a68369155cbb","first_imported":"2021-12-30","id":"5wrFItxbjAcaTcQm9RW9IR","last_modified":"2021-12-30","malware":"DEFENDERCONTROL","reference":"https://www.sordum.org/9480/defender-control-v1-8/","rule":"DefenderControl","sharing":"TLP:WHITE","source":"BARTBLAZE","status":"RELEASED","version":"1.0"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-08-18","alert":"Scan result 47/69","trigger":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","verdict":"malicious","severity":"","comment":"malicious - 47/69","link":"https://www.virustotal.com/gui/file/19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"loader.colortune.ru/Defender%20Control%20v2.1.zip","fqdn":"loader.colortune.ru","domain":"colortune.ru","tld":"ru"},"ip":{"addr":"45.130.41.108","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-29T22:26:50.001Z","timestamp":1738189610001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colortune.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jan 2025 06:05:12 GMT","end":"Wed, 02 Apr 2025 06:05:11 GMT"},"fingerprint":{"sha1":"82:4C:3E:F2:6C:16:74:76:65:06:11:2F:79:7A:EB:BA:CC:F2:1A:FB","sha256":"61:F6:18:DC:08:54:01:D2:C5:D7:A5:5F:CB:68:28:B0:92:A7:EA:39:16:59:CC:08:AF:20:7F:C7:36:D6:D4:08"}}},"request":{"raw":"GET /Defender%20Control%20v2.1.zip HTTP/1.1\r\nHost: loader.colortune.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Wed, 29 Jan 2025 22:26:50 GMT\r\ncontent-type: application/zip\r\ncontent-length: 458899\r\nlast-modified: Fri, 26 Jul 2024 19:53:09 GMT\r\netag: \"66a3fea5-70093\"\r\nexpires: Fri, 28 Feb 2025 22:26:50 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":458899,"size_decoded":458899,"mime_type":"application/zip","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"bfdecdb70bff7e8c8e70cc31e52cb4cb","sha1":"3d318d78cf5690c982eb9e3f229a1a4104dcd5cc","sha256":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","sha512":"c686c79173dbd2582476c2a997852c935d38e6006385200857a049ec157b30626bf364f92d717b7af9424fb178b8845dfeb181ee3823570b6c58d396ed5230c3","ssdeep":"6144:mUcIgFnTUsPD2ADPcbJ5G5YLynTxSYcofdfpaGyw9yEjobucvSwnBPF8rDCY9YrO:GFT5Lc95Y6ynYHofdfppn4UJctToWvW","tlshash":"bca423abf43711636f13589611b78dc332b80d26ae9520afc5ccbbf548f5cb145b622a","first_seen":"2025-01-29T22:27:22.193989Z","last_seen":"2025-01-29T22:27:22.193989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":283,"dns":63,"connect":37,"send":0,"wait":36,"receive":197,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-08-18","alert":"Scan result 47/69","trigger":"19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","verdict":"malicious","severity":"","comment":"malicious - 47/69","link":"https://www.virustotal.com/gui/file/19165773f3d427afae5e5428d3265bd74262cd6323cee03ba8ff2d37e2f91e66","meta":null}],"urlquery":null}}]}