Edit tour

Windows Analysis Report
https://av360.app/TMS/user/4

Overview

General Information

Sample URL:	https://av360.app/TMS/user/4
Analysis ID:	1655025
Infos:

Detection

Score:	2
Range:	0 - 100
Confidence:	80%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,18087654244096150284,8597391435286391125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://av360.app/TMS/user/4" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/login HTTP/1.1Host: av360.appConnection: keep-aliveContent-Length: 36sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://av360.appSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 19:49:19 GMTConnection: closeContent-Length: 4318
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 19:49:19 GMTConnection: closeContent-Length: 4316

Source: chromecache_86.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_86.1.dr	String found in binary or memory: http://errors.angularjs.org/1.7.7/
Source: chromecache_93.1.dr	String found in binary or memory: http://www.2ality.com/2014/05/current-script.html
Source: chromecache_68.1.dr	String found in binary or memory: https://av360.app/TMS/user/4
Source: chromecache_81.1.dr, chromecache_71.1.dr	String found in binary or memory: https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur
Source: chromecache_73.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_73.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_68.1.dr, chromecache_81.1.dr, chromecache_71.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSw
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVA
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVI
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVM
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQ
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVw
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_85.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_93.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/issues/33
Source: chromecache_82.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/issues/72#issuecomment-263916386
Source: chromecache_93.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/pull/32#issuecomment-103142214
Source: chromecache_73.1.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_68.1.dr, chromecache_81.1.dr, chromecache_71.1.dr	String found in binary or memory: https://surveyconnect.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7000_1916573209

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7000_1916573209

Jump to behavior

Source: classification engine

Classification label: clean2.win@22/54@6/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,18087654244096150284,8597391435286391125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://av360.app/TMS/user/4"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,18087654244096150284,8597391435286391125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://av360.app/TMS/user/4	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.SecondaryLogoName%7D%7D?v=941	0%	Avira URL Cloud	safe
https://av360.app/Scripts/sass.js/sass.worker.js	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/angular?v=n4kY-0iRmoPktJw8f5AIsrld-pet1ESblIyCEjHylkU1	0%	Avira URL Cloud	safe
https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur	0%	Avira URL Cloud	safe
https://av360.app/content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=941	0%	Avira URL Cloud	safe
http://errors.angularjs.org/1.7.7/	0%	Avira URL Cloud	safe
https://av360.app/tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/login	0%	Avira URL Cloud	safe
https://av360.app/content/styles/fonts/fontawesome/fa-solid-900.woff2	0%	Avira URL Cloud	safe
https://av360.app/Scripts/sass.js/sass.js	0%	Avira URL Cloud	safe
https://av360.app/Content/Images/Favicons/favicon.ico	0%	Avira URL Cloud	safe
https://av360.app/bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1	0%	Avira URL Cloud	safe
http://www.2ality.com/2014/05/current-script.html	0%	Avira URL Cloud	safe
https://av360.app/bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01	0%	Avira URL Cloud	safe
https://av360.app/content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941	0%	Avira URL Cloud	safe
https://av360.app/public/api/maintenance-window	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/userApp?v=6clXiuabafqv8ECnXiuJJwgXqZY8eZPKxzdpnd89IvE1	0%	Avira URL Cloud	safe
https://av360.app/Areas/User/Scripts/av360.app.user.session.service.js	0%	Avira URL Cloud	safe
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=941	0%	Avira URL Cloud	safe
https://surveyconnect.com	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.251.40.164	true	false		high
av360.app	52.38.200.66	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://av360.app/Scripts/sass.js/sass.worker.js	false	Avira URL Cloud: safe	unknown
https://av360.app/tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS	false	Avira URL Cloud: safe	unknown
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/login	false	Avira URL Cloud: safe	unknown
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.SecondaryLogoName%7D%7D?v=941	false	Avira URL Cloud: safe	unknown
https://av360.app/content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=941	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/js/angular?v=n4kY-0iRmoPktJw8f5AIsrld-pet1ESblIyCEjHylkU1	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1	false	Avira URL Cloud: safe	unknown
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0	false	Avira URL Cloud: safe	unknown
https://av360.app/Scripts/sass.js/sass.js	false	Avira URL Cloud: safe	unknown
https://av360.app/content/styles/fonts/fontawesome/fa-solid-900.woff2	false	Avira URL Cloud: safe	unknown
https://av360.app/Content/Images/Favicons/favicon.ico	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1	false	Avira URL Cloud: safe	unknown
https://av360.app/public/api/maintenance-window	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41	false	Avira URL Cloud: safe	unknown
https://av360.app/TMS/user/4	false		unknown
https://av360.app/content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941	false	Avira URL Cloud: safe	unknown
https://av360.app/Areas/User/Scripts/av360.app.user.session.service.js	false	Avira URL Cloud: safe	unknown
https://av360.app/bundles/js/userApp?v=6clXiuabafqv8ECnXiuJJwgXqZY8eZPKxzdpnd89IvE1	false	Avira URL Cloud: safe	unknown
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=941	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://errors.angularjs.org/1.7.7/	chromecache_86.1.dr	false	Avira URL Cloud: safe	unknown
https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur	chromecache_81.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/medialize/sass.js/issues/72#issuecomment-263916386	chromecache_82.1.dr	false		high
https://fontawesome.com/license/free	chromecache_73.1.dr	false		high
https://fontawesome.com	chromecache_73.1.dr	false		high
http://www.2ality.com/2014/05/current-script.html	chromecache_93.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/medialize/sass.js/issues/33	chromecache_93.1.dr	false		high
http://angularjs.org	chromecache_86.1.dr	false		high
https://surveyconnect.com	chromecache_68.1.dr, chromecache_81.1.dr, chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/nickpettit/glide	chromecache_73.1.dr	false		high
https://github.com/medialize/sass.js/pull/32#issuecomment-103142214	chromecache_93.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
52.38.200.66	av360.app	United States		16509	AMAZON-02US	false
142.251.40.164	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1655025
Start date and time:	2025-04-02 21:48:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://av360.app/TMS/user/4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/54@6/3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.206, 142.251.40.195, 142.251.167.84, 142.251.40.206, 142.250.80.14, 142.251.40.110, 142.251.40.202, 142.250.80.99, 142.251.41.14, 142.251.35.170, 142.250.64.74, 142.251.40.170, 142.250.80.10, 142.251.40.234, 142.251.40.106, 172.217.165.138, 142.250.80.74, 142.251.41.10, 142.250.72.106, 142.251.40.138, 142.250.80.106, 142.250.80.42, 142.250.64.106, 142.250.176.202, 142.250.64.110, 142.250.81.238, 142.250.65.174, 199.232.214.172, 142.250.176.195, 142.251.40.238, 142.251.40.174, 142.250.80.78, 142.251.40.142, 20.109.210.53, 184.31.69.3, 40.126.35.64, 23.219.82.48
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://av360.app/TMS/user/4

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7851
Entropy (8bit):	4.771483684643157
Encrypted:	false
SSDEEP:	192:LUcYiIMU8O8slQy/+4/A+4/0+DAmA+X0+xU5jIqMU:QcbU9IjU
MD5:	433D4593892CF8118B8DA712268E96FC
SHA1:	6BDFC8FE18D82A59ED6D64E0A9661C559EC65A47
SHA-256:	B9DBB01775059DC612484074CD3DADF174DE1BBE4E86B94CD1D2216BF402EBD6
SHA-512:	D583D6A8AB4BF949046819F8F66226540886A0FC80615F8030ECE70D196FE35E1E0C252E530AE288E09377756C860EDB705FC5044D581F4C46B3AD07D9482F19
Malicious:	false
Reputation:	low
URL:	https://av360.app/tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS
Preview:	{"variables":"$primary: #4764B4;$secondary: #000000;$unselected-input-color: #ffffff;$success: #4764b4;$danger: #C04545;","theme":"/******************************************************\r\n mixins\r\n *******************************************************/\r\n@function text-color($color) {\r\n @if ((lightness($color)) >= 60 or (alpha($color) <= 0.4)) {\r\n @return #000000; // lighter backgorund, return dark color\r\n }\r\n @else {\r\n @return #ffffff; // darker background, return light color\r\n }\r\n}\r\n\r\n@function bg-color($color) {\r\n @if ((lightness($color)) >= 60 or (alpha($color) <= 0.4)) {\r\n @return #000000; // lighter backgorund, return dark color\r\n }\r\n @else {\r\n @return #ffffff; // darker background, return light color\r\n }\r\n}\r\n\r\n@function lighten-or-darken-color($color, $percent: 15%) {\r\n @if ((lightness($color)) >= 60 or (alpha($color) <= 0.4)) {\r\n @return darken($color, $percent); // l

Source: https://av360.app/TMS/user/4	HTTP Parser: No <meta name="copyright".. found
Source: https://av360.app/TMS/user/4	HTTP Parser: No <meta name="copyright".. found
Source: https://av360.app/TMS/user/4	HTTP Parser: No <meta name="copyright".. found
Source: https://av360.app/TMS/user/4	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.3
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.21
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /TMS/user/4 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=941 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.SecondaryLogoName%7D%7D?v=941 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/sass.js/sass.js HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/js/angular?v=n4kY-0iRmoPktJw8f5AIsrld-pet1ESblIyCEjHylkU1 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/js/userApp?v=6clXiuabafqv8ECnXiuJJwgXqZY8eZPKxzdpnd89IvE1 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/styles/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1Host: av360.appConnection: keep-aliveOrigin: https://av360.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://av360.app/bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/User/Scripts/av360.app.user.session.service.js HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/api/maintenance-window HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Images/Favicons/favicon.ico HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/api/maintenance-window HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/sass.js/sass.worker.js HTTP/1.1Host: av360.appConnection: keep-aliveAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://av360.app/TMS/user/4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Images/Favicons/favicon.ico HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=941 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941 HTTP/1.1Host: av360.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://av360.app/TMS/user/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0 HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941 HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=941 HTTP/1.1Host: av360.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: av360.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 21:49:18.326178074 CEST	53	54620	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:18.367580891 CEST	53	62900	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:19.123836994 CEST	53	53532	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:19.158643007 CEST	53846	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:19.158772945 CEST	53290	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:19.275398970 CEST	53	50134	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:19.338529110 CEST	53	53846	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:19.345160961 CEST	53	53290	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:20.307816029 CEST	53	51486	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:22.984105110 CEST	54717	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:22.984277964 CEST	56015	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:23.085647106 CEST	53	56015	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:23.087428093 CEST	53	54717	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:24.974220037 CEST	53	54120	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:25.638941050 CEST	50047	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:25.639210939 CEST	63613	53	192.168.2.16	1.1.1.1
Apr 2, 2025 21:49:25.786911964 CEST	53	50047	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:25.799714088 CEST	53	63613	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:36.330559969 CEST	53	51965	1.1.1.1	192.168.2.16
Apr 2, 2025 21:49:55.074306965 CEST	53	58061	1.1.1.1	192.168.2.16
Apr 2, 2025 21:50:18.028603077 CEST	53	65524	1.1.1.1	192.168.2.16
Apr 2, 2025 21:50:18.248507977 CEST	53	53183	1.1.1.1	192.168.2.16
Apr 2, 2025 21:50:21.441344023 CEST	53	49426	1.1.1.1	192.168.2.16
Apr 2, 2025 21:50:26.064645052 CEST	138	138	192.168.2.16	192.168.2.255
Apr 2, 2025 21:50:48.753128052 CEST	53	58147	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:19 UTC	669	OUT	GET /TMS/user/4 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:20 UTC	268	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 19453
2025-04-02 19:49:20 UTC	16116	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 3c 74 69 74 6c 65 3e 54 4d 53 20 7c 20 4c 6f 67 69 6e 20 7c 20 41 63 74 69 76 65 56 69 65 77 20 33 36 30 20 62 79 20 53 75 72 76 65 79 43 6f 6e 6e 65 63 74 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"> <title>TMS \| Login \| ActiveView 360 by SurveyConnect</title><meta name="descript
2025-04-02 19:49:20 UTC	3337	IN	Data Raw: 27 73 75 72 76 65 79 27 29 7d 7d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 77 36 30 30 22 20 6e 67 2d 69 66 3d 22 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 4e 61 6d 65 20 7c 7c 20 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 45 6d 61 69 6c 20 7c 7c 20 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 50 68 6f 6e 65 22 3e 3c 75 3e 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 43 6f 6e 74 61 63 74 3c 2f 75 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: 'survey')}} administrator. <div class="font-w600" ng-if="__currentSurvey.ProjectContactName \|\| __currentSurvey.ProjectContactEmail \|\| __currentSurvey.ProjectContactPhone"><u>Administrator Contact</u></div> <ul>

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:20 UTC	598	OUT	GET /bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:20 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:20 GMT Last-Modified: Wed, 02 Apr 2025 19:49:20 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 454211
2025-04-02 19:49:20 UTC	16039	IN	Data Raw: 2a 2c 0d 0a 2a 3a 3a 62 65 66 6f 72 65 2c 0d 0a 2a 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0d 0a 7d 0d 0a 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 Data Ascii: ,::before,*::after { box-sizing: border-box;}html { font-family: sans-serif; line-height: 1.15; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0, 0, 0, 0);}article, aside, figcaption, figure, footer, hea
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 2e 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 32 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 2e 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 33 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 34 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 35 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 36 20 7b 0d 0a 20 20 20 20 6d 61 Data Ascii: margin-left: 8.33333%; } .offset-md-2 { margin-left: 16.66667%; } .offset-md-3 { margin-left: 25%; } .offset-md-4 { margin-left: 33.33333%; } .offset-md-5 { margin-left: 41.66667%; } .offset-md-6 { ma
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 34 38 2c 20 31 39 39 2c 20 31 34 31 2c 20 30 2e 32 35 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 2c 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 2c 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 Data Ascii: :focus { border-color: #30c78d; box-shadow: 0 0 0 0.2rem rgba(48, 199, 141, 0.25);}.was-validated .custom-select:valid, .custom-select.is-valid { border-color: #30c78d;}.was-validated .custom-select:valid:focus, .custom-select.is-vali
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 20 7b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 34 38 2c 20 31 39 39 2c 20 31 34 31 2c 20 30 2e 35 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 64 69 73 61 62 6c 65 64 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d Data Ascii: lor: #30c78d;}.btn-outline-success:focus, .btn-outline-success.focus { box-shadow: 0 0 0 0.2rem rgba(48, 199, 141, 0.5);}.btn-outline-success.disabled, .btn-outline-success:disabled { color: #30c78d; background-color: transparent;}
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 33 37 35 72 65 6d 20 30 2e 37 35 72 65 6d 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 34 33 61 34 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: nput-group-append { margin-left: -1px;}.input-group-text { display: flex; align-items: center; padding: 0.375rem 0.75rem; margin-bottom: 0; font-size: 1rem; font-weight: 400; line-height: 1.5; color: #343a40; text-align
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 2e 32 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 31 37 39 64 36 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 31 66 34 66 35 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 35 31 37 39 64 36 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 20 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 64 62 35 62 64 3b 0d 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: .25rem;}.page-item.active .page-link { z-index: 3; color: #5179d6; background-color: #f1f4f5; border-color: #5179d6;}.page-item.disabled .page-link { color: #adb5bd; pointer-events: none; cursor: auto; background-color:
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 20 33 35 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 35 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 70 61 64 64 69 6e 67 2d 62 6f 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 32 35 72 65 6d 20 30 2e 37 35 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 32 35 72 65 6d 3b 0d Data Ascii: width: 350px; font-size: 0.875rem; background-color: rgba(255, 255, 255, 0.85); background-clip: padding-box; border: 1px solid rgba(0, 0, 0, 0.1); box-shadow: 0 0.25rem 0.75rem rgba(0, 0, 0, 0.1); opacity: 0; border-radius: 0.25rem;
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 74 61 62 6c 65 2d 72 6f 77 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 72 6f 77 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 74 61 62 6c 65 2d 63 65 6c 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: le !important;}.d-table-row { display: table-row !important;}.d-table-cell { display: table-cell !important;}.d-flex { display: flex !important;}.d-inline-flex { display: inline-flex !important;}@media (min-width:
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 6c 65 66 74 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 72 69 67 68 74 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 6e 6f 6e 65 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 75 73 65 72 2d 73 65 6c 65 63 74 2d 61 6c 6c 20 7b 0d 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a Data Ascii: important; }}@media (min-width: 1200px) { .float-xl-left { float: left !important; } .float-xl-right { float: right !important; } .float-xl-none { float: none !important; }}.user-select-all { user-select:
2025-04-02 19:49:20 UTC	16384	IN	Data Raw: 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 74 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 79 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 72 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 78 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 62 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 79 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 Data Ascii: 1rem !important; } .p-sm-4 { padding: 1.5rem !important; } .pt-sm-4, .py-sm-4 { padding-top: 1.5rem !important; } .pr-sm-4, .px-sm-4 { padding-right: 1.5rem !important; } .pb-sm-4, .py-sm-4 { padding-b

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:20 UTC	606	OUT	GET /bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:21 UTC	344	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:20 GMT Last-Modified: Wed, 02 Apr 2025 19:49:20 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 24574
2025-04-02 19:49:21 UTC	16040	IN	Data Raw: 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 2e 36 32 35 65 6d 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 2e 36 32 35 65 6d 20 23 64 39 64 39 64 39 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 68 65 61 64 65 72 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 74 69 Data Ascii: .swal2-popup.swal2-toast{flex-direction:row;align-items:center;width:auto;padding:.625em;overflow-y:hidden;background:#fff;box-shadow:0 0 .625em #d9d9d9}.swal2-popup.swal2-toast .swal2-header{flex-direction:row;padding:0}.swal2-popup.swal2-toast .swal2-ti
2025-04-02 19:49:21 UTC	8534	IN	Data Raw: 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 77 69 64 74 68 3a 32 2e 35 65 6d 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 2d 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 30 38 35 64 36 7d 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 5d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 73 77 61 6c 32 2d 73 68 6f 77 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 73 68 6f 77 20 2e 33 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 73 68 6f 77 20 2e 33 73 7d 2e 73 77 61 6c 32 2d 68 69 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 68 69 64 65 20 2e 31 35 73 20 66 6f 72 77 61 72 64 73 3b 61 6e Data Ascii: 0;flex-shrink:0;width:2.5em;height:.4em;margin:0 -1px;background:#3085d6}[class^=swal2]{-webkit-tap-highlight-color:transparent}.swal2-show{-webkit-animation:swal2-show .3s;animation:swal2-show .3s}.swal2-hide{-webkit-animation:swal2-hide .15s forwards;an

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:20 UTC	694	OUT	GET /content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=941 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:20 UTC	274	IN	HTTP/1.1 404 Not Found Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 4316
2025-04-02 19:49:20 UTC	4316	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 20 20 3c 21 2d 2d 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 63 6f 6e 73 20 63 61 6e 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 79 6f 75 72 20 6f 77 6e 2c 20 74 68 65 79 20 61 72 65 20 75 73 65 64 20 62 79 20 64 65 73 6b 74 6f 70 20 61 6e 64 20 6d 6f 62 69 6c 65 20 62 72 6f 77 73 65 72 73 20 2d 2d 3e 0d 0a 20 20 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 Data Ascii: <!DOCTYPE html><html><head> ... The following icons can be replaced with your own, they are used by desktop and mobile browsers --> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fi

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:20 UTC	543	OUT	GET /Scripts/sass.js/sass.js HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:20 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 11 Dec 2020 00:25:53 GMT Accept-Ranges: bytes ETag: "16e8ae2f54cfd61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 5578
2025-04-02 19:49:20 UTC	5578	IN	Data Raw: 2f 2a 21 20 73 61 73 73 2e 6a 73 20 2d 20 76 30 2e 31 31 2e 31 20 28 66 32 38 36 34 33 36 29 20 2d 20 62 75 69 6c 74 20 32 30 31 39 2d 31 30 2d 32 30 0a 20 20 70 72 6f 76 69 64 69 6e 67 20 6c 69 62 73 61 73 73 20 33 2e 36 2e 32 20 28 34 64 61 37 63 34 62 64 29 0a 20 20 76 69 61 20 65 6d 73 63 72 69 70 74 65 6e 20 31 2e 33 38 2e 33 31 20 28 30 34 30 65 34 39 61 29 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 20 20 7d 20 65 6c Data Ascii: /! sass.js - v0.11.1 (f286436) - built 2019-10-20 providing libsass 3.6.2 (4da7c4bd) via emscripten 1.38.31 (040e49a) /(function (root, factory) { 'use strict'; if (typeof define === 'function' && define.amd) { define([], factory); } el

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (700), with CRLF line terminators
Category:	downloaded
Size (bytes):	19453
Entropy (8bit):	4.72341102643448
Encrypted:	false
SSDEEP:	192:8QgEa7VQWkqRsy3DpidNw2CxDUawyiUXJYgrx4btORx3qhobS0O:CkqRBiAXwyiUXbx2tOR8obS0O
MD5:	77A99AFDBA16674B35BA4222B7510854
SHA1:	4582846E96DE4EDCE282A55775F2E12771D7B9CE
SHA-256:	66AF9526324B55D307D450F7046DB6B61CEEA0A3FDEBDAC9935C6F9B53222E9B
SHA-512:	71F50C99CD3D5A0CD706DB54B6C65EFEEAAA9D52DE6EDF0C527AF7FEB7A354D5EE5F0A4F0814ECF9CE0A675CE63100FF3C8B471DBD3031257E891C97BEA29E4B
Malicious:	false
Reputation:	low
URL:	https://av360.app/TMS/user/4
Preview:	......<!DOCTYPE html>..<html lang="en">..<head>.. ....<meta charset="utf-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">.... <title>TMS \| Login \| ActiveView 360 by SurveyConnect</title>..<meta name="description" content="ActiveView 360 \| A 360 Feedback and Survey Application Built by SurveyConnect">..<meta name="author" content="Gilbert Carino Jr \| SurveyConnect">....<meta name="robots" content="noindex, nofollow">....<base href="https://av360.app/TMS/user/4" />...... Icons -->.. The following icons can be replaced with your own, they are used by desktop and mobile browsers -->..<link rel="shortcut icon" href="/Content/Images/Favicons/favicon.ico">..<link rel="apple-touch-icon" sizes="180x180" href="/Content/Images/Favicons/apple-touch-icon.png">..<link rel="icon" type="image/png" sizes="512x512" href="/Content/Images/Favicons/favicon-512x512.png">..<link rel="icon" type="image/png" sizes="192x192" href="/Content/Images/Favicons/f

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 289x100, components 3
Category:	downloaded
Size (bytes):	14006
Entropy (8bit):	7.8261955265326915
Encrypted:	false
SSDEEP:	384:Xg0ureAchknf9S7xm9g3hdqKO6aT3QNkAmxTvf:Xg0KexhQ9cP5aDQNkAMT
MD5:	8A1BDB37986473729BA37129A282A37A
SHA1:	3E0D48BA9CB4DEB70C2D08ED2759080720C7F1E2
SHA-256:	062F32F51E027B1EBF9B42729245D8D47CF7646B7A3E173C767B8291123C84BB
SHA-512:	22C24AB90ACDA2D1009C487C06626CE45766851FC72291B25F103953751C9A2F1C1B4B66AB97712FE7833757D1D9B7E0EFBF493750DE07DF5C2A5F1AC12FD036
Malicious:	false
Reputation:	low
URL:	https://av360.app/content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM...Resolution......H.......H......8BIM...FX Global Lighting Angle........x8BIM...FX Global Altitude.........8BIM...Print Flags..............8BIM...Copyright Flag.......8BIM'..Japanese Print Flags...............8BIM...Color Halftone Settings...H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM...Color Transfer Settings...p................................................................................................................8BIM...Guides............@...@....8BIM...URL overrides........8BIM...Slices....q...............d...!.....T.M.S._.l.o.g.o...................................!...d..................................8BIM...ICC Untagged Flag......8BIM...Layer ID Generator Base........8BIM...New Windows Thumbnail...........p...'...P..30..............JFIF.....H.H......Adobe.d...............................................................................................................................................

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:20 UTC	587	OUT	GET /bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:21 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:20 GMT Last-Modified: Wed, 02 Apr 2025 19:49:20 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:19 GMT Connection: close Content-Length: 17859
2025-04-02 19:49:21 UTC	16033	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 7c 7c 74 68 69 73 7c 7c 7b 7d 2c 67 74 3d 73 2e 5f 2c 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 77 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 6e 75 6c 6c 2c 6e 69 3d 61 2e 70 75 73 68 2c 68 3d 61 2e 73 6c 69 63 65 2c 63 3d 77 2e 74 6f 53 74 Data Ascii: !function(){var s="object"==typeof self&&self.self===self&&self\|\|"object"==typeof global&&global.global===global&&global\|\|this\|\|{},gt=s._,a=Array.prototype,w=Object.prototype,rt="undefined"!=typeof Symbol?Symbol.prototype:null,ni=a.push,h=a.slice,c=w.toSt
2025-04-02 19:49:21 UTC	1826	IN	Data Raw: 74 3d 2f 28 2e 29 5e 2f 2c 75 69 3d 7b 22 27 22 3a 22 27 22 2c 22 5c 5c 22 3a 22 5c 5c 22 2c 22 5c 72 22 3a 22 72 22 2c 22 5c 6e 22 3a 22 6e 22 2c 22 5c 75 32 30 32 38 22 3a 22 75 32 30 32 38 22 2c 22 5c 75 32 30 32 39 22 3a 22 75 32 30 32 39 22 7d 2c 66 69 3d 2f 5c 5c 7c 27 7c 5c 72 7c 5c 6e 7c 5c 75 32 30 32 38 7c 5c 75 32 30 32 39 2f 67 2c 65 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 5c 5c 22 2b 75 69 5b 6e 5d 7d 3b 6e 2e 74 65 6d 70 6c 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 66 2c 73 3b 21 69 26 26 72 26 26 28 69 3d 72 29 3b 69 3d 6e 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 69 2c 6e 2e 74 65 6d 70 6c 61 74 65 53 65 74 74 69 6e 67 73 29 3b 76 61 72 20 65 2c 68 3d 52 65 67 45 78 70 28 5b 28 69 2e 65 73 Data Ascii: t=/(.)^/,ui={"'":"'","\\":"\\","\r":"r","\n":"n","\u2028":"u2028","\u2029":"u2029"},fi=/\\\|'\|\r\|\n\|\u2028\|\u2029/g,ei=function(n){return"\\"+ui[n]};n.template=function(t,i,r){var f,s;!i&&r&&(i=r);i=n.defaults({},i,n.templateSettings);var e,h=RegExp([(i.es

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	587	OUT	GET /bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:21 UTC	352	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:21 GMT Last-Modified: Wed, 02 Apr 2025 19:49:21 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 232749
2025-04-02 19:49:21 UTC	16032	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 3a 74 28 6e 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?win
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 3c 6e 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 3d 6e 2e 6c 65 6e 67 74 68 3b 75 2d 2d 3b 29 69 66 28 21 6e 5b 75 5d 28 74 2c 69 2c 72 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3a 6e 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 6e 2c 74 2c 69 2c 72 2c 75 29 7b 66 6f 72 28 76 61 72 20 65 2c 6f 3d 5b 5d 2c 66 3d 30 2c 73 3d 6e 2e 6c 65 6e 67 74 68 2c 68 3d 6e 75 6c 6c 21 3d 74 3b 66 3c 73 3b 66 2b 2b 29 28 65 3d 6e 5b 66 5d 29 26 26 28 69 26 26 21 69 28 65 2c 72 2c 75 29 7c 7c 28 6f 2e 70 75 73 68 28 65 29 2c 68 26 26 74 2e 70 75 73 68 28 66 29 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 6e 2c 74 2c 69 2c 72 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 20 72 26 Data Ascii: <n.length?function(t,i,r){for(var u=n.length;u--;)if(!n[u](t,i,r))return!1;return!0}:n[0]}function wt(n,t,i,r,u){for(var e,o=[],f=0,s=n.length,h=null!=t;f<s;f++)(e=n[f])&&(i&&!i(e,r,u)\|\|(o.push(e),h&&t.push(f)));return o}function fi(n,t,i,r,e,o){return r&
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 6e 70 75 74 2f 3e 22 2c 6e 2e 66 69 72 73 74 43 68 69 6c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 22 22 29 2c 22 22 3d 3d 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7d 29 7c 7c 69 69 28 22 76 61 6c 75 65 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 69 66 28 21 69 26 26 22 69 6e 70 75 74 22 3d 3d 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 20 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 29 2c 61 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 Data Ascii: {return n.innerHTML="<input/>",n.firstChild.setAttribute("value",""),""===n.firstChild.getAttribute("value")})\|\|ii("value",function(n,t,i){if(!i&&"input"===n.nodeName.toLowerCase())return n.defaultValue}),a(function(n){return null==n.getAttribute("disable
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 61 64 3a 7b 6e 6f 42 75 62 62 6c 65 3a 21 30 7d 2c 66 6f 63 75 73 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 21 3d 3d 6c 75 28 29 26 26 74 68 69 73 2e 66 6f 63 75 73 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 28 29 2c 21 31 7d 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 66 6f 63 75 73 69 6e 22 7d 2c 62 6c 75 72 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 3d 3d 3d 6c 75 28 29 26 26 74 68 69 73 2e 62 6c 75 72 29 72 65 74 75 72 6e 20 74 68 69 73 2e 62 6c 75 72 28 29 2c 21 31 7d 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 66 6f 63 75 73 6f 75 74 22 7d 2c 63 6c 69 63 6b 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 63 68 65 63 6b 62 6f 78 Data Ascii: ad:{noBubble:!0},focus:{trigger:function(){if(this!==lu()&&this.focus)return this.focus(),!1},delegateType:"focusin"},blur:{trigger:function(){if(this===lu()&&this.blur)return this.blur(),!1},delegateType:"focusout"},click:{trigger:function(){if("checkbox
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 65 2c 75 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 69 7c 7c 28 65 3d 63 74 5b 75 5d 2c 63 74 5b 75 5d 3d 66 2c 66 3d 6e 75 6c 6c 21 3d 72 28 6e 2c 74 2c 69 29 3f 75 3a 6e 75 6c 6c 2c 63 74 5b 75 5d 3d 65 29 2c 66 7d 7d 29 3b 68 66 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 3b 63 66 3d 2f 5e 28 3f 3a 61 7c 61 72 65 61 29 24 2f 69 3b 69 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 2c 69 2e 70 72 6f 70 2c 6e 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: e,u=t.toLowerCase();return i\|\|(e=ct[u],ct[u]=f,f=null!=r(n,t,i)?u:null,ct[u]=e),f}});hf=/^(?:input\|select\|textarea\|button)$/i;cf=/^(?:a\|area)$/i;i.fn.extend({prop:function(n,t){return p(this,i.prop,n,t,1<arguments.length)},removeProp:function(n){return th
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 3a 6e 5b 65 5d 3d 6f 3b 74 5b 65 5d 26 26 28 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 73 72 2e 70 75 73 68 28 65 29 29 3b 73 26 26 75 28 6f 29 26 26 6f 28 73 5b 30 5d 29 3b 73 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 65 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 28 28 64 66 3d 66 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 5c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 5c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 64 66 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 2c 69 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 Data Ascii: :n[e]=o;t[e]&&(t.jsonpCallback=r.jsonpCallback,sr.push(e));s&&u(o)&&o(s[0]);s=o=void 0}),"script"}),e.createHTMLDocument=((df=f.implementation.createHTMLDocument("").body).innerHTML="<form><\/form><form><\/form>",2===df.childNodes.length),i.parseHTML=func
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 6e 26 26 28 74 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 6e 29 29 3b 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 74 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 72 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 75 72 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 72 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 75 3d 69 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 Data Ascii: {var t=this._element;n&&(t=this._getRootElement(n));this._triggerCloseEvent(t).isDefaultPrevented()\|\|this._removeElement(t)},r.dispose=function(){t.removeData(this._element,ur);this._element=null},r._getRootElement=function(n){var u=i.getSelectorFromEleme
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 72 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 28 6e 5b 72 5d 3d 69 5b 72 5d 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 73 65 3d 73 69 26 26 2f 46 69 72 65 66 6f 78 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 6e 66 3d 5b 22 61 75 74 6f 2d 73 74 61 72 74 22 2c 22 61 75 74 6f 22 2c 22 61 75 74 6f 2d 65 6e 64 22 2c 22 74 6f 70 2d 73 74 61 72 74 22 2c 22 74 6f 70 22 2c 22 74 6f 70 2d 65 6e 64 22 2c 22 72 69 67 68 74 2d 73 74 61 72 74 22 2c 22 72 69 67 68 74 22 2c 22 72 69 67 68 74 2d 65 6e 64 22 2c 22 62 6f 74 74 Data Ascii: ments.length;t++){i=arguments[t];for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(n[r]=i[r])}return n};se=si&&/Firefox/i.test(navigator.userAgent);nf=["auto-start","auto","auto-end","top-start","top","top-end","right-start","right","right-end","bott
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 3d 3d 69 2e 74 79 70 65 26 26 28 6f 2e 63 6c 69 63 6b 45 76 65 6e 74 3d 69 29 2c 63 29 26 26 28 6c 3d 63 2e 5f 6d 65 6e 75 2c 21 74 28 65 29 2e 68 61 73 43 6c 61 73 73 28 73 29 7c 7c 69 26 26 28 22 63 6c 69 63 6b 22 3d 3d 3d 69 2e 74 79 70 65 26 26 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 69 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 69 2e 74 79 70 65 26 26 39 3d 3d 3d 69 2e 77 68 69 63 68 29 26 26 74 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 69 2e 74 61 72 67 65 74 29 7c 7c 28 68 3d 74 2e 45 76 65 6e 74 28 66 2e 48 49 44 45 2c 6f 29 2c 74 28 65 29 2e 74 72 69 67 67 65 72 28 68 29 2c 68 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 Data Ascii: ==i.type&&(o.clickEvent=i),c)&&(l=c._menu,!t(e).hasClass(s)\|\|i&&("click"===i.type&&/input\|textarea/i.test(i.target.tagName)\|\|"keyup"===i.type&&9===i.which)&&t.contains(e,i.target)\|\|(h=t.Event(f.HIDE,o),t(e).trigger(h),h.isDefaultPrevented()\|\|("ontouchstar
2025-04-02 19:49:23 UTC	16384	IN	Data Raw: 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 7c 7c 21 69 2e 6e 6f 64 65 54 79 70 65 26 26 21 69 2e 6a 71 75 65 72 79 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 68 74 6d 6c 3f 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 61 6e 69 74 69 7a 65 26 26 28 69 3d 77 65 28 69 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 77 68 69 74 65 4c 69 73 74 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 61 6e 69 74 69 7a 65 46 6e 29 29 2c 6e 2e 68 74 6d 6c 28 69 29 29 3a 6e 2e 74 65 78 74 28 69 29 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 68 74 6d 6c 3f 74 28 69 29 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 6e 29 7c 7c 6e 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 69 29 3a 6e 2e 74 65 78 74 28 74 28 69 29 2e 74 65 78 74 28 29 29 Data Ascii: tent=function(n,i){"object"!=typeof i\|\|!i.nodeType&&!i.jquery?this.config.html?(this.config.sanitize&&(i=we(i,this.config.whiteList,this.config.sanitizeFn)),n.html(i)):n.text(i):this.config.html?t(i).parent().is(n)\|\|n.empty().append(i):n.text(t(i).text())

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	591	OUT	GET /bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:21 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:21 GMT Last-Modified: Wed, 02 Apr 2025 19:49:21 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 77359
2025-04-02 19:49:21 UTC	16033	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 72 2c 75 29 7b 76 61 72 20 72 3d 7b 63 6f 6e 74 65 6e 74 3a 7b 6d 65 73 73 61 67 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 3f 72 2e 6d 65 73 73 61 67 65 3a 72 2c 74 69 74 6c 65 3a 72 2e 74 69 74 6c 65 3f 72 2e 74 69 74 6c 65 3a 22 22 2c 69 63 6f 6e 3a 72 2e 69 63 6f 6e 3f 72 2e 69 63 6f 6e 3a Data Ascii: !function(n){"function"==typeof define&&define.amd?define(["jquery"],n):n("object"==typeof exports?require("jquery"):jQuery)}(function(n){function i(i,r,u){var r={content:{message:"object"==typeof r?r.message:r,title:r.title?r.title:"",icon:r.icon?r.icon:
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 26 28 68 3d 75 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 72 2e 62 61 63 6b 64 72 6f 70 29 3f 68 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 65 3a 65 7c 7c 69 28 5b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 5d 2c 6e 5b 22 6e 6f 2d 62 61 63 6b 64 72 6f 70 22 5d 29 2c 21 72 2e 62 61 63 6b 64 72 6f 70 26 26 72 2e 61 6c 6c 6f 77 4f 75 74 73 69 64 65 43 6c 69 63 6b 26 26 61 28 27 22 61 6c 6c 6f 77 4f 75 74 73 69 64 65 43 6c 69 63 6b 22 20 70 61 72 61 6d 65 74 65 72 20 72 65 71 75 69 72 65 73 20 60 62 61 63 6b 64 72 6f 70 60 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 60 74 72 75 65 60 27 29 2c 6f 3d 75 2c 28 63 3d 72 2e 70 6f 73 69 74 Data Ascii: &(h=u,"string"==typeof(e=r.backdrop)?h.style.background=e:e\|\|i([document.documentElement,document.body],n["no-backdrop"]),!r.backdrop&&r.allowOutsideClick&&a('"allowOutsideClick" parameter requires `backdrop` parameter to be set to `true`'),o=u,(c=r.posit
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 65 72 29 2c 69 2e 76 61 6c 75 65 3d 22 22 2c 69 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 69 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 29 2c 79 74 28 6e 2c 6e 2c 74 29 2c 6e 7d 3b 73 2e 72 61 64 69 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 2c 6e 7d 3b 73 2e 63 68 65 63 6b 62 6f 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 64 69 28 6c 28 29 2c 22 63 68 65 63 6b 62 6f 78 22 29 2c 75 3b 72 65 74 75 72 6e 20 72 2e 76 61 6c 75 65 3d 31 2c 72 2e 69 64 3d 6e 2e 63 68 65 63 6b 62 6f 78 2c 72 2e 63 68 65 63 6b 65 64 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 6e 70 75 74 56 61 6c 75 65 29 2c 75 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 Data Ascii: er),i.value="",i.disabled=!0,i.selected=!0,n.appendChild(i)),yt(n,n,t),n};s.radio=function(n){return n.textContent="",n};s.checkbox=function(t,i){var r=di(l(),"checkbox"),u;return r.value=1,r.id=n.checkbox,r.checked=Boolean(i.inputValue),u=t.querySelector
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 69 61 2d 69 6e 76 61 6c 69 64 22 29 2c 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 42 79 22 29 2c 77 28 74 2c 6e 2e 69 6e 70 75 74 65 72 72 6f 72 29 29 7d 2c 67 65 74 50 72 6f 67 72 65 73 73 53 74 65 70 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 64 6f 6d 43 61 63 68 65 2e 67 65 74 28 74 68 69 73 29 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 7d 2c 5f 6d 61 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 2c 73 3b 72 65 74 75 72 6e 20 63 65 28 65 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 2e 5f 64 65 73 74 72 6f 79 28 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 3d 74 68 69 73 2c 6f 3d 66 Data Ascii: ia-invalid"),t.removeAttribute("aria-describedBy"),w(t,n.inputerror))},getProgressSteps:function(){return u.domCache.get(this).progressSteps},_main:function(e){var o,s;return ce(e),t.currentInstance&&t.currentInstance._destroy(),t.currentInstance=this,o=f
2025-04-02 19:49:22 UTC	12174	IN	Data Raw: 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 37 35 65 6d 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 32 37 34 37 34 3b 63 6f 6c 6f 72 3a 23 66 32 37 34 37 34 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 20 2e 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 20 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f Data Ascii: y:flex;align-items:center;font-size:3.75em}.swal2-icon.swal2-error{border-color:#f27474;color:#f27474}.swal2-icon.swal2-error .swal2-x-mark{position:relative;flex-grow:1}.swal2-icon.swal2-error [class^=swal2-x-mark-line]{display:block;position:absolute;to

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	585	OUT	GET /bundles/js/angular?v=n4kY-0iRmoPktJw8f5AIsrld-pet1ESblIyCEjHylkU1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:21 UTC	352	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:21 GMT Last-Modified: Wed, 02 Apr 2025 19:49:21 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 192741
2025-04-02 19:49:21 UTC	16032	IN	Data Raw: 2f 2a 20 4d 69 6e 69 66 69 63 61 74 69 6f 6e 20 66 61 69 6c 65 64 2e 20 52 65 74 75 72 6e 69 6e 67 20 75 6e 6d 69 6e 69 66 69 65 64 20 63 6f 6e 74 65 6e 74 73 2e 0d 0a 28 31 38 34 2c 33 31 37 2d 33 32 34 29 3a 20 72 75 6e 2d 74 69 6d 65 20 65 72 72 6f 72 20 4a 53 31 30 31 39 3a 20 43 61 6e 27 74 20 68 61 76 65 20 27 62 72 65 61 6b 27 20 6f 75 74 73 69 64 65 20 6f 66 20 6c 6f 6f 70 3a 20 62 72 65 61 6b 20 61 0d 0a 20 2a 2f 0d 0a 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 37 2e 37 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 43 29 7b 27 75 73 65 20 73 74 72 69 63 74 Data Ascii: /* Minification failed. Returning unminified contents.(184,317-324): run-time error JS1019: Can't have 'break' outside of loop: break a // AngularJS v1.7.7 (c) 2010-2018 Google, Inc. http://angularjs.org License: MIT*/(function(C){'use strict
2025-04-02 19:49:21 UTC	16384	IN	Data Raw: 7b 76 61 72 20 64 3d 28 22 20 22 2b 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 6e 5c 74 5d 2f 67 2c 22 20 22 29 2c 63 3d 64 3b 72 28 62 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 55 28 61 29 3b 63 3d 63 2e 72 65 70 6c 61 63 65 28 22 20 22 2b 61 2b 22 20 22 2c 22 20 22 29 7d 29 3b 63 21 3d 3d 64 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 55 28 63 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 62 28 61 2c 62 29 7b 69 66 28 62 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 29 7b 76 61 72 20 64 3d 0a 28 22 20 22 2b 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 2b Data Ascii: {var d=(" "+(a.getAttribute("class")\|\|"")+" ").replace(/[\n\t]/g," "),c=d;r(b.split(" "),function(a){a=U(a);c=c.replace(" "+a+" "," ")});c!==d&&a.setAttribute("class",U(c))}}function Db(a,b){if(b&&a.setAttribute){var d=(" "+(a.getAttribute("class")\|\|"")+
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 4e 61 6d 65 3b 44 28 67 29 26 26 28 67 3d 67 2e 61 6e 69 6d 56 61 6c 29 3b 69 66 28 41 28 67 29 26 26 22 22 21 3d 3d 67 29 66 6f 72 28 3b 61 3d 6b 2e 65 78 65 63 28 67 29 3b 29 6e 3d 77 61 28 61 5b 32 5d 29 2c 58 28 62 2c 6e 2c 22 43 22 2c 65 2c 66 29 26 26 28 64 5b 6e 5d 3d 55 28 61 5b 33 5d 29 29 2c 67 3d 67 2e 73 75 62 73 74 72 28 61 2e 69 6e 64 65 78 2b 61 5b 30 5d 2e 6c 65 6e 67 74 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 61 3a 6e 61 28 62 2c 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 69 66 28 21 4f 61 29 62 72 65 61 6b 3b 46 28 61 2c 62 2c 64 2c 65 2c 66 29 7d 62 2e 73 6f 72 74 28 69 61 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 72 79 7b 76 61 72 20 66 Data Ascii: Name;D(g)&&(g=g.animVal);if(A(g)&&""!==g)for(;a=k.exec(g);)n=wa(a[2]),X(b,n,"C",e,f)&&(d[n]=U(a[3])),g=g.substr(a.index+a[0].length);break;case Pa:na(b,a.nodeValue);break;case 8:if(!Oa)break;F(a,b,d,e,f)}b.sort(ia);return b}function F(a,b,c,d,e){try{var f
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 20 61 3b 74 68 72 6f 77 20 4b 62 28 22 62 61 64 64 61 74 61 22 2c 61 2c 66 29 3b 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 78 64 28 61 29 7b 76 61 72 20 62 3d 54 28 29 2c 64 3b 41 28 61 29 3f 72 28 61 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 3b 76 61 72 20 65 3d 4b 28 55 28 61 2e 73 75 62 73 74 72 28 30 2c 64 29 29 29 3b 61 3d 55 28 61 2e 73 75 62 73 74 72 28 64 2b 31 29 29 3b 65 26 26 28 62 5b 65 5d 3d 62 5b 65 5d 3f 62 5b 65 5d 2b 22 2c 20 22 2b 61 3a 61 29 7d 29 3a 44 28 61 29 26 26 0a 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 76 61 72 20 66 3d 4b 28 64 29 2c 67 3d 55 28 61 29 3b 66 26 26 28 62 5b 66 5d 3d 62 5b 66 5d 3f 62 5b 66 5d 2b 22 Data Ascii: a;throw Kb("baddata",a,f);}}}return a}function xd(a){var b=T(),d;A(a)?r(a.split("\n"),function(a){d=a.indexOf(":");var e=K(U(a.substr(0,d)));a=U(a.substr(d+1));e&&(b[e]=b[e]?b[e]+", "+a:a)}):D(a)&&r(a,function(a,d){var f=K(d),g=U(a);f&&(b[f]=b[f]?b[f]+"
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 48 64 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 3d 3d 71 2e 49 64 65 6e 74 69 66 69 65 72 7c 7c 61 2e 74 79 70 65 3d 3d 3d 71 2e 4d 65 6d 62 65 72 45 78 70 72 65 73 73 69 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 64 28 61 29 7b 69 66 28 31 3d 3d 3d 61 2e 62 6f 64 79 2e 6c 65 6e 67 74 68 26 26 48 64 28 61 2e 62 6f 64 79 5b 30 5d 2e 65 78 70 72 65 73 73 69 6f 6e 29 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 71 2e 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 2c 6c 65 66 74 3a 61 2e 62 6f 64 79 5b 30 5d 2e 65 78 70 72 65 73 73 69 6f 6e 2c 72 69 67 68 74 3a 7b 74 79 70 65 3a 71 2e 4e 47 56 61 6c 75 65 50 61 72 61 6d 65 74 65 72 7d 2c 6f 70 65 72 61 74 6f 72 3a 22 3d 22 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 64 28 61 29 7b 74 68 69 73 2e 24 Data Ascii: Hd(a){return a.type===q.Identifier\|\|a.type===q.MemberExpression}function Id(a){if(1===a.body.length&&Hd(a.body[0].expression))return{type:q.AssignmentExpression,left:a.body[0].expression,right:{type:q.NGValueParameter},operator:"="}}function Jd(a){this.$
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 29 2e 75 73 65 72 41 67 65 6e 74 29 2c 67 3d 62 5b 30 5d 7c 7c 7b 7d 2c 6b 3d 67 2e 62 6f 64 79 26 26 67 2e 62 6f 64 79 2e 73 74 79 6c 65 2c 68 3d 21 31 2c 6c 3d 21 31 3b 6b 26 26 28 68 3d 21 21 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 69 6e 20 6b 7c 7c 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 22 69 6e 20 6b 29 2c 6c 3d 21 21 28 22 61 6e 69 6d 61 74 69 6f 6e 22 69 6e 20 6b 7c 7c 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 22 69 6e 20 6b 29 29 3b 72 65 74 75 72 6e 7b 68 69 73 74 6f 72 79 3a 21 28 21 63 7c 7c 0a 34 3e 65 7c 7c 66 29 2c 68 61 73 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 69 6e 70 75 74 22 3d 3d 3d 61 26 26 43 61 29 72 65 74 75 72 6e 21 31 3b 69 66 28 7a 28 64 5b 61 Data Ascii: .navigator\|\|{}).userAgent),g=b[0]\|\|{},k=g.body&&g.body.style,h=!1,l=!1;k&&(h=!!("transition"in k\|\|"webkitTransition"in k),l=!!("animation"in k\|\|"webkitAnimation"in k));return{history:!(!c\|\|4>e\|\|f),hasEvent:function(a){if("input"===a&&Ca)return!1;if(z(d[a
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 30 3c 62 7c 7c 70 5b 61 5d 29 70 5b 61 5d 3d 28 70 5b 61 5d 7c 7c 30 29 2b 62 2c 70 5b 61 5d 3d 3d 3d 2b 28 30 3c 62 29 26 26 63 2e 70 75 73 68 28 61 29 7d 29 3b 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 69 66 28 61 3d 3d 3d 0a 62 29 7b 76 61 72 20 63 3d 73 2c 63 3d 6c 28 63 26 26 63 2e 73 70 6c 69 74 28 22 20 22 29 2c 31 29 3b 68 2e 24 61 64 64 43 6c 61 73 73 28 63 29 7d 65 6c 73 65 20 63 3d 73 2c 63 3d 6c 28 63 26 26 63 2e 73 70 6c 69 74 28 22 20 22 29 2c 2d 31 29 2c 68 2e 24 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 3b 6e 3d 61 7d 76 61 72 20 70 3d 6b 2e 64 61 74 61 28 22 24 Data Ascii: ction l(a,b){var c=[];r(a,function(a){if(0<b\|\|p[a])p[a]=(p[a]\|\|0)+b,p[a]===+(0<b)&&c.push(a)});return c.join(" ")}function m(a){if(a===b){var c=s,c=l(c&&c.split(" "),1);h.$addClass(c)}else c=s,c=l(c&&c.split(" "),-1),h.$removeClass(c);n=a}var p=k.data("$
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 74 68 2c 62 3d 74 68 69 73 2e 24 24 68 61 73 68 2c 64 3d 79 65 28 74 68 69 73 2e 24 24 73 65 61 72 63 68 29 2c 62 3d 62 3f 0a 22 23 22 2b 68 63 28 62 29 3a 22 22 2c 61 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 2d 2d 3b 29 61 5b 63 5d 3d 68 63 28 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 29 3b 74 68 69 73 2e 24 24 75 72 6c 3d 61 2e 6a 6f 69 6e 28 22 2f 22 29 2b 28 64 3f 22 3f 22 2b 64 3a 22 22 29 2b 62 3b 74 68 69 73 2e 24 24 61 62 73 55 72 6c 3d 74 68 69 73 2e 24 24 6e 6f 72 6d 61 6c 69 7a 65 55 72 6c 28 74 68 69 73 2e 24 24 75 72 6c 29 3b 74 68 69 73 2e 24 24 75 72 6c 55 70 64 61 74 65 64 42 79 4c 6f 63 61 Data Ascii: nction(){for(var a=this.$$path,b=this.$$hash,d=ye(this.$$search),b=b?"#"+hc(b):"",a=a.split("/"),c=a.length;c--;)a[c]=hc(a[c].replace(/%2F/g,"/"));this.$$url=a.join("/")+(d?"?"+d:"")+b;this.$$absUrl=this.$$normalizeUrl(this.$$url);this.$$urlUpdatedByLoca
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 74 49 64 28 21 31 2c 61 2b 22 26 26 28 22 2b 74 68 69 73 2e 65 73 63 61 70 65 28 62 29 2b 22 20 69 6e 20 22 2b 61 2b 22 29 22 29 29 3b 72 65 74 75 72 6e 20 63 5b 64 5d 7d 2c 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2e 62 6f 64 79 2e 70 75 73 68 28 61 2c 22 3d 22 2c 62 2c 22 3b 22 29 2c 61 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 7c 7c 28 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 5b 61 5d 3d 74 68 69 73 2e 6e 65 78 74 49 64 28 21 30 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 Data Ascii: tId(!1,a+"&&("+this.escape(b)+" in "+a+")"));return c[d]},assign:function(a,b){if(a)return this.current().body.push(a,"=",b,";"),a},filter:function(a){this.state.filters.hasOwnProperty(a)\|\|(this.state.filters[a]=this.nextId(!0));return this.state.filters
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 2e 73 74 65 70 3d 6d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 2e 73 74 65 70 4d 69 73 6d 61 74 63 68 7d 3a 0a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 2e 24 69 73 45 6d 70 74 79 28 62 29 7c 7c 7a 28 73 29 7c 7c 65 65 28 62 2c 70 7c 7c 30 2c 73 29 7d 2c 67 28 22 73 74 65 70 22 2c 6c 29 29 7d 2c 63 68 65 63 6b 62 6f 78 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 2c 63 2c 65 2c 66 2c 67 2c 6b 29 7b 76 61 72 20 68 3d 66 65 28 6b 2c 61 2c 22 6e 67 54 72 75 65 56 61 6c 75 65 22 2c 64 2e 6e 67 54 72 75 65 56 61 6c 75 65 2c 21 30 29 2c 6c 3d 66 65 28 6b 2c 61 2c 22 6e 67 46 61 6c 73 65 56 61 6c 75 65 22 2c 64 2e 6e 67 46 61 6c 73 65 56 61 6c 75 65 2c 21 31 29 3b 62 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 Data Ascii: .step=m?function(){return!r.stepMismatch}:function(a,b){return c.$isEmpty(b)\|\|z(s)\|\|ee(b,p\|\|0,s)},g("step",l))},checkbox:function(a,b,d,c,e,f,g,k){var h=fe(k,a,"ngTrueValue",d.ngTrueValue,!0),l=fe(k,a,"ngFalseValue",d.ngFalseValue,!1);b.on("change",funct

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	585	OUT	GET /bundles/js/userApp?v=6clXiuabafqv8ECnXiuJJwgXqZY8eZPKxzdpnd89IvE1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:22 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 19:49:21 GMT Last-Modified: Wed, 02 Apr 2025 19:49:21 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 71251
2025-04-02 19:49:22 UTC	16033	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 2e 2f 70 75 6e 79 63 6f 64 65 22 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 49 50 76 36 22 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 53 65 63 6f 6e 64 4c 65 76 65 6c 44 6f 6d 61 69 6e 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 2e 2f 70 75 6e 79 63 6f 64 65 22 2c 22 2e 2f 49 50 76 36 22 2c 22 2e 2f 53 65 63 6f 6e 64 4c 65 76 65 6c 44 6f 6d 61 69 6e 73 22 5d 2c 74 29 3a 6e 2e 55 52 49 3d 74 28 6e 2e 70 75 6e 79 63 Data Ascii: (function(n,t){"object"==typeof module&&module.exports?module.exports=t(require("./punycode"),require("./IPv6"),require("./SecondLevelDomains")):"function"==typeof define&&define.amd?define(["./punycode","./IPv6","./SecondLevelDomains"],t):n.URI=t(n.punyc
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 28 75 2e 70 72 6f 74 6f 63 6f 6c 5f 65 78 70 72 65 73 73 69 6f 6e 29 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 50 72 6f 74 6f 63 6f 6c 20 22 27 2b 6e 2b 22 5c 22 20 63 6f 6e 74 61 69 6e 73 20 63 68 61 72 61 63 74 65 72 73 20 6f 74 68 65 72 20 74 68 61 6e 20 5b 41 2d 5a 30 2d 39 2e 2b 2d 5d 20 6f 72 20 64 6f 65 73 6e 27 74 20 73 74 61 72 74 20 77 69 74 68 20 5b 41 2d 5a 5d 22 29 3b 72 65 74 75 72 6e 20 69 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 74 29 7d 2c 66 2e 73 63 68 65 6d 65 3d 66 2e 70 72 6f 74 6f 63 6f 6c 2c 66 2e 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 72 74 73 2e 75 72 6e 3f 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 74 68 69 73 3a 28 76 6f 69 64 20 30 21 3d Data Ascii: (u.protocol_expression)))throw new TypeError('Protocol "'+n+"\" contains characters other than [A-Z0-9.+-] or doesn't start with [A-Z]");return it.call(this,n,t)},f.scheme=f.protocol,f.port=function(n,t){return this._parts.urn?void 0===n?"":this:(void 0!=
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 22 2c 22 54 68 65 20 70 61 67 65 20 6f 72 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 29 2c 75 2e 73 75 70 70 72 65 73 73 34 30 34 3d 21 31 29 2c 6e 2e 72 65 6a 65 63 74 28 66 29 7d 7d 7d 5d 29 3b 61 76 33 36 30 41 70 70 2e 63 6f 6e 74 72 6f 6c 6c 65 72 28 22 54 68 65 6d 65 43 74 6c 72 22 2c 5b 22 24 73 63 6f 70 65 22 2c 22 4d 61 73 74 65 72 53 76 63 22 2c 22 61 76 22 2c 22 48 65 6c 70 65 72 53 76 63 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 5f 5f 67 65 74 53 74 79 6c 65 73 68 65 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 54 68 65 6d 65 53 43 53 53 28 29 2e 74 68 65 6e 28 66 75 Data Ascii: ","The page or resource you are trying to access cannot be found","error"),u.suppress404=!1),n.reject(f)}}}]);av360App.controller("ThemeCtlr",["$scope","MasterSvc","av","HelperSvc",function(n,t){n.__getStylesheet=function(){return t.getThemeSCSS().then(fu
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 66 28 22 73 74 65 6d 22 29 3e 3d 30 3f 22 20 6d 62 2d 35 22 3a 22 20 6d 62 2d 30 22 29 2c 72 2e 24 73 75 62 6d 69 74 74 65 64 26 26 28 65 3d 72 5b 22 73 75 72 76 65 79 51 75 65 73 74 69 6f 6e 5f 22 2b 74 2e 4f 72 64 65 72 2b 22 5f 5f 69 6e 70 75 74 22 5d 2c 65 26 26 65 2e 24 69 6e 76 61 6c 69 64 26 26 28 75 2b 3d 22 20 62 67 2d 64 61 6e 67 65 72 2d 6c 69 67 68 74 22 29 29 2c 75 2e 69 6e 64 65 78 4f 66 28 22 62 67 2d 22 29 3c 30 26 26 28 75 2b 3d 66 5b 69 5d 2e 51 75 65 73 74 69 6f 6e 2e 53 63 61 6c 65 2e 53 63 61 6c 65 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 73 74 65 6d 22 29 3e 3d 30 7c 7c 66 5b 69 5d 2e 51 75 65 73 74 69 6f 6e 2e 53 63 61 6c 65 2e 53 63 61 6c 65 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: f("stem")>=0?" mb-5":" mb-0"),r.$submitted&&(e=r["surveyQuestion_"+t.Order+"__input"],e&&e.$invalid&&(u+=" bg-danger-light")),u.indexOf("bg-")<0&&(u+=f[i].Question.Scale.ScaleType.toLowerCase().indexOf("stem")>=0\|\|f[i].Question.Scale.ScaleType.toLowerCase
2025-04-02 19:49:22 UTC	6066	IN	Data Raw: 65 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6c 6f 67 28 22 42 61 63 6b 20 62 75 74 74 6f 6e 20 64 65 74 65 63 74 65 64 20 62 75 74 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 70 61 67 65 22 29 3b 6e 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 7d 2c 21 31 29 3b 6e 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 7d 2c 65 6e 61 62 6c 65 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: eBack:function(){var t=this;n.addEventListener("popstate",function(){t.log("Back button detected but disabled for this page");n.history.pushState(null,null,n.location.pathname)},!1);n.history.pushState(null,null,n.location.pathname)},enableBack:function()

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	647	OUT	GET /content/styles/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1 Host: av360.app Connection: keep-alive Origin: https://av360.app sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://av360.app/bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:22 UTC	280	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Last-Modified: Mon, 08 Apr 2019 09:14:40 GMT Accept-Ranges: bytes ETag: "00bd7eebedd41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 74256
2025-04-02 19:49:22 UTC	16104	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 22 10 00 0d 00 00 00 02 d8 48 00 01 21 b6 01 49 ba 9f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 12 11 08 0a 89 f6 44 87 e7 3b 01 36 02 24 03 9d 2c 0b 9d 30 00 04 20 05 8a 25 07 da 6d 5b 26 41 92 82 b0 b3 d5 5f e1 e0 df 56 65 c0 b8 d3 16 2d 3a 10 83 ee 80 d3 a0 97 27 b8 82 6d d3 6a 06 dd e1 78 a0 ca 7a 6d f6 ff ff ff ff 6f 4a 16 32 a6 f7 17 b8 24 ff 01 10 51 5b aa b6 d6 ba b5 6e 9b 51 ce c8 12 2f a6 3a 02 c5 54 6f 26 97 61 1c 1d 43 04 cb 0d 13 66 ec 7c 31 3b 23 94 81 ec 31 0b cd 28 69 21 6b 17 87 19 87 e3 09 2f 34 f8 de 1c 5a 6b cd be 92 cd 88 c8 88 c8 88 08 7a 8b 88 e8 60 30 42 29 f9 98 74 26 32 22 32 22 c2 a5 21 22 bc 93 e1 ea 57 b7 85 4c 46 89 ef 46 44 26 06 e3 9e d4 3e Data Ascii: wOF2"H!I?FFTM`D;6$,0 %m[&A_Ve-:'mjxzmoJ2$Q[nQ/:To&aCf\|1;#1(i!k/4Zkz`0B)t&2"2"!"WLFFD&>
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 8a ef 75 3c 0a 86 8a 52 1f 85 e6 14 80 a4 79 80 af 67 60 41 65 e9 f5 dc a1 b6 e6 49 b9 ff 87 17 df dd 34 04 3c f2 a8 6b 8c 96 04 0b 6d 3c b1 38 6b 12 14 78 f2 d8 16 52 b9 99 ed fe 34 ef 11 b6 26 4e 96 28 41 14 9f 47 76 35 13 02 f1 5c 2a 9f 28 34 f6 52 e1 17 0f e9 5a 40 76 72 d9 57 3a 4f f1 d1 83 c7 6a 74 39 a4 6d 76 da 83 90 45 17 b4 2d f1 33 2d aa 50 db 70 56 4a b9 91 75 7d 9f 99 9b fa a2 fd e2 05 d7 89 29 a3 bb 5e 8a 5f 8c 4e 46 1b ac 5f f0 2c 3a 18 6f f1 dc 1e 12 e4 cb d7 d2 0d 1f fb 61 12 54 b7 c5 73 ec b4 73 e8 86 82 b3 46 1d 79 56 49 8e b6 f1 ce 58 36 e2 0a 18 cb f3 44 4a d8 bc db 09 e9 d4 9b 67 f1 d1 ac 86 ad 8e 05 80 fd 58 e2 fc 68 e3 35 6b 4f c4 f4 d3 2b 27 32 ac f1 ff 0b 69 28 17 77 6e 7d db 28 72 cb 55 56 97 bc 86 79 e3 6e 3c 91 db 4c 9a bb 1a Data Ascii: u<Ryg`AeI4<km<8kxR4&N(AGv5\*(4RZ@vrW:Ojt9mvE-3-PpVJu})^_NF_,:oaTssFyVIX6DJgXh5kO+'2i(wn}(rUVyn<L
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 88 36 e0 d2 3d 07 66 1e bc f0 eb ad 67 f4 ae 3a 26 5c 73 84 f9 9a 0b 07 67 0e ac 75 29 20 44 fb e3 25 e1 12 c1 67 7f 00 58 3b 5a 3a 37 dd e3 49 5f c5 fa 5f 6f 3d 6b e3 aa 1b 1e b2 a2 e0 3c 58 f7 3d 90 96 74 e4 6a 33 1d 99 74 fa c2 2f 5c 34 23 41 64 be 7c d8 4e 23 aa c1 97 83 ae a4 74 40 4c 1a f0 8b 16 ce 00 88 c8 13 0e 1b 04 64 81 21 92 26 3c 27 9e 92 bd 67 90 f0 e3 e1 7c ce a4 de 1a 5a b1 8f 21 3b 8d 53 14 41 2d ae c9 ee 05 54 6f ea 10 8b 3b 1a c4 13 c5 ff aa bc 7d 1a 5c 13 5d 9f 7c c0 bc 95 70 57 aa 1d 6c 9d 0b 5e 9e e0 4f ff 85 ac 94 81 07 06 c6 a4 9b 37 25 51 da 28 c9 cd 5b 67 19 c6 cb fd a9 ac d8 d2 10 6d 6a 1a 49 a3 21 a5 a5 6a 4f 9f a9 47 ee 61 55 38 ae 01 89 e1 98 44 bd 4b d6 33 39 e9 4b 39 97 64 cb f5 c9 c9 6f dc ee 37 ad ee d7 ee 96 ca ff 5b dc Data Ascii: 6=fg:&\sgu) D%gX;Z:7I__o=k<X=tj3t/\4#Ad\|N#t@Ld!&<'g\|Z!;SA-To;}\]\|pWl^O7%Q([gmjI!jOGaU8DK39K9do7[
2025-04-02 19:49:22 UTC	16384	IN	Data Raw: 20 8a 04 5a ce 6b 0a 69 e2 2d 87 4a 76 1f 7a 8a 99 54 1d d3 4e f4 25 c5 ee 9e d3 1d 4b f6 25 b6 13 70 dd f2 b9 c7 2f 21 71 0a b0 45 cf 0f fb 09 96 e0 7d c9 2d aa 55 73 98 ca e7 c7 49 d3 4d 0f 4c 07 a5 f2 19 6b c9 49 0f 2e 1a d2 a5 67 a6 1b 64 33 a8 d7 24 d7 a8 0c 76 ed 80 35 bc 11 61 fc f8 a1 17 56 e5 47 f8 ad 3b ba fc e8 8b 7d 38 e2 fb 2e 96 ee 53 ba 10 b6 22 2d b1 39 7c cb 3f d5 16 c4 6a a8 22 65 84 91 51 04 a8 50 38 92 14 ce c2 5a 30 ac 79 2f ac 58 2f d3 8b 53 b5 62 0d 04 f6 09 4e 22 e7 04 fb d3 e2 9f 33 10 17 82 88 ad 91 4f 7c c2 96 42 80 ea ca 57 e6 6b ab b5 51 1f 11 07 f5 35 f3 6b ad 46 31 a2 47 7f 85 e5 2e b1 af a1 26 6c 34 a5 76 d5 b8 02 38 15 ac 6a dd 28 f0 b8 86 ff 21 58 50 27 dd 4c 41 d0 ae 12 58 e5 22 bb 72 fc a7 bb 76 41 bc 7f 32 e9 8e 5c 69 Data Ascii: Zki-JvzTN%K%p/!qE}-UsIMLkI.gd3$v5aVG;}8.S"-9\|?j"eQP8Z0y/X/SbN"3O\|BWkQ5kF1G.&l4v8j(!XP'LAX"rvA2\i
2025-04-02 19:49:22 UTC	9000	IN	Data Raw: 59 44 7e 1b 5b ca f7 8f 9d fe 6c b2 99 9b 71 f8 4c 2a 3f 4a 26 5e 8d 93 ce bf 58 d4 36 ab b5 b8 eb 59 ab 61 7a f6 ae f8 99 1b 61 72 77 c8 09 36 cc 7f 96 2b 84 8d 7b 12 53 3d c0 7f 17 4e 7a f6 92 68 14 16 8b a6 aa 50 73 56 48 8c 29 ff 70 ca 99 e7 b1 52 b5 4c 35 ac a2 02 a3 99 d1 11 7a 02 66 b2 f4 a0 69 d8 0b eb a7 34 61 0e 62 60 18 0a b0 95 ed 97 8a 7c 1e 00 37 ac f0 52 7b 33 60 d9 b0 23 dd cb 6b d8 74 96 23 7a 30 25 25 19 ff c1 77 0c b0 9d 9e f5 99 18 35 9d 58 67 d4 29 2d 0f 26 8e a3 93 dc 64 aa 24 c5 4b 94 5a aa d6 cc 7b 6b da e2 59 c1 3b 3d d0 55 0c 98 b5 71 bf 5c 91 dd 94 8d 83 eb 40 f6 4e f1 89 ac c3 e9 54 05 c2 8a 6f d3 d8 9e 42 59 29 b6 89 9d d9 d6 f1 59 9a de 38 67 22 59 07 04 6b 19 b8 af 09 eb f2 67 e2 85 cf 96 5f 68 77 b2 55 93 f4 40 ae 80 37 8d Data Ascii: YD~[lqL*?J&^X6Yazarw6+{S=NzhPsVH)pRL5zfi4ab`\|7R{3`#kt#z0%%w5Xg)-&d$KZ{kY;=Uq\@NToBY)Y8g"Ykg_hwU@7

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:21 UTC	572	OUT	GET /Areas/User/Scripts/av360.app.user.session.service.js HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:22 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 18 Oct 2022 05:56:35 GMT Accept-Ranges: bytes ETag: "1274c161b6e2d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:21 GMT Connection: close Content-Length: 8005
2025-04-02 19:49:22 UTC	8005	IN	Data Raw: ef bb bf 61 76 33 36 30 41 70 70 2e 66 61 63 74 6f 72 79 28 27 61 76 55 73 65 72 53 65 73 73 69 6f 6e 53 76 63 27 2c 20 5b 27 61 76 27 2c 20 27 24 64 6f 63 75 6d 65 6e 74 27 2c 20 27 24 77 69 6e 64 6f 77 27 2c 20 27 24 74 69 6d 65 6f 75 74 27 2c 20 27 24 69 6e 74 65 72 76 61 6c 27 2c 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 61 76 2c 20 24 64 2c 20 24 77 2c 20 24 74 2c 20 24 69 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 65 78 70 69 72 65 54 69 6d 65 6f 75 74 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6b 65 79 50 72 65 66 69 78 20 3d 20 27 61 76 55 73 65 72 2e 27 20 2b 20 61 76 2e 73 69 74 65 4e 61 6d 65 20 2b 20 27 2e 27 3b 0d 0a 20 20 20 20 76 61 72 20 64 61 74 65 45 78 70 69 72 65 4b 65 79 20 3d 20 6b 65 79 50 72 65 66 69 78 20 2b 20 27 64 61 74 65 45 78 70 69 Data Ascii: av360App.factory('avUserSessionSvc', ['av', '$document', '$window', '$timeout', '$interval', function (av, $d, $w, $t, $i) { var expireTimeout; var keyPrefix = 'avUser.' + av.siteName + '.'; var dateExpireKey = keyPrefix + 'dateExpi

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:25 UTC	575	OUT	GET /public/api/maintenance-window HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:25 UTC	278	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:25 GMT Connection: close Content-Length: 26
2025-04-02 19:49:25 UTC	26	IN	Data Raw: 7b 22 6d 61 69 6e 74 65 6e 61 6e 63 65 57 69 6e 64 6f 77 22 3a 6e 75 6c 6c 7d Data Ascii: {"maintenanceWindow":null}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:25 UTC	615	OUT	GET /Content/Images/Favicons/favicon.ico HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:25 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Sun, 08 Nov 2020 03:38:44 GMT Accept-Ranges: bytes ETag: "2737aca880b5d61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:25 GMT Connection: close Content-Length: 15406
2025-04-02 19:49:25 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 60 33 6d a6 5f 32 dd a7 5f 33 fb a5 5c 2f e8 a5 5c 2e ac a3 5c 2e 4e ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 5c 2f 67 a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff e3 cc bd ff ff ff ff be e0 c1 b1 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 5b 2d d6 a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff eb dc d2 ff fe fd fc ff ba Data Ascii: h6 (00 h&( `3m_2_3\/\.\.N\/g[-[-[-[-[-1[-[-[-[-[-[-

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:25 UTC	617	OUT	GET /tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:25 UTC	280	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:25 GMT Connection: close Content-Length: 7851
2025-04-02 19:49:25 UTC	7851	IN	Data Raw: 7b 22 76 61 72 69 61 62 6c 65 73 22 3a 22 24 70 72 69 6d 61 72 79 3a 20 23 34 37 36 34 42 34 3b 24 73 65 63 6f 6e 64 61 72 79 3a 20 23 30 30 30 30 30 30 3b 24 75 6e 73 65 6c 65 63 74 65 64 2d 69 6e 70 75 74 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 24 73 75 63 63 65 73 73 3a 20 23 34 37 36 34 62 34 3b 24 64 61 6e 67 65 72 3a 20 23 43 30 34 35 34 35 3b 22 2c 22 74 68 65 6d 65 22 3a 22 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 5c 72 5c 6e 20 2a 20 6d 69 78 69 6e 73 5c 72 5c 6e 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: {"variables":"$primary: #4764B4;$secondary: #000000;$unselected-input-color: #ffffff;$success: #4764b4;$danger: #C04545;","theme":"/******************************************************\r\n mixins\r\n **************************************************

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://av360.app/TMS/user/4

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Windows Analysis Report
https://av360.app/TMS/user/4

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:26 UTC	402	OUT	GET /public/api/maintenance-window HTTP/1.1 Host: av360.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:26 UTC	278	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:25 GMT Connection: close Content-Length: 26
2025-04-02 19:49:26 UTC	26	IN	Data Raw: 7b 22 6d 61 69 6e 74 65 6e 61 6e 63 65 57 69 6e 64 6f 77 22 3a 6e 75 6c 6c 7d Data Ascii: {"maintenanceWindow":null}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:26 UTC	625	OUT	GET /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:26 UTC	279	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:26 GMT Connection: close Content-Length: 511
2025-04-02 19:49:26 UTC	511	IN	Data Raw: 7b 22 73 75 72 76 65 79 22 3a 7b 22 53 69 74 65 4e 61 6d 65 22 3a 22 74 6d 73 22 2c 22 50 72 6f 6a 65 63 74 47 75 69 64 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 22 2c 22 50 72 69 6d 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 5f 5f 70 72 69 6d 61 72 79 2e 6a 70 67 22 2c 22 53 65 63 6f 6e 64 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 34 39 65 36 30 34 37 33 2d 63 64 65 35 2d 34 38 34 63 2d 61 63 30 34 2d 65 61 61 61 35 34 63 35 64 37 63 65 5f 5f 73 65 63 6f 6e 64 61 72 79 2e 6a 70 67 22 2c 22 50 72 6f 6a 65 63 74 54 79 70 65 22 3a 22 33 36 30 22 2c 22 4c 6f 67 69 6e 54 79 70 65 Data Ascii: {"survey":{"SiteName":"tms","ProjectGuid":"e58e38a1-9af1-47c9-bb58-5f670b752c62","PrimaryLogoName":"e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg","SecondaryLogoName":"49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg","ProjectType":"360","LoginType

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:26 UTC	423	OUT	GET /Scripts/sass.js/sass.worker.js HTTP/1.1 Host: av360.app Connection: keep-alive Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://av360.app/TMS/user/4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:26 UTC	284	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 11 Dec 2020 00:25:53 GMT Accept-Ranges: bytes ETag: "d53eb12f54cfd61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:26 GMT Connection: close Content-Length: 4605089
2025-04-02 19:49:26 UTC	16100	IN	Data Raw: 2f 2a 21 20 73 61 73 73 2e 6a 73 20 2d 20 76 30 2e 31 31 2e 31 20 28 66 32 38 36 34 33 36 29 20 2d 20 62 75 69 6c 74 20 32 30 31 39 2d 31 30 2d 32 30 0a 20 20 70 72 6f 76 69 64 69 6e 67 20 6c 69 62 73 61 73 73 20 33 2e 36 2e 32 20 28 34 64 61 37 63 34 62 64 29 0a 20 20 76 69 61 20 65 6d 73 63 72 69 70 74 65 6e 20 31 2e 33 38 2e 33 31 20 28 30 34 30 65 34 39 61 29 0a 20 2a 2f 0a 76 61 72 20 4d 6f 64 75 6c 65 3d 74 79 70 65 6f 66 20 4d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 4d 6f 64 75 6c 65 3a 7b 7d 3b 76 61 72 20 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 3d 7b 7d 3b 76 61 72 20 6b 65 79 3b 66 6f 72 28 6b 65 79 20 69 6e 20 4d 6f 64 75 6c 65 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 Data Ascii: /! sass.js - v0.11.1 (f286436) - built 2019-10-20 providing libsass 3.6.2 (4da7c4bd) via emscripten 1.38.31 (040e49a) /var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)
2025-04-02 19:49:26 UTC	16384	IN	Data Raw: 6f 64 65 2c 61 30 2c 61 31 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 2c 61 31 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6d 73 63 72 69 70 74 65 6e 5f 61 73 6d 5f 63 6f 6e 73 74 5f 69 69 69 69 28 63 6f 64 65 2c 61 30 2c 61 31 2c 61 32 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 2c 61 31 2c 61 32 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6d 73 63 72 69 70 74 65 6e 5f 61 73 6d 5f 63 6f 6e 73 74 5f 69 69 28 63 6f 64 65 2c 61 30 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 29 7d 5f 5f 41 54 49 4e 49 54 5f 5f 2e 70 75 73 68 28 7b 66 75 6e 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6c 6f 62 61 6c 43 74 6f 72 73 28 29 7d 7d 29 3b 6d 65 6d 6f 72 79 49 Data Ascii: ode,a0,a1){return ASM_CONSTS[code](a0,a1)}function _emscripten_asm_const_iiii(code,a0,a1,a2){return ASM_CONSTS[code](a0,a1,a2)}function _emscripten_asm_const_ii(code,a0){return ASM_CONSTS[code](a0)}__ATINIT__.push({func:function(){globalCtors()}});memoryI
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 41 77 41 41 41 41 67 75 41 41 41 43 41 41 41 41 51 43 38 41 41 41 49 41 41 41 42 49 4c 77 41 41 41 41 67 41 41 42 43 48 41 41 41 4b 38 77 41 41 45 49 63 41 41 4f 6a 79 41 41 44 6f 6b 77 41 41 48 66 4d 41 41 41 41 41 41 41 41 44 41 41 41 41 43 43 34 41 41 41 49 41 41 41 42 41 4c 77 41 41 41 67 41 41 41 48 67 76 41 41 41 41 43 41 41 41 45 49 63 41 41 47 4c 7a 41 41 44 6f 6b 77 41 41 68 50 4d 41 41 41 41 41 41 41 41 43 41 41 41 41 43 43 34 41 41 41 49 41 41 41 43 67 4c 77 41 41 41 41 67 41 41 42 43 48 41 41 44 4a 38 77 41 41 36 4a 4d 41 41 50 50 7a 41 41 41 41 41 41 41 41 41 67 41 41 41 41 67 75 41 41 41 43 41 41 41 41 6f 43 38 41 41 41 41 49 41 41 44 6f 6b 77 41 41 4f 50 51 41 41 41 41 41 41 41 41 43 41 41 41 41 43 43 34 41 41 41 49 41 41 41 44 6f 4c 77 41 Data Ascii: AwAAAAguAAACAAAAQC8AAAIAAABILwAAAAgAABCHAAAK8wAAEIcAAOjyAADokwAAHfMAAAAAAAADAAAACC4AAAIAAABALwAAAgAAAHgvAAAACAAAEIcAAGLzAADokwAAhPMAAAAAAAACAAAACC4AAAIAAACgLwAAAAgAABCHAADJ8wAA6JMAAPPzAAAAAAAAAgAAAAguAAACAAAAoC8AAAAIAADokwAAOPQAAAAAAAACAAAACC4AAAIAAADoLwA
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 77 77 41 41 41 4d 51 41 41 41 41 41 41 67 41 41 32 51 41 41 41 4d 59 41 41 41 44 48 41 41 41 41 79 41 41 41 41 4d 6b 41 41 41 44 57 41 51 41 41 31 77 45 41 41 4e 67 42 41 41 41 42 41 67 41 41 32 51 45 41 41 41 49 43 41 41 41 44 41 67 41 41 41 41 41 41 41 48 67 6c 41 41 43 4f 41 41 41 41 6a 77 41 41 41 41 45 41 41 41 44 61 41 41 41 41 41 67 41 41 41 41 4d 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 45 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 4d 41 41 41 44 62 41 41 41 41 33 41 41 41 41 47 6f 41 41 41 41 45 41 67 41 41 51 51 41 41 41 41 55 43 41 41 41 47 41 67 41 41 42 77 49 41 41 41 67 43 41 41 41 4a 41 67 41 41 43 67 49 41 41 44 38 41 41 41 42 41 41 41 41 41 48 77 41 41 41 45 45 41 41 41 43 75 41 41 41 41 77 41 41 41 41 4c 41 41 41 41 41 67 41 41 41 Data Ascii: wwAAAMQAAAAAAgAA2QAAAMYAAADHAAAAyAAAAMkAAADWAQAA1wEAANgBAAABAgAA2QEAAAICAAADAgAAAAAAAHglAACOAAAAjwAAAAEAAADaAAAAAgAAAAMAAAABAAAAAgAAAAEAAAABAAAAAgAAAAMAAADbAAAA3AAAAGoAAAAEAgAAQQAAAAUCAAAGAgAABwIAAAgCAAAJAgAACgIAAD8AAABAAAAAHwAAAEEAAACuAAAAwAAAALAAAAAgAAA
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 57 41 51 41 41 46 6b 45 41 41 44 37 41 51 41 41 78 51 45 41 41 50 77 42 41 41 42 4f 41 51 41 41 66 41 45 41 41 41 41 41 41 41 44 6f 4e 51 41 41 56 67 51 41 41 46 63 45 41 41 42 59 42 41 41 41 57 51 51 41 41 50 30 42 41 41 44 46 41 51 41 41 78 67 45 41 41 45 34 42 41 41 42 39 41 51 41 41 41 41 41 41 41 50 67 31 41 41 42 57 42 41 41 41 56 77 51 41 41 46 67 45 41 41 42 5a 42 41 41 41 2f 67 45 41 41 4d 55 42 41 41 44 47 41 51 41 41 54 67 45 41 41 48 34 42 41 41 41 41 41 41 41 41 43 44 59 41 41 46 59 45 41 41 42 58 42 41 41 41 57 41 51 41 41 46 6b 45 41 41 44 2f 41 51 41 41 78 51 45 41 41 4d 59 42 41 41 42 4f 41 51 41 41 66 77 45 41 41 41 41 41 41 41 41 59 4e 67 41 41 56 67 51 41 41 46 63 45 41 41 42 59 42 41 41 41 57 51 51 41 41 41 41 43 41 41 44 46 41 51 41 Data Ascii: WAQAAFkEAAD7AQAAxQEAAPwBAABOAQAAfAEAAAAAAADoNQAAVgQAAFcEAABYBAAAWQQAAP0BAADFAQAAxgEAAE4BAAB9AQAAAAAAAPg1AABWBAAAVwQAAFgEAABZBAAA/gEAAMUBAADGAQAATgEAAH4BAAAAAAAACDYAAFYEAABXBAAAWAQAAFkEAAD/AQAAxQEAAMYBAABOAQAAfwEAAAAAAAAYNgAAVgQAAFcEAABYBAAAWQQAAAACAADFAQA
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 5a 53 42 7a 5a 57 78 6c 59 33 52 76 63 69 42 74 64 58 4e 30 49 47 4a 6c 49 48 42 68 63 33 4e 6c 5a 43 42 6d 62 33 49 67 59 48 4e 6c 62 47 56 6a 64 47 39 79 4c 57 46 77 63 47 56 75 5a 43 63 41 4a 48 4e 6c 62 47 56 6a 64 47 39 79 63 7a 6f 67 62 6e 56 73 62 43 42 70 63 79 42 75 62 33 51 67 59 53 42 32 59 57 78 70 5a 43 42 7a 5a 57 78 6c 59 33 52 76 63 6a 6f 67 61 58 51 67 62 58 56 7a 64 43 42 69 5a 53 42 68 49 48 4e 30 63 6d 6c 75 5a 79 77 4b 59 53 42 73 61 58 4e 30 49 47 39 6d 49 48 4e 30 63 6d 6c 75 5a 33 4d 73 49 47 39 79 49 47 45 67 62 47 6c 7a 64 43 42 76 5a 69 42 73 61 58 4e 30 63 79 42 76 5a 69 42 7a 64 48 4a 70 62 6d 64 7a 49 47 5a 76 63 69 41 6e 63 32 56 73 5a 57 4e 30 62 33 49 74 59 58 42 77 5a 57 35 6b 4a 77 42 44 59 57 34 6e 64 43 42 68 63 48 42 Data Ascii: ZSBzZWxlY3RvciBtdXN0IGJlIHBhc3NlZCBmb3IgYHNlbGVjdG9yLWFwcGVuZCcAJHNlbGVjdG9yczogbnVsbCBpcyBub3QgYSB2YWxpZCBzZWxlY3RvcjogaXQgbXVzdCBiZSBhIHN0cmluZywKYSBsaXN0IG9mIHN0cmluZ3MsIG9yIGEgbGlzdCBvZiBsaXN0cyBvZiBzdHJpbmdzIGZvciAnc2VsZWN0b3ItYXBwZW5kJwBDYW4ndCBhcHB
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 63 33 56 77 63 47 39 79 64 47 56 6b 49 47 78 76 59 32 46 73 5a 53 42 6d 62 33 49 67 63 33 52 68 62 6d 52 68 63 6d 51 67 61 57 35 77 64 58 51 41 54 6c 4e 30 4d 31 39 66 4d 6a 45 77 58 31 39 7a 64 47 52 70 62 6d 4a 31 5a 6b 6c 33 52 55 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 45 77 58 31 39 7a 64 47 52 70 62 6d 4a 31 5a 6b 6c 6a 52 55 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 64 6a 62 32 78 73 59 58 52 6c 53 57 4e 46 52 51 42 4f 55 33 51 7a 58 31 38 79 4e 6d 78 76 59 32 46 73 5a 54 56 6d 59 57 4e 6c 64 45 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 64 6a 62 32 78 73 59 58 52 6c 53 58 64 46 52 51 41 6c 63 41 42 44 41 45 35 54 64 44 4e 66 58 7a 49 33 62 6e 56 74 58 32 64 6c 64 45 6c 6a 54 6c 4e 66 4d 54 6c 70 63 33 52 79 5a 57 46 74 59 6e 56 6d 58 32 6c 30 5a 58 4a 68 64 47 39 Data Ascii: c3VwcG9ydGVkIGxvY2FsZSBmb3Igc3RhbmRhcmQgaW5wdXQATlN0M19fMjEwX19zdGRpbmJ1Zkl3RUUATlN0M19fMjEwX19zdGRpbmJ1ZkljRUUATlN0M19fMjdjb2xsYXRlSWNFRQBOU3QzX18yNmxvY2FsZTVmYWNldEUATlN0M19fMjdjb2xsYXRlSXdFRQAlcABDAE5TdDNfXzI3bnVtX2dldEljTlNfMTlpc3RyZWFtYnVmX2l0ZXJhdG9
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 2c 38 35 2c 34 31 2c 34 33 2c 30 2c 31 32 30 2c 34 33 2c 38 2c 30 2c 31 30 32 2c 35 32 2c 32 2c 38 2c 31 32 30 2c 35 32 2c 36 2c 30 2c 38 32 2c 35 31 2c 32 2c 30 2c 31 30 36 2c 35 31 2c 35 31 2c 34 2c 31 39 2c 35 31 2c 35 31 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 31 2c 32 2c 30 2c 30 2c 31 32 31 2c 34 2c 39 2c 31 34 2c 32 35 2c 34 31 2c 34 2c 34 2c 38 32 2c 35 32 2c 34 31 2c 30 2c 32 36 2c 34 33 2c 35 32 2c 31 2c 38 35 2c 34 31 2c 34 33 2c 30 2c 31 32 30 2c 34 33 2c 34 2c 31 34 2c 31 30 32 2c 35 32 2c 34 2c 38 2c 31 32 30 2c 35 32 2c 32 2c 31 34 2c 38 32 2c 35 31 2c 34 2c 30 2c 31 30 36 2c 35 31 2c 35 31 2c 34 2c 31 39 2c 35 31 2c 35 31 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 31 2c 34 2c 30 2c 30 2c 31 31 39 2c 30 2c 32 35 32 2c 31 33 2c Data Ascii: ,85,41,43,0,120,43,8,0,102,52,2,8,120,52,6,0,82,51,2,0,106,51,51,4,19,51,51,46,135,52,4,0,51,2,0,0,121,4,9,14,25,41,4,4,82,52,41,0,26,43,52,1,85,41,43,0,120,43,4,14,102,52,4,8,120,52,2,14,82,51,4,0,106,51,51,4,19,51,51,46,135,52,4,0,51,4,0,0,119,0,252,13,
2025-04-02 19:49:27 UTC	284	IN	Data Raw: 2c 30 2c 32 35 2c 31 36 2c 31 36 2c 34 2c 32 35 2c 31 37 2c 31 37 2c 34 2c 35 34 2c 35 34 2c 31 36 2c 31 38 2c 32 38 2c 32 39 2c 30 2c 30 2c 38 32 2c 32 2c 33 2c 30 2c 38 35 2c 32 38 2c 32 2c 30 2c 31 32 31 2c 32 2c 37 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 30 37 2c 32 2c 38 2c 35 32 2c 32 35 2c 30 2c 32 2c 34 2c 38 32 2c 35 32 2c 30 2c 30 2c 32 35 2c 35 32 2c 35 32 2c 31 2c 38 35 2c 30 2c 35 32 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 33 32 2c 30 2c 30 2c 35 32 2c 30 2c 31 36 2c 34 31 2c 30 2c 30 2c 31 37 2c 32 37 2c 30 2c 32 35 2c 31 38 2c 31 36 2c 34 30 2c 31 31 36 2c 31 36 2c 31 37 2c 30 2c 32 35 2c 31 36 2c 31 36 2c 34 2c 32 35 2c 31 37 2c 31 37 2c 34 2c 35 34 2c 35 32 2c 31 36 2c 31 38 2c 31 30 34 2c 32 39 2c 30 2c 30 2c 31 2c 35 34 2c 31 31 38 2c 30 Data Ascii: ,0,25,16,16,4,25,17,17,4,54,54,16,18,28,29,0,0,82,2,3,0,85,28,2,0,121,2,7,0,1,52,0,0,107,2,8,52,25,0,2,4,82,52,0,0,25,52,52,1,85,0,52,0,1,52,0,0,132,0,0,52,0,16,41,0,0,17,27,0,25,18,16,40,116,16,17,0,25,16,16,4,25,17,17,4,54,52,16,18,104,29,0,0,1,54,118,0
2025-04-02 19:49:27 UTC	16384	IN	Data Raw: 2c 30 2c 30 2c 30 2c 34 31 2c 35 32 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 33 32 2c 30 2c 30 2c 35 32 2c 33 38 2c 35 32 2c 34 31 2c 31 2c 31 32 31 2c 35 32 2c 32 30 2c 30 2c 31 33 35 2c 32 2c 32 2c 30 2c 31 33 35 2c 35 32 2c 33 2c 30 2c 38 32 2c 34 2c 32 38 2c 30 2c 31 32 31 2c 34 2c 31 33 2c 30 2c 32 35 2c 34 31 2c 34 2c 34 2c 38 32 2c 35 32 2c 34 31 2c 30 2c 32 36 2c 34 32 2c 35 32 2c 31 2c 38 35 2c 34 31 2c 34 32 2c 30 2c 31 32 30 2c 34 32 2c 38 2c 30 2c 31 30 32 2c 35 32 2c 34 2c 38 2c 31 32 30 2c 35 32 2c 36 2c 30 2c 38 32 2c 35 34 2c 34 2c 30 2c 31 30 36 2c 35 34 2c 35 34 2c 34 2c 31 39 2c 35 34 2c 35 34 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 34 2c 34 2c 30 2c 30 2c 31 33 35 2c 35 32 2c 37 2c 30 2c 35 2c 30 2c 30 2c 30 2c 31 31 39 2c 30 2c Data Ascii: ,0,0,0,41,52,0,1,52,0,0,132,0,0,52,38,52,41,1,121,52,20,0,135,2,2,0,135,52,3,0,82,4,28,0,121,4,13,0,25,41,4,4,82,52,41,0,26,42,52,1,85,41,42,0,120,42,8,0,102,52,4,8,120,52,6,0,82,54,4,0,106,54,54,4,19,54,54,46,135,52,4,0,54,4,0,0,135,52,7,0,5,0,0,0,119,0,

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:27 UTC	667	OUT	GET /content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=941 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:27 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Tue, 12 Jul 2022 16:23:44 GMT Accept-Ranges: bytes ETag: "f4597ac1b96d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:26 GMT Connection: close Content-Length: 18129
2025-04-02 19:49:27 UTC	16115	IN	Data Raw: ff d8 ff e1 0f ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1d 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8f 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 36 3a 30 37 20 31 33 3a 33 37 3a 34 37 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 70 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CC (Windows)2019:06:07 13:37:47pd
2025-04-02 19:49:27 UTC	2014	IN	Data Raw: cf 71 35 ed 8a ed 6b ab 27 fb d7 6a 4e dc 8b 8a b4 89 fe 57 db ff 00 7e 24 d9 d6 3c ef e4 cb 7f 38 58 c4 82 6f ab 5f da 16 6b 4b 8a 72 5f 88 51 a3 94 75 f4 de 8b f6 7e 25 fb 59 c0 75 8d 17 54 d0 2f 5a c3 56 b7 6b 79 c6 e8 7a a4 8b fc f1 3f 47 4f f8 8f ed e6 fb 4d 97 1e a7 14 61 33 fb c8 0e 9b 4c 57 f1 c4 fd ee 8f 53 8b 2e 9b 2c a7 8c 5e 39 f4 e7 1d ff 00 86 41 34 f3 1f 93 ef b4 18 d3 51 b7 95 75 2d 0e 7f 8a db 55 b7 a3 27 13 f6 44 c1 6b e9 37 f9 5f dd b7 fc 26 12 e9 fa 8d fe 93 79 1e a1 a6 5c 3d b5 dc 5f 62 54 f0 ee ae a7 e1 74 3f b4 8f f0 e1 a7 96 fc d9 aa 79 66 47 5b 6e 37 3a 7c f5 17 7a 64 ff 00 14 12 86 d9 b6 35 f4 dc 8f db 5f f9 e8 af 87 97 7e 56 d2 3c cf 6b 26 b1 e4 36 22 68 c7 3b ef 2f 4a 40 9a 23 dc db 54 fc 49 fc a9 cb 83 7f ba df fd d5 97 f8 92 Data Ascii: q5k'jNW~$<8Xo_kKr_Qu~%YuT/ZVkyz?GOMa3LWS.,^9A4Qu-U'Dk7_&y\=_bTt?yfG[n7:\|zd5_~V<k&6"h;/J@#TI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:27 UTC	669	OUT	GET /content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:27 UTC	270	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Jan 2021 21:24:16 GMT Accept-Ranges: bytes ETag: "72f977c53bf0d61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:26 GMT Connection: close Content-Length: 14006
2025-04-02 19:49:27 UTC	14006	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0f 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 0a 52 65 73 6f 6c 75 74 69 6f 6e 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 18 46 58 20 47 6c 6f 62 61 6c 20 4c 69 67 68 74 69 6e 67 20 41 6e 67 6c 65 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 12 46 58 20 47 6c 6f 62 61 6c 20 41 6c 74 69 74 75 64 65 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 0b 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 0e 43 6f 70 79 72 69 67 68 74 20 46 6c 61 67 00 00 00 00 01 00 00 38 42 49 4d 27 10 14 4a 61 70 61 6e 65 73 65 20 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 Data Ascii: JFIFHHPhotoshop 3.08BIMResolutionHH8BIMFX Global Lighting Anglex8BIMFX Global Altitude8BIMPrint Flags8BIMCopyright Flag8BIM'Japanese Print Flags8BI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:27 UTC	462	OUT	GET /content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=941 HTTP/1.1 Host: av360.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:28 UTC	270	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Jan 2021 21:24:16 GMT Accept-Ranges: bytes ETag: "72f977c53bf0d61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:28 GMT Connection: close Content-Length: 14006
2025-04-02 19:49:28 UTC	14006	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0f 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 0a 52 65 73 6f 6c 75 74 69 6f 6e 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 18 46 58 20 47 6c 6f 62 61 6c 20 4c 69 67 68 74 69 6e 67 20 41 6e 67 6c 65 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 12 46 58 20 47 6c 6f 62 61 6c 20 41 6c 74 69 74 75 64 65 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 0b 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 0e 43 6f 70 79 72 69 67 68 74 20 46 6c 61 67 00 00 00 00 01 00 00 38 42 49 4d 27 10 14 4a 61 70 61 6e 65 73 65 20 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 Data Ascii: JFIFHHPhotoshop 3.08BIMResolutionHH8BIMFX Global Lighting Anglex8BIMFX Global Altitude8BIMPrint Flags8BIMCopyright Flag8BIM'Japanese Print Flags8BI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 19:49:34 UTC	704	OUT	POST /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/login HTTP/1.1 Host: av360.app Connection: keep-alive Content-Length: 36 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://av360.app Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/user/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 19:49:34 UTC	36	OUT	Data Raw: 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 31 32 33 34 22 2c 22 50 61 73 73 77 6f 72 64 22 3a 22 31 32 33 22 7d Data Ascii: {"Username":"1234","Password":"123"}
2025-04-02 19:49:35 UTC	299	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 19:49:35 GMT Connection: close Content-Length: 4697
2025-04-02 19:49:35 UTC	4697	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 41 6e 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 45 78 63 65 70 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 75 73 65 72 6e 61 6d 65 20 6f 72 20 70 61 73 73 77 6f 72 64 20 65 6e 74 65 72 65 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 22 2c 22 45 78 63 65 70 74 69 6f 6e 54 79 70 65 22 3a 22 41 56 33 36 30 2e 53 65 72 76 69 63 65 73 2e 41 56 33 36 30 45 72 72 6f 72 22 2c 22 53 74 61 63 6b 54 72 61 63 65 22 3a 22 20 20 20 61 74 20 41 56 33 36 30 2e 57 65 62 2e 41 72 65 61 73 2e 55 73 65 72 2e 43 6f 6e 74 72 6f 6c 6c 65 72 73 2e 55 73 65 72 41 70 69 43 6f 6e 74 72 6f 6c 6c 65 72 2e 4c 6f 67 69 6e 28 53 74 72 69 6e 67 20 73 69 74 65 4e 61 6d 65 2c 20 53 74 72 69 6e 67 20 70 47 75 69 64 2c Data Ascii: {"Message":"An error has occurred.","ExceptionMessage":"The username or password entered is incorrect.","ExceptionType":"AV360.Services.AV360Error","StackTrace":" at AV360.Web.Areas.User.Controllers.UserApiController.Login(String siteName, String pGuid,

Target ID:	0
Start time:	15:49:15
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	1
Start time:	15:49:16
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,18087654244096150284,8597391435286391125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	15:49:17
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://av360.app/TMS/user/4"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true