Edit tour

Windows Analysis Report
https://av360.app/TMS/User/4

Overview

General Information

Sample URL:	https://av360.app/TMS/User/4
Analysis ID:	1655037
Infos:

Detection

Score:	2
Range:	0 - 100
Confidence:	80%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,7140368805386625615,13894732276107661645,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://av360.app/TMS/User/4" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/login HTTP/1.1Host: av360.appConnection: keep-aliveContent-Length: 45sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://av360.appSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://av360.app/TMS/User/4Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:02:27 GMTConnection: closeContent-Length: 4316
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:02:27 GMTConnection: closeContent-Length: 4318
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:03:06 GMTConnection: closeContent-Length: 4316
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:03:07 GMTConnection: closeContent-Length: 4318
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:03:13 GMTConnection: closeContent-Length: 4314
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Wed, 02 Apr 2025 20:03:13 GMTConnection: closeContent-Length: 4316

Source: chromecache_120.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_120.1.dr	String found in binary or memory: http://errors.angularjs.org/1.7.7/
Source: chromecache_132.1.dr	String found in binary or memory: http://www.2ality.com/2014/05/current-script.html
Source: chromecache_128.1.dr	String found in binary or memory: https://av360.app/TMS/User/4
Source: chromecache_134.1.dr, chromecache_121.1.dr, chromecache_126.1.dr, chromecache_119.1.dr, chromecache_98.1.dr	String found in binary or memory: https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur
Source: chromecache_116.1.dr	String found in binary or memory: https://av360.app/tms/user/list-surveys/e58e38a1-9af1-47c9-bb58-5f670b752c62/all
Source: chromecache_83.1.dr	String found in binary or memory: https://av360.app/tms/user/take-survey/e58e38a1-9af1-47c9-bb58-5f670b752c62/3beea62e-999a-4b78-bbe2-
Source: chromecache_93.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_93.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_134.1.dr, chromecache_121.1.dr, chromecache_126.1.dr, chromecache_116.1.dr, chromecache_128.1.dr, chromecache_119.1.dr, chromecache_98.1.dr, chromecache_83.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSw
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVA
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVM
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQ
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVw
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/issues/33
Source: chromecache_108.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/issues/72#issuecomment-263916386
Source: chromecache_132.1.dr	String found in binary or memory: https://github.com/medialize/sass.js/pull/32#issuecomment-103142214
Source: chromecache_93.1.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_134.1.dr, chromecache_121.1.dr, chromecache_126.1.dr, chromecache_116.1.dr, chromecache_128.1.dr, chromecache_119.1.dr, chromecache_98.1.dr, chromecache_83.1.dr	String found in binary or memory: https://surveyconnect.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443

Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.17:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.200.66:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49890 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6964_919963365

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6964_919963365

Jump to behavior

Source: classification engine

Classification label: clean2.win@22/102@6/3

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,7140368805386625615,13894732276107661645,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://av360.app/TMS/User/4"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,7140368805386625615,13894732276107661645,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://av360.app/TMS/User/4	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=5	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/landing	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0	0%	Avira URL Cloud	safe
https://av360.app/content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=5	0%	Avira URL Cloud	safe
https://av360.app/content/styles/fonts/fontawesome/fa-regular-400.woff2	0%	Avira URL Cloud	safe
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.SecondaryLogoName%7D%7D?v=5	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01	0%	Avira URL Cloud	safe
http://www.2ality.com/2014/05/current-script.html	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/sessions/3beea62e-999a-4b78-bbe2-b421eb9ed530/surveys/6710?page=1	0%	Avira URL Cloud	safe
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/sessions/3beea62e-999a-4b78-bbe2-b421eb9ed530/replace-texts	0%	Avira URL Cloud	safe
https://av360.app/bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1	0%	Avira URL Cloud	safe
https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41	0%	Avira URL Cloud	safe
https://av360.app/bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1	0%	Avira URL Cloud	safe
https://av360.app/Areas/User/Scripts/av360.app.user.session.service.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.251.40.228	true	false		high
av360.app	52.38.200.66	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/landing	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://av360.app/content/styles/fonts/fontawesome/fa-regular-400.woff2	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false		high
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.SecondaryLogoName%7D%7D?v=5	false	Avira URL Cloud: safe	unknown
https://av360.app/content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=5	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false		high
https://av360.app/content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=5	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/sessions/3beea62e-999a-4b78-bbe2-b421eb9ed530/replace-texts	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://av360.app/tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/sessions/3beea62e-999a-4b78-bbe2-b421eb9ed530/surveys/6710?page=1	false	Avira URL Cloud: safe	unknown
https://av360.app/tms/user/take-survey/e58e38a1-9af1-47c9-bb58-5f670b752c62/3beea62e-999a-4b78-bbe2-b421eb9ed530?pId=6710	false		unknown
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://av360.app/bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false		high
https://av360.app/TMS/User/4	false		unknown
https://av360.app/bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://av360.app/bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://av360.app/Areas/User/Scripts/av360.app.user.session.service.js	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false		high
https://av360.app/bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_93.1.dr	false		high
http://www.2ality.com/2014/05/current-script.html	chromecache_132.1.dr	false	Avira URL Cloud: safe	unknown
https://av360.app/not-found?404;https://av360.app:443/content/images/site%20logos/%7B%7B__currentSur	chromecache_134.1.dr, chromecache_121.1.dr, chromecache_126.1.dr, chromecache_119.1.dr, chromecache_98.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
52.38.200.66	av360.app	United States		16509	AMAZON-02US	false
142.251.40.228	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1655037
Start date and time:	2025-04-02 22:01:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://av360.app/TMS/User/4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/102@6/3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.238, 172.253.122.84, 142.251.41.3, 142.250.81.238, 142.250.80.110, 142.251.40.170, 142.250.80.99, 142.251.40.174, 142.250.65.202, 142.250.72.106, 142.251.40.234, 142.250.65.170, 142.250.65.234, 142.251.35.170, 142.251.40.202, 142.250.81.234, 142.250.64.106, 142.251.32.106, 142.251.41.10, 142.250.80.10, 142.251.40.106, 142.251.40.138, 142.250.64.74, 142.251.40.206, 172.217.165.142, 142.250.65.174, 142.251.40.195, 142.251.32.110, 172.253.62.84, 142.251.40.238, 142.250.69.78, 142.251.16.84, 20.12.23.50, 184.31.69.3
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, otelrules.svc.static.microsoft, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://av360.app/TMS/User/4

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	4.844284171247168
Encrypted:	false
SSDEEP:	96:OzByAD4ROeXxierITAGK4d6iXuLkmlOdcb7S+3I:KyA6OevITAIdXy/lOdMeu
MD5:	5F96BDCF244581F44DE6CB2F9EDF99EB
SHA1:	FCA703A9E58282B0AFECA75B7148915E68B0C5F0
SHA-256:	8716B363FD0939163308E394649EF1ED99B1BDFBDF9667824C533283F0DFE8AB
SHA-512:	F2AC53C4040BC80228F9CB1E55C03709478C22AE5AFF340EA4FADCFA50CCDE9BF1723321D5FBBDE7E7A993DB92BC410A319AD4848AEF840B3802704AF4EF7670
Malicious:	false
Reputation:	low
URL:	https://av360.app/Content/Images/Favicons/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ..............................`3m._2._3..\/.\...\.N.....................................\/g.[-..[-..[-..[-..[-...........1.............................[-.[-..[-..[-..[-..[-...........`..[.{.........................[-..[-..[-..[-..[-..[-..`4..nE..[-..[-..[-..U...................Z,..Y,..Y,..Y,..Y,..Y,..e;..~..Y,..Y,..Y,..Y+..................R(.R(..R(..R(..R(..R(..jF.....R(..R(..R(..R(..Q)q.............L&..K%..K%..K%..K%..K%..vX......tW..K%..K%..K%..K%..J"-.........B!..D"..D"..D"..D"..D"...v.........R3..D"..D"..D"..E!.............{>..{=..{=..{=..{=................\|?!.{=..{=..{=..z=.C........m=..q6..p6..p6..p6...........[E.......\|.p6..p6..p6..q6..............i0.Kh/........v.........l5..........h0..g/..g/..g0..U...............o?.u.........x.....^).........._+..](..](..](..Z%."...................p_1".S!..S!..nC6.........S!..S!..S!..S!..U$.*....................Z+ XtOD.aX.........c;1.I...I...I...J...F.............

Source: https://av360.app/TMS/User/4	HTTP Parser: No <meta name="copyright".. found
Source: https://av360.app/TMS/User/4	HTTP Parser: No <meta name="copyright".. found
Source: https://av360.app/TMS/User/4	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40

Source: global traffic	DNS traffic detected: DNS query: av360.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 22:02:26.501627922 CEST	53	63168	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:26.517576933 CEST	53	65228	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:27.045260906 CEST	61620	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:27.045474052 CEST	52948	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:27.054554939 CEST	53	61243	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:27.149441004 CEST	53	61620	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:27.223016977 CEST	53	57866	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:27.226672888 CEST	53	52948	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:28.143698931 CEST	53	65245	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:31.157737017 CEST	50949	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:31.157882929 CEST	53224	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:31.260299921 CEST	53	50949	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:31.260373116 CEST	53	53224	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:31.676693916 CEST	53	61389	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:32.315377951 CEST	53197	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:32.315563917 CEST	62146	53	192.168.2.17	1.1.1.1
Apr 2, 2025 22:02:32.467848063 CEST	53	62146	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:32.485272884 CEST	53	53197	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:44.323482037 CEST	53	54012	1.1.1.1	192.168.2.17
Apr 2, 2025 22:02:53.852330923 CEST	53	59494	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:03.104485035 CEST	53	50071	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:26.176443100 CEST	53	56784	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:26.420928001 CEST	53	60496	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:28.687007904 CEST	53	55778	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:29.594712019 CEST	53	62286	1.1.1.1	192.168.2.17
Apr 2, 2025 22:03:45.800343037 CEST	138	138	192.168.2.17	192.168.2.255
Apr 2, 2025 22:03:56.879077911 CEST	53	61354	1.1.1.1	192.168.2.17
Apr 2, 2025 22:04:30.700434923 CEST	53	57363	1.1.1.1	192.168.2.17

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:27 UTC	669	OUT	GET /TMS/User/4 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	268	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 19453
2025-04-02 20:02:28 UTC	16116	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 3c 74 69 74 6c 65 3e 54 4d 53 20 7c 20 4c 6f 67 69 6e 20 7c 20 41 63 74 69 76 65 56 69 65 77 20 33 36 30 20 62 79 20 53 75 72 76 65 79 43 6f 6e 6e 65 63 74 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"> <title>TMS \| Login \| ActiveView 360 by SurveyConnect</title><meta name="descript
2025-04-02 20:02:28 UTC	3337	IN	Data Raw: 27 73 75 72 76 65 79 27 29 7d 7d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 77 36 30 30 22 20 6e 67 2d 69 66 3d 22 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 4e 61 6d 65 20 7c 7c 20 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 45 6d 61 69 6c 20 7c 7c 20 5f 5f 63 75 72 72 65 6e 74 53 75 72 76 65 79 2e 50 72 6f 6a 65 63 74 43 6f 6e 74 61 63 74 50 68 6f 6e 65 22 3e 3c 75 3e 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 43 6f 6e 74 61 63 74 3c 2f 75 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: 'survey')}} administrator. <div class="font-w600" ng-if="__currentSurvey.ProjectContactName \|\| __currentSurvey.ProjectContactEmail \|\| __currentSurvey.ProjectContactPhone"><u>Administrator Contact</u></div> <ul>

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:28 UTC	598	OUT	GET /bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:28 GMT Last-Modified: Wed, 02 Apr 2025 20:02:28 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 454211
2025-04-02 20:02:28 UTC	16039	IN	Data Raw: 2a 2c 0d 0a 2a 3a 3a 62 65 66 6f 72 65 2c 0d 0a 2a 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0d 0a 7d 0d 0a 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 Data Ascii: ,::before,*::after { box-sizing: border-box;}html { font-family: sans-serif; line-height: 1.15; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0, 0, 0, 0);}article, aside, figcaption, figure, footer, hea
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 2e 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 32 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 2e 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 33 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 34 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 35 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 6d 64 2d 36 20 7b 0d 0a 20 20 20 20 6d 61 Data Ascii: margin-left: 8.33333%; } .offset-md-2 { margin-left: 16.66667%; } .offset-md-3 { margin-left: 25%; } .offset-md-4 { margin-left: 33.33333%; } .offset-md-5 { margin-left: 41.66667%; } .offset-md-6 { ma
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 34 38 2c 20 31 39 39 2c 20 31 34 31 2c 20 30 2e 32 35 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 2c 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 2c 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 Data Ascii: :focus { border-color: #30c78d; box-shadow: 0 0 0 0.2rem rgba(48, 199, 141, 0.25);}.was-validated .custom-select:valid, .custom-select.is-valid { border-color: #30c78d;}.was-validated .custom-select:valid:focus, .custom-select.is-vali
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 20 7b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 34 38 2c 20 31 39 39 2c 20 31 34 31 2c 20 30 2e 35 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 64 69 73 61 62 6c 65 64 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 30 63 37 38 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d Data Ascii: lor: #30c78d;}.btn-outline-success:focus, .btn-outline-success.focus { box-shadow: 0 0 0 0.2rem rgba(48, 199, 141, 0.5);}.btn-outline-success.disabled, .btn-outline-success:disabled { color: #30c78d; background-color: transparent;}
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 33 37 35 72 65 6d 20 30 2e 37 35 72 65 6d 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 34 33 61 34 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: nput-group-append { margin-left: -1px;}.input-group-text { display: flex; align-items: center; padding: 0.375rem 0.75rem; margin-bottom: 0; font-size: 1rem; font-weight: 400; line-height: 1.5; color: #343a40; text-align
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 2e 32 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 31 37 39 64 36 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 31 66 34 66 35 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 35 31 37 39 64 36 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 20 2e 70 61 67 65 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 64 62 35 62 64 3b 0d 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: .25rem;}.page-item.active .page-link { z-index: 3; color: #5179d6; background-color: #f1f4f5; border-color: #5179d6;}.page-item.disabled .page-link { color: #adb5bd; pointer-events: none; cursor: auto; background-color:
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 20 33 35 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 35 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 70 61 64 64 69 6e 67 2d 62 6f 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 32 35 72 65 6d 20 30 2e 37 35 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 32 35 72 65 6d 3b 0d Data Ascii: width: 350px; font-size: 0.875rem; background-color: rgba(255, 255, 255, 0.85); background-clip: padding-box; border: 1px solid rgba(0, 0, 0, 0.1); box-shadow: 0 0.25rem 0.75rem rgba(0, 0, 0, 0.1); opacity: 0; border-radius: 0.25rem;
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 74 61 62 6c 65 2d 72 6f 77 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 72 6f 77 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 74 61 62 6c 65 2d 63 65 6c 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: le !important;}.d-table-row { display: table-row !important;}.d-table-cell { display: table-cell !important;}.d-flex { display: flex !important;}.d-inline-flex { display: inline-flex !important;}@media (min-width:
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 6c 65 66 74 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 72 69 67 68 74 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6c 6f 61 74 2d 78 6c 2d 6e 6f 6e 65 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 75 73 65 72 2d 73 65 6c 65 63 74 2d 61 6c 6c 20 7b 0d 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a Data Ascii: important; }}@media (min-width: 1200px) { .float-xl-left { float: left !important; } .float-xl-right { float: right !important; } .float-xl-none { float: none !important; }}.user-select-all { user-select:
2025-04-02 20:02:28 UTC	16384	IN	Data Raw: 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 74 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 79 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 72 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 78 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 62 2d 73 6d 2d 34 2c 0d 0a 20 20 2e 70 79 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 Data Ascii: 1rem !important; } .p-sm-4 { padding: 1.5rem !important; } .pt-sm-4, .py-sm-4 { padding-top: 1.5rem !important; } .pr-sm-4, .px-sm-4 { padding-right: 1.5rem !important; } .pb-sm-4, .py-sm-4 { padding-b

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:28 UTC	606	OUT	GET /bundles/css/OneUI_Plugins?v=8cyG9EuB8sNS6QhFTSPjnXx8-Y_3_wX9m3Tu9zIs7lU1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	344	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:28 GMT Last-Modified: Wed, 02 Apr 2025 20:02:28 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 24574
2025-04-02 20:02:28 UTC	16040	IN	Data Raw: 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 2e 36 32 35 65 6d 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 2e 36 32 35 65 6d 20 23 64 39 64 39 64 39 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 68 65 61 64 65 72 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 74 69 Data Ascii: .swal2-popup.swal2-toast{flex-direction:row;align-items:center;width:auto;padding:.625em;overflow-y:hidden;background:#fff;box-shadow:0 0 .625em #d9d9d9}.swal2-popup.swal2-toast .swal2-header{flex-direction:row;padding:0}.swal2-popup.swal2-toast .swal2-ti
2025-04-02 20:02:28 UTC	8534	IN	Data Raw: 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 77 69 64 74 68 3a 32 2e 35 65 6d 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 2d 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 30 38 35 64 36 7d 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 5d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 73 77 61 6c 32 2d 73 68 6f 77 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 73 68 6f 77 20 2e 33 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 73 68 6f 77 20 2e 33 73 7d 2e 73 77 61 6c 32 2d 68 69 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 68 69 64 65 20 2e 31 35 73 20 66 6f 72 77 61 72 64 73 3b 61 6e Data Ascii: 0;flex-shrink:0;width:2.5em;height:.4em;margin:0 -1px;background:#3085d6}[class^=swal2]{-webkit-tap-highlight-color:transparent}.swal2-show{-webkit-animation:swal2-show .3s;animation:swal2-show .3s}.swal2-hide{-webkit-animation:swal2-hide .15s forwards;an

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:28 UTC	694	OUT	GET /content/images/site%20logos/%7B%7B__currentSurvey.SiteName%7D%7D/%7B%7B__currentSurvey.PrimaryLogoName%7D%7D?v=769 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	274	IN	HTTP/1.1 404 Not Found Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 4316
2025-04-02 20:02:28 UTC	4316	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 20 20 3c 21 2d 2d 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 63 6f 6e 73 20 63 61 6e 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 79 6f 75 72 20 6f 77 6e 2c 20 74 68 65 79 20 61 72 65 20 75 73 65 64 20 62 79 20 64 65 73 6b 74 6f 70 20 61 6e 64 20 6d 6f 62 69 6c 65 20 62 72 6f 77 73 65 72 73 20 2d 2d 3e 0d 0a 20 20 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 Data Ascii: <!DOCTYPE html><html><head> ... The following icons can be replaced with your own, they are used by desktop and mobile browsers --> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fi

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:28 UTC	543	OUT	GET /Scripts/sass.js/sass.js HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 11 Dec 2020 00:25:53 GMT Accept-Ranges: bytes ETag: "16e8ae2f54cfd61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 5578
2025-04-02 20:02:28 UTC	5578	IN	Data Raw: 2f 2a 21 20 73 61 73 73 2e 6a 73 20 2d 20 76 30 2e 31 31 2e 31 20 28 66 32 38 36 34 33 36 29 20 2d 20 62 75 69 6c 74 20 32 30 31 39 2d 31 30 2d 32 30 0a 20 20 70 72 6f 76 69 64 69 6e 67 20 6c 69 62 73 61 73 73 20 33 2e 36 2e 32 20 28 34 64 61 37 63 34 62 64 29 0a 20 20 76 69 61 20 65 6d 73 63 72 69 70 74 65 6e 20 31 2e 33 38 2e 33 31 20 28 30 34 30 65 34 39 61 29 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 20 20 7d 20 65 6c Data Ascii: /! sass.js - v0.11.1 (f286436) - built 2019-10-20 providing libsass 3.6.2 (4da7c4bd) via emscripten 1.38.31 (040e49a) /(function (root, factory) { 'use strict'; if (typeof define === 'function' && define.amd) { define([], factory); } el

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:28 UTC	587	OUT	GET /bundles/js/site-wide?v=jid0BIS-ccFwiQ9qShU2kEyjaMPMmMvvre9E77fl-_I1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:28 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:28 GMT Last-Modified: Wed, 02 Apr 2025 20:02:28 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:27 GMT Connection: close Content-Length: 17859
2025-04-02 20:02:28 UTC	16033	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 7c 7c 74 68 69 73 7c 7c 7b 7d 2c 67 74 3d 73 2e 5f 2c 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 77 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 6e 75 6c 6c 2c 6e 69 3d 61 2e 70 75 73 68 2c 68 3d 61 2e 73 6c 69 63 65 2c 63 3d 77 2e 74 6f 53 74 Data Ascii: !function(){var s="object"==typeof self&&self.self===self&&self\|\|"object"==typeof global&&global.global===global&&global\|\|this\|\|{},gt=s._,a=Array.prototype,w=Object.prototype,rt="undefined"!=typeof Symbol?Symbol.prototype:null,ni=a.push,h=a.slice,c=w.toSt
2025-04-02 20:02:28 UTC	1826	IN	Data Raw: 74 3d 2f 28 2e 29 5e 2f 2c 75 69 3d 7b 22 27 22 3a 22 27 22 2c 22 5c 5c 22 3a 22 5c 5c 22 2c 22 5c 72 22 3a 22 72 22 2c 22 5c 6e 22 3a 22 6e 22 2c 22 5c 75 32 30 32 38 22 3a 22 75 32 30 32 38 22 2c 22 5c 75 32 30 32 39 22 3a 22 75 32 30 32 39 22 7d 2c 66 69 3d 2f 5c 5c 7c 27 7c 5c 72 7c 5c 6e 7c 5c 75 32 30 32 38 7c 5c 75 32 30 32 39 2f 67 2c 65 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 5c 5c 22 2b 75 69 5b 6e 5d 7d 3b 6e 2e 74 65 6d 70 6c 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 66 2c 73 3b 21 69 26 26 72 26 26 28 69 3d 72 29 3b 69 3d 6e 2e 64 65 66 61 75 6c 74 73 28 7b 7d 2c 69 2c 6e 2e 74 65 6d 70 6c 61 74 65 53 65 74 74 69 6e 67 73 29 3b 76 61 72 20 65 2c 68 3d 52 65 67 45 78 70 28 5b 28 69 2e 65 73 Data Ascii: t=/(.)^/,ui={"'":"'","\\":"\\","\r":"r","\n":"n","\u2028":"u2028","\u2029":"u2029"},fi=/\\\|'\|\r\|\n\|\u2028\|\u2029/g,ei=function(n){return"\\"+ui[n]};n.template=function(t,i,r){var f,s;!i&&r&&(i=r);i=n.defaults({},i,n.templateSettings);var e,h=RegExp([(i.es

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 289x100, components 3
Category:	dropped
Size (bytes):	14006
Entropy (8bit):	7.8261955265326915
Encrypted:	false
SSDEEP:	384:Xg0ureAchknf9S7xm9g3hdqKO6aT3QNkAmxTvf:Xg0KexhQ9cP5aDQNkAMT
MD5:	8A1BDB37986473729BA37129A282A37A
SHA1:	3E0D48BA9CB4DEB70C2D08ED2759080720C7F1E2
SHA-256:	062F32F51E027B1EBF9B42729245D8D47CF7646B7A3E173C767B8291123C84BB
SHA-512:	22C24AB90ACDA2D1009C487C06626CE45766851FC72291B25F103953751C9A2F1C1B4B66AB97712FE7833757D1D9B7E0EFBF493750DE07DF5C2A5F1AC12FD036
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM...Resolution......H.......H......8BIM...FX Global Lighting Angle........x8BIM...FX Global Altitude.........8BIM...Print Flags..............8BIM...Copyright Flag.......8BIM'..Japanese Print Flags...............8BIM...Color Halftone Settings...H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM...Color Transfer Settings...p................................................................................................................8BIM...Guides............@...@....8BIM...URL overrides........8BIM...Slices....q...............d...!.....T.M.S._.l.o.g.o...................................!...d..................................8BIM...ICC Untagged Flag......8BIM...Layer ID Generator Base........8BIM...New Windows Thumbnail...........p...'...P..30..............JFIF.....H.H......Adobe.d...............................................................................................................................................

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	587	OUT	GET /bundles/js/OneUI_App?v=n-Tl0oZAOmnCCb5VTtg746HD43vh9Js3OsTnZyz66d41 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	352	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:29 GMT Last-Modified: Wed, 02 Apr 2025 20:02:29 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 232749
2025-04-02 20:02:29 UTC	16032	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 3a 74 28 6e 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?win
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 3c 6e 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 3d 6e 2e 6c 65 6e 67 74 68 3b 75 2d 2d 3b 29 69 66 28 21 6e 5b 75 5d 28 74 2c 69 2c 72 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3a 6e 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 6e 2c 74 2c 69 2c 72 2c 75 29 7b 66 6f 72 28 76 61 72 20 65 2c 6f 3d 5b 5d 2c 66 3d 30 2c 73 3d 6e 2e 6c 65 6e 67 74 68 2c 68 3d 6e 75 6c 6c 21 3d 74 3b 66 3c 73 3b 66 2b 2b 29 28 65 3d 6e 5b 66 5d 29 26 26 28 69 26 26 21 69 28 65 2c 72 2c 75 29 7c 7c 28 6f 2e 70 75 73 68 28 65 29 2c 68 26 26 74 2e 70 75 73 68 28 66 29 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 6e 2c 74 2c 69 2c 72 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 20 72 26 Data Ascii: <n.length?function(t,i,r){for(var u=n.length;u--;)if(!n[u](t,i,r))return!1;return!0}:n[0]}function wt(n,t,i,r,u){for(var e,o=[],f=0,s=n.length,h=null!=t;f<s;f++)(e=n[f])&&(i&&!i(e,r,u)\|\|(o.push(e),h&&t.push(f)));return o}function fi(n,t,i,r,e,o){return r&
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 6e 70 75 74 2f 3e 22 2c 6e 2e 66 69 72 73 74 43 68 69 6c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 22 22 29 2c 22 22 3d 3d 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7d 29 7c 7c 69 69 28 22 76 61 6c 75 65 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 69 66 28 21 69 26 26 22 69 6e 70 75 74 22 3d 3d 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 20 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 29 2c 61 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 Data Ascii: {return n.innerHTML="<input/>",n.firstChild.setAttribute("value",""),""===n.firstChild.getAttribute("value")})\|\|ii("value",function(n,t,i){if(!i&&"input"===n.nodeName.toLowerCase())return n.defaultValue}),a(function(n){return null==n.getAttribute("disable
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 61 64 3a 7b 6e 6f 42 75 62 62 6c 65 3a 21 30 7d 2c 66 6f 63 75 73 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 21 3d 3d 6c 75 28 29 26 26 74 68 69 73 2e 66 6f 63 75 73 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 28 29 2c 21 31 7d 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 66 6f 63 75 73 69 6e 22 7d 2c 62 6c 75 72 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 3d 3d 3d 6c 75 28 29 26 26 74 68 69 73 2e 62 6c 75 72 29 72 65 74 75 72 6e 20 74 68 69 73 2e 62 6c 75 72 28 29 2c 21 31 7d 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 66 6f 63 75 73 6f 75 74 22 7d 2c 63 6c 69 63 6b 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 63 68 65 63 6b 62 6f 78 Data Ascii: ad:{noBubble:!0},focus:{trigger:function(){if(this!==lu()&&this.focus)return this.focus(),!1},delegateType:"focusin"},blur:{trigger:function(){if(this===lu()&&this.blur)return this.blur(),!1},delegateType:"focusout"},click:{trigger:function(){if("checkbox
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 65 2c 75 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 69 7c 7c 28 65 3d 63 74 5b 75 5d 2c 63 74 5b 75 5d 3d 66 2c 66 3d 6e 75 6c 6c 21 3d 72 28 6e 2c 74 2c 69 29 3f 75 3a 6e 75 6c 6c 2c 63 74 5b 75 5d 3d 65 29 2c 66 7d 7d 29 3b 68 66 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 3b 63 66 3d 2f 5e 28 3f 3a 61 7c 61 72 65 61 29 24 2f 69 3b 69 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 2c 69 2e 70 72 6f 70 2c 6e 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: e,u=t.toLowerCase();return i\|\|(e=ct[u],ct[u]=f,f=null!=r(n,t,i)?u:null,ct[u]=e),f}});hf=/^(?:input\|select\|textarea\|button)$/i;cf=/^(?:a\|area)$/i;i.fn.extend({prop:function(n,t){return p(this,i.prop,n,t,1<arguments.length)},removeProp:function(n){return th
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 3a 6e 5b 65 5d 3d 6f 3b 74 5b 65 5d 26 26 28 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 73 72 2e 70 75 73 68 28 65 29 29 3b 73 26 26 75 28 6f 29 26 26 6f 28 73 5b 30 5d 29 3b 73 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 65 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 28 28 64 66 3d 66 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 5c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 5c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 64 66 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 2c 69 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 Data Ascii: :n[e]=o;t[e]&&(t.jsonpCallback=r.jsonpCallback,sr.push(e));s&&u(o)&&o(s[0]);s=o=void 0}),"script"}),e.createHTMLDocument=((df=f.implementation.createHTMLDocument("").body).innerHTML="<form><\/form><form><\/form>",2===df.childNodes.length),i.parseHTML=func
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 6e 26 26 28 74 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 6e 29 29 3b 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 74 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 72 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 75 72 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 72 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 75 3d 69 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 Data Ascii: {var t=this._element;n&&(t=this._getRootElement(n));this._triggerCloseEvent(t).isDefaultPrevented()\|\|this._removeElement(t)},r.dispose=function(){t.removeData(this._element,ur);this._element=null},r._getRootElement=function(n){var u=i.getSelectorFromEleme
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 72 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 28 6e 5b 72 5d 3d 69 5b 72 5d 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 73 65 3d 73 69 26 26 2f 46 69 72 65 66 6f 78 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 6e 66 3d 5b 22 61 75 74 6f 2d 73 74 61 72 74 22 2c 22 61 75 74 6f 22 2c 22 61 75 74 6f 2d 65 6e 64 22 2c 22 74 6f 70 2d 73 74 61 72 74 22 2c 22 74 6f 70 22 2c 22 74 6f 70 2d 65 6e 64 22 2c 22 72 69 67 68 74 2d 73 74 61 72 74 22 2c 22 72 69 67 68 74 22 2c 22 72 69 67 68 74 2d 65 6e 64 22 2c 22 62 6f 74 74 Data Ascii: ments.length;t++){i=arguments[t];for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(n[r]=i[r])}return n};se=si&&/Firefox/i.test(navigator.userAgent);nf=["auto-start","auto","auto-end","top-start","top","top-end","right-start","right","right-end","bott
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 3d 3d 69 2e 74 79 70 65 26 26 28 6f 2e 63 6c 69 63 6b 45 76 65 6e 74 3d 69 29 2c 63 29 26 26 28 6c 3d 63 2e 5f 6d 65 6e 75 2c 21 74 28 65 29 2e 68 61 73 43 6c 61 73 73 28 73 29 7c 7c 69 26 26 28 22 63 6c 69 63 6b 22 3d 3d 3d 69 2e 74 79 70 65 26 26 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 69 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 69 2e 74 79 70 65 26 26 39 3d 3d 3d 69 2e 77 68 69 63 68 29 26 26 74 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 69 2e 74 61 72 67 65 74 29 7c 7c 28 68 3d 74 2e 45 76 65 6e 74 28 66 2e 48 49 44 45 2c 6f 29 2c 74 28 65 29 2e 74 72 69 67 67 65 72 28 68 29 2c 68 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 Data Ascii: ==i.type&&(o.clickEvent=i),c)&&(l=c._menu,!t(e).hasClass(s)\|\|i&&("click"===i.type&&/input\|textarea/i.test(i.target.tagName)\|\|"keyup"===i.type&&9===i.which)&&t.contains(e,i.target)\|\|(h=t.Event(f.HIDE,o),t(e).trigger(h),h.isDefaultPrevented()\|\|("ontouchstar
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 7c 7c 21 69 2e 6e 6f 64 65 54 79 70 65 26 26 21 69 2e 6a 71 75 65 72 79 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 68 74 6d 6c 3f 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 61 6e 69 74 69 7a 65 26 26 28 69 3d 77 65 28 69 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 77 68 69 74 65 4c 69 73 74 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 61 6e 69 74 69 7a 65 46 6e 29 29 2c 6e 2e 68 74 6d 6c 28 69 29 29 3a 6e 2e 74 65 78 74 28 69 29 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 68 74 6d 6c 3f 74 28 69 29 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 6e 29 7c 7c 6e 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 69 29 3a 6e 2e 74 65 78 74 28 74 28 69 29 2e 74 65 78 74 28 29 29 Data Ascii: tent=function(n,i){"object"!=typeof i\|\|!i.nodeType&&!i.jquery?this.config.html?(this.config.sanitize&&(i=we(i,this.config.whiteList,this.config.sanitizeFn)),n.html(i)):n.text(i):this.config.html?t(i).parent().is(n)\|\|n.empty().append(i):n.text(t(i).text())

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	591	OUT	GET /bundles/js/OneUI_Plugins?v=PobvzjHI4unNttKyAvK9UgtOQlPDi_Pkn40hsv_wak01 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:29 GMT Last-Modified: Wed, 02 Apr 2025 20:02:29 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 77359
2025-04-02 20:02:29 UTC	16033	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 72 2c 75 29 7b 76 61 72 20 72 3d 7b 63 6f 6e 74 65 6e 74 3a 7b 6d 65 73 73 61 67 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 3f 72 2e 6d 65 73 73 61 67 65 3a 72 2c 74 69 74 6c 65 3a 72 2e 74 69 74 6c 65 3f 72 2e 74 69 74 6c 65 3a 22 22 2c 69 63 6f 6e 3a 72 2e 69 63 6f 6e 3f 72 2e 69 63 6f 6e 3a Data Ascii: !function(n){"function"==typeof define&&define.amd?define(["jquery"],n):n("object"==typeof exports?require("jquery"):jQuery)}(function(n){function i(i,r,u){var r={content:{message:"object"==typeof r?r.message:r,title:r.title?r.title:"",icon:r.icon?r.icon:
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 26 28 68 3d 75 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 72 2e 62 61 63 6b 64 72 6f 70 29 3f 68 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 65 3a 65 7c 7c 69 28 5b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 5d 2c 6e 5b 22 6e 6f 2d 62 61 63 6b 64 72 6f 70 22 5d 29 2c 21 72 2e 62 61 63 6b 64 72 6f 70 26 26 72 2e 61 6c 6c 6f 77 4f 75 74 73 69 64 65 43 6c 69 63 6b 26 26 61 28 27 22 61 6c 6c 6f 77 4f 75 74 73 69 64 65 43 6c 69 63 6b 22 20 70 61 72 61 6d 65 74 65 72 20 72 65 71 75 69 72 65 73 20 60 62 61 63 6b 64 72 6f 70 60 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 60 74 72 75 65 60 27 29 2c 6f 3d 75 2c 28 63 3d 72 2e 70 6f 73 69 74 Data Ascii: &(h=u,"string"==typeof(e=r.backdrop)?h.style.background=e:e\|\|i([document.documentElement,document.body],n["no-backdrop"]),!r.backdrop&&r.allowOutsideClick&&a('"allowOutsideClick" parameter requires `backdrop` parameter to be set to `true`'),o=u,(c=r.posit
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 65 72 29 2c 69 2e 76 61 6c 75 65 3d 22 22 2c 69 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 69 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 29 2c 79 74 28 6e 2c 6e 2c 74 29 2c 6e 7d 3b 73 2e 72 61 64 69 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 2c 6e 7d 3b 73 2e 63 68 65 63 6b 62 6f 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 64 69 28 6c 28 29 2c 22 63 68 65 63 6b 62 6f 78 22 29 2c 75 3b 72 65 74 75 72 6e 20 72 2e 76 61 6c 75 65 3d 31 2c 72 2e 69 64 3d 6e 2e 63 68 65 63 6b 62 6f 78 2c 72 2e 63 68 65 63 6b 65 64 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 6e 70 75 74 56 61 6c 75 65 29 2c 75 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 Data Ascii: er),i.value="",i.disabled=!0,i.selected=!0,n.appendChild(i)),yt(n,n,t),n};s.radio=function(n){return n.textContent="",n};s.checkbox=function(t,i){var r=di(l(),"checkbox"),u;return r.value=1,r.id=n.checkbox,r.checked=Boolean(i.inputValue),u=t.querySelector
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 69 61 2d 69 6e 76 61 6c 69 64 22 29 2c 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 42 79 22 29 2c 77 28 74 2c 6e 2e 69 6e 70 75 74 65 72 72 6f 72 29 29 7d 2c 67 65 74 50 72 6f 67 72 65 73 73 53 74 65 70 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 64 6f 6d 43 61 63 68 65 2e 67 65 74 28 74 68 69 73 29 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 7d 2c 5f 6d 61 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 2c 73 3b 72 65 74 75 72 6e 20 63 65 28 65 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 2e 5f 64 65 73 74 72 6f 79 28 29 2c 74 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 3d 74 68 69 73 2c 6f 3d 66 Data Ascii: ia-invalid"),t.removeAttribute("aria-describedBy"),w(t,n.inputerror))},getProgressSteps:function(){return u.domCache.get(this).progressSteps},_main:function(e){var o,s;return ce(e),t.currentInstance&&t.currentInstance._destroy(),t.currentInstance=this,o=f
2025-04-02 20:02:29 UTC	12174	IN	Data Raw: 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 37 35 65 6d 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 32 37 34 37 34 3b 63 6f 6c 6f 72 3a 23 66 32 37 34 37 34 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 20 2e 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 65 72 72 6f 72 20 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f Data Ascii: y:flex;align-items:center;font-size:3.75em}.swal2-icon.swal2-error{border-color:#f27474;color:#f27474}.swal2-icon.swal2-error .swal2-x-mark{position:relative;flex-grow:1}.swal2-icon.swal2-error [class^=swal2-x-mark-line]{display:block;position:absolute;to

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	585	OUT	GET /bundles/js/angular?v=n4kY-0iRmoPktJw8f5AIsrld-pet1ESblIyCEjHylkU1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	352	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:29 GMT Last-Modified: Wed, 02 Apr 2025 20:02:29 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 192741
2025-04-02 20:02:29 UTC	16032	IN	Data Raw: 2f 2a 20 4d 69 6e 69 66 69 63 61 74 69 6f 6e 20 66 61 69 6c 65 64 2e 20 52 65 74 75 72 6e 69 6e 67 20 75 6e 6d 69 6e 69 66 69 65 64 20 63 6f 6e 74 65 6e 74 73 2e 0d 0a 28 31 38 34 2c 33 31 37 2d 33 32 34 29 3a 20 72 75 6e 2d 74 69 6d 65 20 65 72 72 6f 72 20 4a 53 31 30 31 39 3a 20 43 61 6e 27 74 20 68 61 76 65 20 27 62 72 65 61 6b 27 20 6f 75 74 73 69 64 65 20 6f 66 20 6c 6f 6f 70 3a 20 62 72 65 61 6b 20 61 0d 0a 20 2a 2f 0d 0a 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 37 2e 37 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 43 29 7b 27 75 73 65 20 73 74 72 69 63 74 Data Ascii: /* Minification failed. Returning unminified contents.(184,317-324): run-time error JS1019: Can't have 'break' outside of loop: break a // AngularJS v1.7.7 (c) 2010-2018 Google, Inc. http://angularjs.org License: MIT*/(function(C){'use strict
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 7b 76 61 72 20 64 3d 28 22 20 22 2b 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 6e 5c 74 5d 2f 67 2c 22 20 22 29 2c 63 3d 64 3b 72 28 62 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 55 28 61 29 3b 63 3d 63 2e 72 65 70 6c 61 63 65 28 22 20 22 2b 61 2b 22 20 22 2c 22 20 22 29 7d 29 3b 63 21 3d 3d 64 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 55 28 63 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 62 28 61 2c 62 29 7b 69 66 28 62 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 29 7b 76 61 72 20 64 3d 0a 28 22 20 22 2b 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 2b Data Ascii: {var d=(" "+(a.getAttribute("class")\|\|"")+" ").replace(/[\n\t]/g," "),c=d;r(b.split(" "),function(a){a=U(a);c=c.replace(" "+a+" "," ")});c!==d&&a.setAttribute("class",U(c))}}function Db(a,b){if(b&&a.setAttribute){var d=(" "+(a.getAttribute("class")\|\|"")+
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 4e 61 6d 65 3b 44 28 67 29 26 26 28 67 3d 67 2e 61 6e 69 6d 56 61 6c 29 3b 69 66 28 41 28 67 29 26 26 22 22 21 3d 3d 67 29 66 6f 72 28 3b 61 3d 6b 2e 65 78 65 63 28 67 29 3b 29 6e 3d 77 61 28 61 5b 32 5d 29 2c 58 28 62 2c 6e 2c 22 43 22 2c 65 2c 66 29 26 26 28 64 5b 6e 5d 3d 55 28 61 5b 33 5d 29 29 2c 67 3d 67 2e 73 75 62 73 74 72 28 61 2e 69 6e 64 65 78 2b 61 5b 30 5d 2e 6c 65 6e 67 74 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 61 3a 6e 61 28 62 2c 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 69 66 28 21 4f 61 29 62 72 65 61 6b 3b 46 28 61 2c 62 2c 64 2c 65 2c 66 29 7d 62 2e 73 6f 72 74 28 69 61 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 72 79 7b 76 61 72 20 66 Data Ascii: Name;D(g)&&(g=g.animVal);if(A(g)&&""!==g)for(;a=k.exec(g);)n=wa(a[2]),X(b,n,"C",e,f)&&(d[n]=U(a[3])),g=g.substr(a.index+a[0].length);break;case Pa:na(b,a.nodeValue);break;case 8:if(!Oa)break;F(a,b,d,e,f)}b.sort(ia);return b}function F(a,b,c,d,e){try{var f
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 20 61 3b 74 68 72 6f 77 20 4b 62 28 22 62 61 64 64 61 74 61 22 2c 61 2c 66 29 3b 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 78 64 28 61 29 7b 76 61 72 20 62 3d 54 28 29 2c 64 3b 41 28 61 29 3f 72 28 61 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 3b 76 61 72 20 65 3d 4b 28 55 28 61 2e 73 75 62 73 74 72 28 30 2c 64 29 29 29 3b 61 3d 55 28 61 2e 73 75 62 73 74 72 28 64 2b 31 29 29 3b 65 26 26 28 62 5b 65 5d 3d 62 5b 65 5d 3f 62 5b 65 5d 2b 22 2c 20 22 2b 61 3a 61 29 7d 29 3a 44 28 61 29 26 26 0a 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 76 61 72 20 66 3d 4b 28 64 29 2c 67 3d 55 28 61 29 3b 66 26 26 28 62 5b 66 5d 3d 62 5b 66 5d 3f 62 5b 66 5d 2b 22 Data Ascii: a;throw Kb("baddata",a,f);}}}return a}function xd(a){var b=T(),d;A(a)?r(a.split("\n"),function(a){d=a.indexOf(":");var e=K(U(a.substr(0,d)));a=U(a.substr(d+1));e&&(b[e]=b[e]?b[e]+", "+a:a)}):D(a)&&r(a,function(a,d){var f=K(d),g=U(a);f&&(b[f]=b[f]?b[f]+"
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 48 64 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 3d 3d 71 2e 49 64 65 6e 74 69 66 69 65 72 7c 7c 61 2e 74 79 70 65 3d 3d 3d 71 2e 4d 65 6d 62 65 72 45 78 70 72 65 73 73 69 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 64 28 61 29 7b 69 66 28 31 3d 3d 3d 61 2e 62 6f 64 79 2e 6c 65 6e 67 74 68 26 26 48 64 28 61 2e 62 6f 64 79 5b 30 5d 2e 65 78 70 72 65 73 73 69 6f 6e 29 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 71 2e 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 2c 6c 65 66 74 3a 61 2e 62 6f 64 79 5b 30 5d 2e 65 78 70 72 65 73 73 69 6f 6e 2c 72 69 67 68 74 3a 7b 74 79 70 65 3a 71 2e 4e 47 56 61 6c 75 65 50 61 72 61 6d 65 74 65 72 7d 2c 6f 70 65 72 61 74 6f 72 3a 22 3d 22 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 64 28 61 29 7b 74 68 69 73 2e 24 Data Ascii: Hd(a){return a.type===q.Identifier\|\|a.type===q.MemberExpression}function Id(a){if(1===a.body.length&&Hd(a.body[0].expression))return{type:q.AssignmentExpression,left:a.body[0].expression,right:{type:q.NGValueParameter},operator:"="}}function Jd(a){this.$
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 29 2e 75 73 65 72 41 67 65 6e 74 29 2c 67 3d 62 5b 30 5d 7c 7c 7b 7d 2c 6b 3d 67 2e 62 6f 64 79 26 26 67 2e 62 6f 64 79 2e 73 74 79 6c 65 2c 68 3d 21 31 2c 6c 3d 21 31 3b 6b 26 26 28 68 3d 21 21 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 69 6e 20 6b 7c 7c 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 22 69 6e 20 6b 29 2c 6c 3d 21 21 28 22 61 6e 69 6d 61 74 69 6f 6e 22 69 6e 20 6b 7c 7c 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 22 69 6e 20 6b 29 29 3b 72 65 74 75 72 6e 7b 68 69 73 74 6f 72 79 3a 21 28 21 63 7c 7c 0a 34 3e 65 7c 7c 66 29 2c 68 61 73 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 69 6e 70 75 74 22 3d 3d 3d 61 26 26 43 61 29 72 65 74 75 72 6e 21 31 3b 69 66 28 7a 28 64 5b 61 Data Ascii: .navigator\|\|{}).userAgent),g=b[0]\|\|{},k=g.body&&g.body.style,h=!1,l=!1;k&&(h=!!("transition"in k\|\|"webkitTransition"in k),l=!!("animation"in k\|\|"webkitAnimation"in k));return{history:!(!c\|\|4>e\|\|f),hasEvent:function(a){if("input"===a&&Ca)return!1;if(z(d[a
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 30 3c 62 7c 7c 70 5b 61 5d 29 70 5b 61 5d 3d 28 70 5b 61 5d 7c 7c 30 29 2b 62 2c 70 5b 61 5d 3d 3d 3d 2b 28 30 3c 62 29 26 26 63 2e 70 75 73 68 28 61 29 7d 29 3b 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 69 66 28 61 3d 3d 3d 0a 62 29 7b 76 61 72 20 63 3d 73 2c 63 3d 6c 28 63 26 26 63 2e 73 70 6c 69 74 28 22 20 22 29 2c 31 29 3b 68 2e 24 61 64 64 43 6c 61 73 73 28 63 29 7d 65 6c 73 65 20 63 3d 73 2c 63 3d 6c 28 63 26 26 63 2e 73 70 6c 69 74 28 22 20 22 29 2c 2d 31 29 2c 68 2e 24 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 3b 6e 3d 61 7d 76 61 72 20 70 3d 6b 2e 64 61 74 61 28 22 24 Data Ascii: ction l(a,b){var c=[];r(a,function(a){if(0<b\|\|p[a])p[a]=(p[a]\|\|0)+b,p[a]===+(0<b)&&c.push(a)});return c.join(" ")}function m(a){if(a===b){var c=s,c=l(c&&c.split(" "),1);h.$addClass(c)}else c=s,c=l(c&&c.split(" "),-1),h.$removeClass(c);n=a}var p=k.data("$
2025-04-02 20:02:31 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 74 68 2c 62 3d 74 68 69 73 2e 24 24 68 61 73 68 2c 64 3d 79 65 28 74 68 69 73 2e 24 24 73 65 61 72 63 68 29 2c 62 3d 62 3f 0a 22 23 22 2b 68 63 28 62 29 3a 22 22 2c 61 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 2d 2d 3b 29 61 5b 63 5d 3d 68 63 28 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 29 3b 74 68 69 73 2e 24 24 75 72 6c 3d 61 2e 6a 6f 69 6e 28 22 2f 22 29 2b 28 64 3f 22 3f 22 2b 64 3a 22 22 29 2b 62 3b 74 68 69 73 2e 24 24 61 62 73 55 72 6c 3d 74 68 69 73 2e 24 24 6e 6f 72 6d 61 6c 69 7a 65 55 72 6c 28 74 68 69 73 2e 24 24 75 72 6c 29 3b 74 68 69 73 2e 24 24 75 72 6c 55 70 64 61 74 65 64 42 79 4c 6f 63 61 Data Ascii: nction(){for(var a=this.$$path,b=this.$$hash,d=ye(this.$$search),b=b?"#"+hc(b):"",a=a.split("/"),c=a.length;c--;)a[c]=hc(a[c].replace(/%2F/g,"/"));this.$$url=a.join("/")+(d?"?"+d:"")+b;this.$$absUrl=this.$$normalizeUrl(this.$$url);this.$$urlUpdatedByLoca
2025-04-02 20:02:31 UTC	16384	IN	Data Raw: 74 49 64 28 21 31 2c 61 2b 22 26 26 28 22 2b 74 68 69 73 2e 65 73 63 61 70 65 28 62 29 2b 22 20 69 6e 20 22 2b 61 2b 22 29 22 29 29 3b 72 65 74 75 72 6e 20 63 5b 64 5d 7d 2c 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2e 62 6f 64 79 2e 70 75 73 68 28 61 2c 22 3d 22 2c 62 2c 22 3b 22 29 2c 61 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 7c 7c 28 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 5b 61 5d 3d 74 68 69 73 2e 6e 65 78 74 49 64 28 21 30 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 66 69 6c 74 65 72 73 Data Ascii: tId(!1,a+"&&("+this.escape(b)+" in "+a+")"));return c[d]},assign:function(a,b){if(a)return this.current().body.push(a,"=",b,";"),a},filter:function(a){this.state.filters.hasOwnProperty(a)\|\|(this.state.filters[a]=this.nextId(!0));return this.state.filters
2025-04-02 20:02:31 UTC	16384	IN	Data Raw: 2e 73 74 65 70 3d 6d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 2e 73 74 65 70 4d 69 73 6d 61 74 63 68 7d 3a 0a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 2e 24 69 73 45 6d 70 74 79 28 62 29 7c 7c 7a 28 73 29 7c 7c 65 65 28 62 2c 70 7c 7c 30 2c 73 29 7d 2c 67 28 22 73 74 65 70 22 2c 6c 29 29 7d 2c 63 68 65 63 6b 62 6f 78 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 2c 63 2c 65 2c 66 2c 67 2c 6b 29 7b 76 61 72 20 68 3d 66 65 28 6b 2c 61 2c 22 6e 67 54 72 75 65 56 61 6c 75 65 22 2c 64 2e 6e 67 54 72 75 65 56 61 6c 75 65 2c 21 30 29 2c 6c 3d 66 65 28 6b 2c 61 2c 22 6e 67 46 61 6c 73 65 56 61 6c 75 65 22 2c 64 2e 6e 67 46 61 6c 73 65 56 61 6c 75 65 2c 21 31 29 3b 62 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 Data Ascii: .step=m?function(){return!r.stepMismatch}:function(a,b){return c.$isEmpty(b)\|\|z(s)\|\|ee(b,p\|\|0,s)},g("step",l))},checkbox:function(a,b,d,c,e,f,g,k){var h=fe(k,a,"ngTrueValue",d.ngTrueValue,!0),l=fe(k,a,"ngFalseValue",d.ngFalseValue,!1);b.on("change",funct

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	647	OUT	GET /content/styles/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1 Host: av360.app Connection: keep-alive Origin: https://av360.app sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://av360.app/bundles/css/OneUI?v=iiwTR9LZxGGxofDTA4_6lcVIvWw9mHEVVLoUX0p05F81 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	280	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Last-Modified: Mon, 08 Apr 2019 09:14:40 GMT Accept-Ranges: bytes ETag: "00bd7eebedd41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 74256
2025-04-02 20:02:29 UTC	16104	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 22 10 00 0d 00 00 00 02 d8 48 00 01 21 b6 01 49 ba 9f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 12 11 08 0a 89 f6 44 87 e7 3b 01 36 02 24 03 9d 2c 0b 9d 30 00 04 20 05 8a 25 07 da 6d 5b 26 41 92 82 b0 b3 d5 5f e1 e0 df 56 65 c0 b8 d3 16 2d 3a 10 83 ee 80 d3 a0 97 27 b8 82 6d d3 6a 06 dd e1 78 a0 ca 7a 6d f6 ff ff ff ff 6f 4a 16 32 a6 f7 17 b8 24 ff 01 10 51 5b aa b6 d6 ba b5 6e 9b 51 ce c8 12 2f a6 3a 02 c5 54 6f 26 97 61 1c 1d 43 04 cb 0d 13 66 ec 7c 31 3b 23 94 81 ec 31 0b cd 28 69 21 6b 17 87 19 87 e3 09 2f 34 f8 de 1c 5a 6b cd be 92 cd 88 c8 88 c8 88 08 7a 8b 88 e8 60 30 42 29 f9 98 74 26 32 22 32 22 c2 a5 21 22 bc 93 e1 ea 57 b7 85 4c 46 89 ef 46 44 26 06 e3 9e d4 3e Data Ascii: wOF2"H!I?FFTM`D;6$,0 %m[&A_Ve-:'mjxzmoJ2$Q[nQ/:To&aCf\|1;#1(i!k/4Zkz`0B)t&2"2"!"WLFFD&>
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 8a ef 75 3c 0a 86 8a 52 1f 85 e6 14 80 a4 79 80 af 67 60 41 65 e9 f5 dc a1 b6 e6 49 b9 ff 87 17 df dd 34 04 3c f2 a8 6b 8c 96 04 0b 6d 3c b1 38 6b 12 14 78 f2 d8 16 52 b9 99 ed fe 34 ef 11 b6 26 4e 96 28 41 14 9f 47 76 35 13 02 f1 5c 2a 9f 28 34 f6 52 e1 17 0f e9 5a 40 76 72 d9 57 3a 4f f1 d1 83 c7 6a 74 39 a4 6d 76 da 83 90 45 17 b4 2d f1 33 2d aa 50 db 70 56 4a b9 91 75 7d 9f 99 9b fa a2 fd e2 05 d7 89 29 a3 bb 5e 8a 5f 8c 4e 46 1b ac 5f f0 2c 3a 18 6f f1 dc 1e 12 e4 cb d7 d2 0d 1f fb 61 12 54 b7 c5 73 ec b4 73 e8 86 82 b3 46 1d 79 56 49 8e b6 f1 ce 58 36 e2 0a 18 cb f3 44 4a d8 bc db 09 e9 d4 9b 67 f1 d1 ac 86 ad 8e 05 80 fd 58 e2 fc 68 e3 35 6b 4f c4 f4 d3 2b 27 32 ac f1 ff 0b 69 28 17 77 6e 7d db 28 72 cb 55 56 97 bc 86 79 e3 6e 3c 91 db 4c 9a bb 1a Data Ascii: u<Ryg`AeI4<km<8kxR4&N(AGv5\*(4RZ@vrW:Ojt9mvE-3-PpVJu})^_NF_,:oaTssFyVIX6DJgXh5kO+'2i(wn}(rUVyn<L
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 88 36 e0 d2 3d 07 66 1e bc f0 eb ad 67 f4 ae 3a 26 5c 73 84 f9 9a 0b 07 67 0e ac 75 29 20 44 fb e3 25 e1 12 c1 67 7f 00 58 3b 5a 3a 37 dd e3 49 5f c5 fa 5f 6f 3d 6b e3 aa 1b 1e b2 a2 e0 3c 58 f7 3d 90 96 74 e4 6a 33 1d 99 74 fa c2 2f 5c 34 23 41 64 be 7c d8 4e 23 aa c1 97 83 ae a4 74 40 4c 1a f0 8b 16 ce 00 88 c8 13 0e 1b 04 64 81 21 92 26 3c 27 9e 92 bd 67 90 f0 e3 e1 7c ce a4 de 1a 5a b1 8f 21 3b 8d 53 14 41 2d ae c9 ee 05 54 6f ea 10 8b 3b 1a c4 13 c5 ff aa bc 7d 1a 5c 13 5d 9f 7c c0 bc 95 70 57 aa 1d 6c 9d 0b 5e 9e e0 4f ff 85 ac 94 81 07 06 c6 a4 9b 37 25 51 da 28 c9 cd 5b 67 19 c6 cb fd a9 ac d8 d2 10 6d 6a 1a 49 a3 21 a5 a5 6a 4f 9f a9 47 ee 61 55 38 ae 01 89 e1 98 44 bd 4b d6 33 39 e9 4b 39 97 64 cb f5 c9 c9 6f dc ee 37 ad ee d7 ee 96 ca ff 5b dc Data Ascii: 6=fg:&\sgu) D%gX;Z:7I__o=k<X=tj3t/\4#Ad\|N#t@Ld!&<'g\|Z!;SA-To;}\]\|pWl^O7%Q([gmjI!jOGaU8DK39K9do7[
2025-04-02 20:02:30 UTC	16384	IN	Data Raw: 20 8a 04 5a ce 6b 0a 69 e2 2d 87 4a 76 1f 7a 8a 99 54 1d d3 4e f4 25 c5 ee 9e d3 1d 4b f6 25 b6 13 70 dd f2 b9 c7 2f 21 71 0a b0 45 cf 0f fb 09 96 e0 7d c9 2d aa 55 73 98 ca e7 c7 49 d3 4d 0f 4c 07 a5 f2 19 6b c9 49 0f 2e 1a d2 a5 67 a6 1b 64 33 a8 d7 24 d7 a8 0c 76 ed 80 35 bc 11 61 fc f8 a1 17 56 e5 47 f8 ad 3b ba fc e8 8b 7d 38 e2 fb 2e 96 ee 53 ba 10 b6 22 2d b1 39 7c cb 3f d5 16 c4 6a a8 22 65 84 91 51 04 a8 50 38 92 14 ce c2 5a 30 ac 79 2f ac 58 2f d3 8b 53 b5 62 0d 04 f6 09 4e 22 e7 04 fb d3 e2 9f 33 10 17 82 88 ad 91 4f 7c c2 96 42 80 ea ca 57 e6 6b ab b5 51 1f 11 07 f5 35 f3 6b ad 46 31 a2 47 7f 85 e5 2e b1 af a1 26 6c 34 a5 76 d5 b8 02 38 15 ac 6a dd 28 f0 b8 86 ff 21 58 50 27 dd 4c 41 d0 ae 12 58 e5 22 bb 72 fc a7 bb 76 41 bc 7f 32 e9 8e 5c 69 Data Ascii: Zki-JvzTN%K%p/!qE}-UsIMLkI.gd3$v5aVG;}8.S"-9\|?j"eQP8Z0y/X/SbN"3O\|BWkQ5kF1G.&l4v8j(!XP'LAX"rvA2\i
2025-04-02 20:02:30 UTC	9000	IN	Data Raw: 59 44 7e 1b 5b ca f7 8f 9d fe 6c b2 99 9b 71 f8 4c 2a 3f 4a 26 5e 8d 93 ce bf 58 d4 36 ab b5 b8 eb 59 ab 61 7a f6 ae f8 99 1b 61 72 77 c8 09 36 cc 7f 96 2b 84 8d 7b 12 53 3d c0 7f 17 4e 7a f6 92 68 14 16 8b a6 aa 50 73 56 48 8c 29 ff 70 ca 99 e7 b1 52 b5 4c 35 ac a2 02 a3 99 d1 11 7a 02 66 b2 f4 a0 69 d8 0b eb a7 34 61 0e 62 60 18 0a b0 95 ed 97 8a 7c 1e 00 37 ac f0 52 7b 33 60 d9 b0 23 dd cb 6b d8 74 96 23 7a 30 25 25 19 ff c1 77 0c b0 9d 9e f5 99 18 35 9d 58 67 d4 29 2d 0f 26 8e a3 93 dc 64 aa 24 c5 4b 94 5a aa d6 cc 7b 6b da e2 59 c1 3b 3d d0 55 0c 98 b5 71 bf 5c 91 dd 94 8d 83 eb 40 f6 4e f1 89 ac c3 e9 54 05 c2 8a 6f d3 d8 9e 42 59 29 b6 89 9d d9 d6 f1 59 9a de 38 67 22 59 07 04 6b 19 b8 af 09 eb f2 67 e2 85 cf 96 5f 68 77 b2 55 93 f4 40 ae 80 37 8d Data Ascii: YD~[lqL*?J&^X6Yazarw6+{S=NzhPsVH)pRL5zfi4ab`\|7R{3`#kt#z0%%w5Xg)-&d$KZ{kY;=Uq\@NToBY)Y8g"Ykg_hwU@7

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	585	OUT	GET /bundles/js/userApp?v=6clXiuabafqv8ECnXiuJJwgXqZY8eZPKxzdpnd89IvE1 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	351	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Thu, 02 Apr 2026 20:02:29 GMT Last-Modified: Wed, 02 Apr 2025 20:02:29 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 71251
2025-04-02 20:02:29 UTC	16033	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 2e 2f 70 75 6e 79 63 6f 64 65 22 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 49 50 76 36 22 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 53 65 63 6f 6e 64 4c 65 76 65 6c 44 6f 6d 61 69 6e 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 2e 2f 70 75 6e 79 63 6f 64 65 22 2c 22 2e 2f 49 50 76 36 22 2c 22 2e 2f 53 65 63 6f 6e 64 4c 65 76 65 6c 44 6f 6d 61 69 6e 73 22 5d 2c 74 29 3a 6e 2e 55 52 49 3d 74 28 6e 2e 70 75 6e 79 63 Data Ascii: (function(n,t){"object"==typeof module&&module.exports?module.exports=t(require("./punycode"),require("./IPv6"),require("./SecondLevelDomains")):"function"==typeof define&&define.amd?define(["./punycode","./IPv6","./SecondLevelDomains"],t):n.URI=t(n.punyc
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 28 75 2e 70 72 6f 74 6f 63 6f 6c 5f 65 78 70 72 65 73 73 69 6f 6e 29 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 50 72 6f 74 6f 63 6f 6c 20 22 27 2b 6e 2b 22 5c 22 20 63 6f 6e 74 61 69 6e 73 20 63 68 61 72 61 63 74 65 72 73 20 6f 74 68 65 72 20 74 68 61 6e 20 5b 41 2d 5a 30 2d 39 2e 2b 2d 5d 20 6f 72 20 64 6f 65 73 6e 27 74 20 73 74 61 72 74 20 77 69 74 68 20 5b 41 2d 5a 5d 22 29 3b 72 65 74 75 72 6e 20 69 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 74 29 7d 2c 66 2e 73 63 68 65 6d 65 3d 66 2e 70 72 6f 74 6f 63 6f 6c 2c 66 2e 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 72 74 73 2e 75 72 6e 3f 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 74 68 69 73 3a 28 76 6f 69 64 20 30 21 3d Data Ascii: (u.protocol_expression)))throw new TypeError('Protocol "'+n+"\" contains characters other than [A-Z0-9.+-] or doesn't start with [A-Z]");return it.call(this,n,t)},f.scheme=f.protocol,f.port=function(n,t){return this._parts.urn?void 0===n?"":this:(void 0!=
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 22 2c 22 54 68 65 20 70 61 67 65 20 6f 72 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 29 2c 75 2e 73 75 70 70 72 65 73 73 34 30 34 3d 21 31 29 2c 6e 2e 72 65 6a 65 63 74 28 66 29 7d 7d 7d 5d 29 3b 61 76 33 36 30 41 70 70 2e 63 6f 6e 74 72 6f 6c 6c 65 72 28 22 54 68 65 6d 65 43 74 6c 72 22 2c 5b 22 24 73 63 6f 70 65 22 2c 22 4d 61 73 74 65 72 53 76 63 22 2c 22 61 76 22 2c 22 48 65 6c 70 65 72 53 76 63 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 5f 5f 67 65 74 53 74 79 6c 65 73 68 65 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 54 68 65 6d 65 53 43 53 53 28 29 2e 74 68 65 6e 28 66 75 Data Ascii: ","The page or resource you are trying to access cannot be found","error"),u.suppress404=!1),n.reject(f)}}}]);av360App.controller("ThemeCtlr",["$scope","MasterSvc","av","HelperSvc",function(n,t){n.__getStylesheet=function(){return t.getThemeSCSS().then(fu
2025-04-02 20:02:29 UTC	16384	IN	Data Raw: 66 28 22 73 74 65 6d 22 29 3e 3d 30 3f 22 20 6d 62 2d 35 22 3a 22 20 6d 62 2d 30 22 29 2c 72 2e 24 73 75 62 6d 69 74 74 65 64 26 26 28 65 3d 72 5b 22 73 75 72 76 65 79 51 75 65 73 74 69 6f 6e 5f 22 2b 74 2e 4f 72 64 65 72 2b 22 5f 5f 69 6e 70 75 74 22 5d 2c 65 26 26 65 2e 24 69 6e 76 61 6c 69 64 26 26 28 75 2b 3d 22 20 62 67 2d 64 61 6e 67 65 72 2d 6c 69 67 68 74 22 29 29 2c 75 2e 69 6e 64 65 78 4f 66 28 22 62 67 2d 22 29 3c 30 26 26 28 75 2b 3d 66 5b 69 5d 2e 51 75 65 73 74 69 6f 6e 2e 53 63 61 6c 65 2e 53 63 61 6c 65 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 73 74 65 6d 22 29 3e 3d 30 7c 7c 66 5b 69 5d 2e 51 75 65 73 74 69 6f 6e 2e 53 63 61 6c 65 2e 53 63 61 6c 65 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: f("stem")>=0?" mb-5":" mb-0"),r.$submitted&&(e=r["surveyQuestion_"+t.Order+"__input"],e&&e.$invalid&&(u+=" bg-danger-light")),u.indexOf("bg-")<0&&(u+=f[i].Question.Scale.ScaleType.toLowerCase().indexOf("stem")>=0\|\|f[i].Question.Scale.ScaleType.toLowerCase
2025-04-02 20:02:29 UTC	6066	IN	Data Raw: 65 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6c 6f 67 28 22 42 61 63 6b 20 62 75 74 74 6f 6e 20 64 65 74 65 63 74 65 64 20 62 75 74 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 70 61 67 65 22 29 3b 6e 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 7d 2c 21 31 29 3b 6e 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 7d 2c 65 6e 61 62 6c 65 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: eBack:function(){var t=this;n.addEventListener("popstate",function(){t.log("Back button detected but disabled for this page");n.history.pushState(null,null,n.location.pathname)},!1);n.history.pushState(null,null,n.location.pathname)},enableBack:function()

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:29 UTC	572	OUT	GET /Areas/User/Scripts/av360.app.user.session.service.js HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:29 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 18 Oct 2022 05:56:35 GMT Accept-Ranges: bytes ETag: "1274c161b6e2d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:29 GMT Connection: close Content-Length: 8005
2025-04-02 20:02:29 UTC	8005	IN	Data Raw: ef bb bf 61 76 33 36 30 41 70 70 2e 66 61 63 74 6f 72 79 28 27 61 76 55 73 65 72 53 65 73 73 69 6f 6e 53 76 63 27 2c 20 5b 27 61 76 27 2c 20 27 24 64 6f 63 75 6d 65 6e 74 27 2c 20 27 24 77 69 6e 64 6f 77 27 2c 20 27 24 74 69 6d 65 6f 75 74 27 2c 20 27 24 69 6e 74 65 72 76 61 6c 27 2c 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 61 76 2c 20 24 64 2c 20 24 77 2c 20 24 74 2c 20 24 69 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 65 78 70 69 72 65 54 69 6d 65 6f 75 74 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6b 65 79 50 72 65 66 69 78 20 3d 20 27 61 76 55 73 65 72 2e 27 20 2b 20 61 76 2e 73 69 74 65 4e 61 6d 65 20 2b 20 27 2e 27 3b 0d 0a 20 20 20 20 76 61 72 20 64 61 74 65 45 78 70 69 72 65 4b 65 79 20 3d 20 6b 65 79 50 72 65 66 69 78 20 2b 20 27 64 61 74 65 45 78 70 69 Data Ascii: av360App.factory('avUserSessionSvc', ['av', '$document', '$window', '$timeout', '$interval', function (av, $d, $w, $t, $i) { var expireTimeout; var keyPrefix = 'avUser.' + av.siteName + '.'; var dateExpireKey = keyPrefix + 'dateExpi

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:31 UTC	575	OUT	GET /public/api/maintenance-window HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:32 UTC	278	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:32 GMT Connection: close Content-Length: 26
2025-04-02 20:02:32 UTC	26	IN	Data Raw: 7b 22 6d 61 69 6e 74 65 6e 61 6e 63 65 57 69 6e 64 6f 77 22 3a 6e 75 6c 6c 7d Data Ascii: {"maintenanceWindow":null}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:31 UTC	615	OUT	GET /Content/Images/Favicons/favicon.ico HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:32 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Sun, 08 Nov 2020 03:38:44 GMT Accept-Ranges: bytes ETag: "2737aca880b5d61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:32 GMT Connection: close Content-Length: 15406
2025-04-02 20:02:32 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 60 33 6d a6 5f 32 dd a7 5f 33 fb a5 5c 2f e8 a5 5c 2e ac a3 5c 2e 4e ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 5c 2f 67 a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff e3 cc bd ff ff ff ff be e0 c1 b1 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 5b 2d d6 a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff a4 5b 2d ff eb dc d2 ff fe fd fc ff ba Data Ascii: h6 (00 h&( `3m_2_3\/\.\.N\/g[-[-[-[-[-1[-[-[-[-[-[-

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:32 UTC	617	OUT	GET /tms/shared/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/theme-SCSS HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:32 UTC	280	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:32 GMT Connection: close Content-Length: 7851
2025-04-02 20:02:32 UTC	7851	IN	Data Raw: 7b 22 76 61 72 69 61 62 6c 65 73 22 3a 22 24 70 72 69 6d 61 72 79 3a 20 23 34 37 36 34 42 34 3b 24 73 65 63 6f 6e 64 61 72 79 3a 20 23 30 30 30 30 30 30 3b 24 75 6e 73 65 6c 65 63 74 65 64 2d 69 6e 70 75 74 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 24 73 75 63 63 65 73 73 3a 20 23 34 37 36 34 62 34 3b 24 64 61 6e 67 65 72 3a 20 23 43 30 34 35 34 35 3b 22 2c 22 74 68 65 6d 65 22 3a 22 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 5c 72 5c 6e 20 2a 20 6d 69 78 69 6e 73 5c 72 5c 6e 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: {"variables":"$primary: #4764B4;$secondary: #000000;$unselected-input-color: #ffffff;$success: #4764b4;$danger: #C04545;","theme":"/******************************************************\r\n mixins\r\n **************************************************

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:32 UTC	402	OUT	GET /public/api/maintenance-window HTTP/1.1 Host: av360.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:33 UTC	278	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:32 GMT Connection: close Content-Length: 26
2025-04-02 20:02:33 UTC	26	IN	Data Raw: 7b 22 6d 61 69 6e 74 65 6e 61 6e 63 65 57 69 6e 64 6f 77 22 3a 6e 75 6c 6c 7d Data Ascii: {"maintenanceWindow":null}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://av360.app/TMS/User/4

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://av360.app/TMS/User/4

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:33 UTC	625	OUT	GET /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:33 UTC	279	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:33 GMT Connection: close Content-Length: 511
2025-04-02 20:02:33 UTC	511	IN	Data Raw: 7b 22 73 75 72 76 65 79 22 3a 7b 22 53 69 74 65 4e 61 6d 65 22 3a 22 74 6d 73 22 2c 22 50 72 6f 6a 65 63 74 47 75 69 64 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 22 2c 22 50 72 69 6d 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 5f 5f 70 72 69 6d 61 72 79 2e 6a 70 67 22 2c 22 53 65 63 6f 6e 64 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 34 39 65 36 30 34 37 33 2d 63 64 65 35 2d 34 38 34 63 2d 61 63 30 34 2d 65 61 61 61 35 34 63 35 64 37 63 65 5f 5f 73 65 63 6f 6e 64 61 72 79 2e 6a 70 67 22 2c 22 50 72 6f 6a 65 63 74 54 79 70 65 22 3a 22 33 36 30 22 2c 22 4c 6f 67 69 6e 54 79 70 65 Data Ascii: {"survey":{"SiteName":"tms","ProjectGuid":"e58e38a1-9af1-47c9-bb58-5f670b752c62","PrimaryLogoName":"e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg","SecondaryLogoName":"49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg","ProjectType":"360","LoginType

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:33 UTC	423	OUT	GET /Scripts/sass.js/sass.worker.js HTTP/1.1 Host: av360.app Connection: keep-alive Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://av360.app/TMS/User/4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:33 UTC	284	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 11 Dec 2020 00:25:53 GMT Accept-Ranges: bytes ETag: "d53eb12f54cfd61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:33 GMT Connection: close Content-Length: 4605089
2025-04-02 20:02:33 UTC	16100	IN	Data Raw: 2f 2a 21 20 73 61 73 73 2e 6a 73 20 2d 20 76 30 2e 31 31 2e 31 20 28 66 32 38 36 34 33 36 29 20 2d 20 62 75 69 6c 74 20 32 30 31 39 2d 31 30 2d 32 30 0a 20 20 70 72 6f 76 69 64 69 6e 67 20 6c 69 62 73 61 73 73 20 33 2e 36 2e 32 20 28 34 64 61 37 63 34 62 64 29 0a 20 20 76 69 61 20 65 6d 73 63 72 69 70 74 65 6e 20 31 2e 33 38 2e 33 31 20 28 30 34 30 65 34 39 61 29 0a 20 2a 2f 0a 76 61 72 20 4d 6f 64 75 6c 65 3d 74 79 70 65 6f 66 20 4d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 4d 6f 64 75 6c 65 3a 7b 7d 3b 76 61 72 20 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 3d 7b 7d 3b 76 61 72 20 6b 65 79 3b 66 6f 72 28 6b 65 79 20 69 6e 20 4d 6f 64 75 6c 65 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 Data Ascii: /! sass.js - v0.11.1 (f286436) - built 2019-10-20 providing libsass 3.6.2 (4da7c4bd) via emscripten 1.38.31 (040e49a) /var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 6f 64 65 2c 61 30 2c 61 31 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 2c 61 31 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6d 73 63 72 69 70 74 65 6e 5f 61 73 6d 5f 63 6f 6e 73 74 5f 69 69 69 69 28 63 6f 64 65 2c 61 30 2c 61 31 2c 61 32 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 2c 61 31 2c 61 32 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6d 73 63 72 69 70 74 65 6e 5f 61 73 6d 5f 63 6f 6e 73 74 5f 69 69 28 63 6f 64 65 2c 61 30 29 7b 72 65 74 75 72 6e 20 41 53 4d 5f 43 4f 4e 53 54 53 5b 63 6f 64 65 5d 28 61 30 29 7d 5f 5f 41 54 49 4e 49 54 5f 5f 2e 70 75 73 68 28 7b 66 75 6e 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6c 6f 62 61 6c 43 74 6f 72 73 28 29 7d 7d 29 3b 6d 65 6d 6f 72 79 49 Data Ascii: ode,a0,a1){return ASM_CONSTS[code](a0,a1)}function _emscripten_asm_const_iiii(code,a0,a1,a2){return ASM_CONSTS[code](a0,a1,a2)}function _emscripten_asm_const_ii(code,a0){return ASM_CONSTS[code](a0)}__ATINIT__.push({func:function(){globalCtors()}});memoryI
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 41 77 41 41 41 41 67 75 41 41 41 43 41 41 41 41 51 43 38 41 41 41 49 41 41 41 42 49 4c 77 41 41 41 41 67 41 41 42 43 48 41 41 41 4b 38 77 41 41 45 49 63 41 41 4f 6a 79 41 41 44 6f 6b 77 41 41 48 66 4d 41 41 41 41 41 41 41 41 44 41 41 41 41 43 43 34 41 41 41 49 41 41 41 42 41 4c 77 41 41 41 67 41 41 41 48 67 76 41 41 41 41 43 41 41 41 45 49 63 41 41 47 4c 7a 41 41 44 6f 6b 77 41 41 68 50 4d 41 41 41 41 41 41 41 41 43 41 41 41 41 43 43 34 41 41 41 49 41 41 41 43 67 4c 77 41 41 41 41 67 41 41 42 43 48 41 41 44 4a 38 77 41 41 36 4a 4d 41 41 50 50 7a 41 41 41 41 41 41 41 41 41 67 41 41 41 41 67 75 41 41 41 43 41 41 41 41 6f 43 38 41 41 41 41 49 41 41 44 6f 6b 77 41 41 4f 50 51 41 41 41 41 41 41 41 41 43 41 41 41 41 43 43 34 41 41 41 49 41 41 41 44 6f 4c 77 41 Data Ascii: AwAAAAguAAACAAAAQC8AAAIAAABILwAAAAgAABCHAAAK8wAAEIcAAOjyAADokwAAHfMAAAAAAAADAAAACC4AAAIAAABALwAAAgAAAHgvAAAACAAAEIcAAGLzAADokwAAhPMAAAAAAAACAAAACC4AAAIAAACgLwAAAAgAABCHAADJ8wAA6JMAAPPzAAAAAAAAAgAAAAguAAACAAAAoC8AAAAIAADokwAAOPQAAAAAAAACAAAACC4AAAIAAADoLwA
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 77 77 41 41 41 4d 51 41 41 41 41 41 41 67 41 41 32 51 41 41 41 4d 59 41 41 41 44 48 41 41 41 41 79 41 41 41 41 4d 6b 41 41 41 44 57 41 51 41 41 31 77 45 41 41 4e 67 42 41 41 41 42 41 67 41 41 32 51 45 41 41 41 49 43 41 41 41 44 41 67 41 41 41 41 41 41 41 48 67 6c 41 41 43 4f 41 41 41 41 6a 77 41 41 41 41 45 41 41 41 44 61 41 41 41 41 41 67 41 41 41 41 4d 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 45 41 41 41 41 42 41 41 41 41 41 67 41 41 41 41 4d 41 41 41 44 62 41 41 41 41 33 41 41 41 41 47 6f 41 41 41 41 45 41 67 41 41 51 51 41 41 41 41 55 43 41 41 41 47 41 67 41 41 42 77 49 41 41 41 67 43 41 41 41 4a 41 67 41 41 43 67 49 41 41 44 38 41 41 41 42 41 41 41 41 41 48 77 41 41 41 45 45 41 41 41 43 75 41 41 41 41 77 41 41 41 41 4c 41 41 41 41 41 67 41 41 41 Data Ascii: wwAAAMQAAAAAAgAA2QAAAMYAAADHAAAAyAAAAMkAAADWAQAA1wEAANgBAAABAgAA2QEAAAICAAADAgAAAAAAAHglAACOAAAAjwAAAAEAAADaAAAAAgAAAAMAAAABAAAAAgAAAAEAAAABAAAAAgAAAAMAAADbAAAA3AAAAGoAAAAEAgAAQQAAAAUCAAAGAgAABwIAAAgCAAAJAgAACgIAAD8AAABAAAAAHwAAAEEAAACuAAAAwAAAALAAAAAgAAA
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 57 41 51 41 41 46 6b 45 41 41 44 37 41 51 41 41 78 51 45 41 41 50 77 42 41 41 42 4f 41 51 41 41 66 41 45 41 41 41 41 41 41 41 44 6f 4e 51 41 41 56 67 51 41 41 46 63 45 41 41 42 59 42 41 41 41 57 51 51 41 41 50 30 42 41 41 44 46 41 51 41 41 78 67 45 41 41 45 34 42 41 41 42 39 41 51 41 41 41 41 41 41 41 50 67 31 41 41 42 57 42 41 41 41 56 77 51 41 41 46 67 45 41 41 42 5a 42 41 41 41 2f 67 45 41 41 4d 55 42 41 41 44 47 41 51 41 41 54 67 45 41 41 48 34 42 41 41 41 41 41 41 41 41 43 44 59 41 41 46 59 45 41 41 42 58 42 41 41 41 57 41 51 41 41 46 6b 45 41 41 44 2f 41 51 41 41 78 51 45 41 41 4d 59 42 41 41 42 4f 41 51 41 41 66 77 45 41 41 41 41 41 41 41 41 59 4e 67 41 41 56 67 51 41 41 46 63 45 41 41 42 59 42 41 41 41 57 51 51 41 41 41 41 43 41 41 44 46 41 51 41 Data Ascii: WAQAAFkEAAD7AQAAxQEAAPwBAABOAQAAfAEAAAAAAADoNQAAVgQAAFcEAABYBAAAWQQAAP0BAADFAQAAxgEAAE4BAAB9AQAAAAAAAPg1AABWBAAAVwQAAFgEAABZBAAA/gEAAMUBAADGAQAATgEAAH4BAAAAAAAACDYAAFYEAABXBAAAWAQAAFkEAAD/AQAAxQEAAMYBAABOAQAAfwEAAAAAAAAYNgAAVgQAAFcEAABYBAAAWQQAAAACAADFAQA
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 5a 53 42 7a 5a 57 78 6c 59 33 52 76 63 69 42 74 64 58 4e 30 49 47 4a 6c 49 48 42 68 63 33 4e 6c 5a 43 42 6d 62 33 49 67 59 48 4e 6c 62 47 56 6a 64 47 39 79 4c 57 46 77 63 47 56 75 5a 43 63 41 4a 48 4e 6c 62 47 56 6a 64 47 39 79 63 7a 6f 67 62 6e 56 73 62 43 42 70 63 79 42 75 62 33 51 67 59 53 42 32 59 57 78 70 5a 43 42 7a 5a 57 78 6c 59 33 52 76 63 6a 6f 67 61 58 51 67 62 58 56 7a 64 43 42 69 5a 53 42 68 49 48 4e 30 63 6d 6c 75 5a 79 77 4b 59 53 42 73 61 58 4e 30 49 47 39 6d 49 48 4e 30 63 6d 6c 75 5a 33 4d 73 49 47 39 79 49 47 45 67 62 47 6c 7a 64 43 42 76 5a 69 42 73 61 58 4e 30 63 79 42 76 5a 69 42 7a 64 48 4a 70 62 6d 64 7a 49 47 5a 76 63 69 41 6e 63 32 56 73 5a 57 4e 30 62 33 49 74 59 58 42 77 5a 57 35 6b 4a 77 42 44 59 57 34 6e 64 43 42 68 63 48 42 Data Ascii: ZSBzZWxlY3RvciBtdXN0IGJlIHBhc3NlZCBmb3IgYHNlbGVjdG9yLWFwcGVuZCcAJHNlbGVjdG9yczogbnVsbCBpcyBub3QgYSB2YWxpZCBzZWxlY3RvcjogaXQgbXVzdCBiZSBhIHN0cmluZywKYSBsaXN0IG9mIHN0cmluZ3MsIG9yIGEgbGlzdCBvZiBsaXN0cyBvZiBzdHJpbmdzIGZvciAnc2VsZWN0b3ItYXBwZW5kJwBDYW4ndCBhcHB
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 63 33 56 77 63 47 39 79 64 47 56 6b 49 47 78 76 59 32 46 73 5a 53 42 6d 62 33 49 67 63 33 52 68 62 6d 52 68 63 6d 51 67 61 57 35 77 64 58 51 41 54 6c 4e 30 4d 31 39 66 4d 6a 45 77 58 31 39 7a 64 47 52 70 62 6d 4a 31 5a 6b 6c 33 52 55 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 45 77 58 31 39 7a 64 47 52 70 62 6d 4a 31 5a 6b 6c 6a 52 55 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 64 6a 62 32 78 73 59 58 52 6c 53 57 4e 46 52 51 42 4f 55 33 51 7a 58 31 38 79 4e 6d 78 76 59 32 46 73 5a 54 56 6d 59 57 4e 6c 64 45 55 41 54 6c 4e 30 4d 31 39 66 4d 6a 64 6a 62 32 78 73 59 58 52 6c 53 58 64 46 52 51 41 6c 63 41 42 44 41 45 35 54 64 44 4e 66 58 7a 49 33 62 6e 56 74 58 32 64 6c 64 45 6c 6a 54 6c 4e 66 4d 54 6c 70 63 33 52 79 5a 57 46 74 59 6e 56 6d 58 32 6c 30 5a 58 4a 68 64 47 39 Data Ascii: c3VwcG9ydGVkIGxvY2FsZSBmb3Igc3RhbmRhcmQgaW5wdXQATlN0M19fMjEwX19zdGRpbmJ1Zkl3RUUATlN0M19fMjEwX19zdGRpbmJ1ZkljRUUATlN0M19fMjdjb2xsYXRlSWNFRQBOU3QzX18yNmxvY2FsZTVmYWNldEUATlN0M19fMjdjb2xsYXRlSXdFRQAlcABDAE5TdDNfXzI3bnVtX2dldEljTlNfMTlpc3RyZWFtYnVmX2l0ZXJhdG9
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 2c 38 35 2c 34 31 2c 34 33 2c 30 2c 31 32 30 2c 34 33 2c 38 2c 30 2c 31 30 32 2c 35 32 2c 32 2c 38 2c 31 32 30 2c 35 32 2c 36 2c 30 2c 38 32 2c 35 31 2c 32 2c 30 2c 31 30 36 2c 35 31 2c 35 31 2c 34 2c 31 39 2c 35 31 2c 35 31 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 31 2c 32 2c 30 2c 30 2c 31 32 31 2c 34 2c 39 2c 31 34 2c 32 35 2c 34 31 2c 34 2c 34 2c 38 32 2c 35 32 2c 34 31 2c 30 2c 32 36 2c 34 33 2c 35 32 2c 31 2c 38 35 2c 34 31 2c 34 33 2c 30 2c 31 32 30 2c 34 33 2c 34 2c 31 34 2c 31 30 32 2c 35 32 2c 34 2c 38 2c 31 32 30 2c 35 32 2c 32 2c 31 34 2c 38 32 2c 35 31 2c 34 2c 30 2c 31 30 36 2c 35 31 2c 35 31 2c 34 2c 31 39 2c 35 31 2c 35 31 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 31 2c 34 2c 30 2c 30 2c 31 31 39 2c 30 2c 32 35 32 2c 31 33 2c Data Ascii: ,85,41,43,0,120,43,8,0,102,52,2,8,120,52,6,0,82,51,2,0,106,51,51,4,19,51,51,46,135,52,4,0,51,2,0,0,121,4,9,14,25,41,4,4,82,52,41,0,26,43,52,1,85,41,43,0,120,43,4,14,102,52,4,8,120,52,2,14,82,51,4,0,106,51,51,4,19,51,51,46,135,52,4,0,51,4,0,0,119,0,252,13,
2025-04-02 20:02:33 UTC	284	IN	Data Raw: 2c 30 2c 32 35 2c 31 36 2c 31 36 2c 34 2c 32 35 2c 31 37 2c 31 37 2c 34 2c 35 34 2c 35 34 2c 31 36 2c 31 38 2c 32 38 2c 32 39 2c 30 2c 30 2c 38 32 2c 32 2c 33 2c 30 2c 38 35 2c 32 38 2c 32 2c 30 2c 31 32 31 2c 32 2c 37 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 30 37 2c 32 2c 38 2c 35 32 2c 32 35 2c 30 2c 32 2c 34 2c 38 32 2c 35 32 2c 30 2c 30 2c 32 35 2c 35 32 2c 35 32 2c 31 2c 38 35 2c 30 2c 35 32 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 33 32 2c 30 2c 30 2c 35 32 2c 30 2c 31 36 2c 34 31 2c 30 2c 30 2c 31 37 2c 32 37 2c 30 2c 32 35 2c 31 38 2c 31 36 2c 34 30 2c 31 31 36 2c 31 36 2c 31 37 2c 30 2c 32 35 2c 31 36 2c 31 36 2c 34 2c 32 35 2c 31 37 2c 31 37 2c 34 2c 35 34 2c 35 32 2c 31 36 2c 31 38 2c 31 30 34 2c 32 39 2c 30 2c 30 2c 31 2c 35 34 2c 31 31 38 2c 30 Data Ascii: ,0,25,16,16,4,25,17,17,4,54,54,16,18,28,29,0,0,82,2,3,0,85,28,2,0,121,2,7,0,1,52,0,0,107,2,8,52,25,0,2,4,82,52,0,0,25,52,52,1,85,0,52,0,1,52,0,0,132,0,0,52,0,16,41,0,0,17,27,0,25,18,16,40,116,16,17,0,25,16,16,4,25,17,17,4,54,52,16,18,104,29,0,0,1,54,118,0
2025-04-02 20:02:33 UTC	16384	IN	Data Raw: 2c 30 2c 30 2c 30 2c 34 31 2c 35 32 2c 30 2c 31 2c 35 32 2c 30 2c 30 2c 31 33 32 2c 30 2c 30 2c 35 32 2c 33 38 2c 35 32 2c 34 31 2c 31 2c 31 32 31 2c 35 32 2c 32 30 2c 30 2c 31 33 35 2c 32 2c 32 2c 30 2c 31 33 35 2c 35 32 2c 33 2c 30 2c 38 32 2c 34 2c 32 38 2c 30 2c 31 32 31 2c 34 2c 31 33 2c 30 2c 32 35 2c 34 31 2c 34 2c 34 2c 38 32 2c 35 32 2c 34 31 2c 30 2c 32 36 2c 34 32 2c 35 32 2c 31 2c 38 35 2c 34 31 2c 34 32 2c 30 2c 31 32 30 2c 34 32 2c 38 2c 30 2c 31 30 32 2c 35 32 2c 34 2c 38 2c 31 32 30 2c 35 32 2c 36 2c 30 2c 38 32 2c 35 34 2c 34 2c 30 2c 31 30 36 2c 35 34 2c 35 34 2c 34 2c 31 39 2c 35 34 2c 35 34 2c 34 36 2c 31 33 35 2c 35 32 2c 34 2c 30 2c 35 34 2c 34 2c 30 2c 30 2c 31 33 35 2c 35 32 2c 37 2c 30 2c 35 2c 30 2c 30 2c 30 2c 31 31 39 2c 30 2c Data Ascii: ,0,0,0,41,52,0,1,52,0,0,132,0,0,52,38,52,41,1,121,52,20,0,135,2,2,0,135,52,3,0,82,4,28,0,121,4,13,0,25,41,4,4,82,52,41,0,26,42,52,1,85,41,42,0,120,42,8,0,102,52,4,8,120,52,6,0,82,54,4,0,106,54,54,4,19,54,54,46,135,52,4,0,54,4,0,0,135,52,7,0,5,0,0,0,119,0,

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:33 UTC	452	OUT	GET /tms/user/api/projects/e58e38a1-9af1-47c9-bb58-5f670b752c62/surveys?languageId=0 HTTP/1.1 Host: av360.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:34 UTC	279	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:33 GMT Connection: close Content-Length: 511
2025-04-02 20:02:34 UTC	511	IN	Data Raw: 7b 22 73 75 72 76 65 79 22 3a 7b 22 53 69 74 65 4e 61 6d 65 22 3a 22 74 6d 73 22 2c 22 50 72 6f 6a 65 63 74 47 75 69 64 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 22 2c 22 50 72 69 6d 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 65 35 38 65 33 38 61 31 2d 39 61 66 31 2d 34 37 63 39 2d 62 62 35 38 2d 35 66 36 37 30 62 37 35 32 63 36 32 5f 5f 70 72 69 6d 61 72 79 2e 6a 70 67 22 2c 22 53 65 63 6f 6e 64 61 72 79 4c 6f 67 6f 4e 61 6d 65 22 3a 22 34 39 65 36 30 34 37 33 2d 63 64 65 35 2d 34 38 34 63 2d 61 63 30 34 2d 65 61 61 61 35 34 63 35 64 37 63 65 5f 5f 73 65 63 6f 6e 64 61 72 79 2e 6a 70 67 22 2c 22 50 72 6f 6a 65 63 74 54 79 70 65 22 3a 22 33 36 30 22 2c 22 4c 6f 67 69 6e 54 79 70 65 Data Ascii: {"survey":{"SiteName":"tms","ProjectGuid":"e58e38a1-9af1-47c9-bb58-5f670b752c62","PrimaryLogoName":"e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg","SecondaryLogoName":"49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg","ProjectType":"360","LoginType

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:33 UTC	667	OUT	GET /content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=769 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:34 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Tue, 12 Jul 2022 16:23:44 GMT Accept-Ranges: bytes ETag: "f4597ac1b96d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:33 GMT Connection: close Content-Length: 18129
2025-04-02 20:02:34 UTC	16115	IN	Data Raw: ff d8 ff e1 0f ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1d 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8f 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 36 3a 30 37 20 31 33 3a 33 37 3a 34 37 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 70 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CC (Windows)2019:06:07 13:37:47pd
2025-04-02 20:02:34 UTC	2014	IN	Data Raw: cf 71 35 ed 8a ed 6b ab 27 fb d7 6a 4e dc 8b 8a b4 89 fe 57 db ff 00 7e 24 d9 d6 3c ef e4 cb 7f 38 58 c4 82 6f ab 5f da 16 6b 4b 8a 72 5f 88 51 a3 94 75 f4 de 8b f6 7e 25 fb 59 c0 75 8d 17 54 d0 2f 5a c3 56 b7 6b 79 c6 e8 7a a4 8b fc f1 3f 47 4f f8 8f ed e6 fb 4d 97 1e a7 14 61 33 fb c8 0e 9b 4c 57 f1 c4 fd ee 8f 53 8b 2e 9b 2c a7 8c 5e 39 f4 e7 1d ff 00 86 41 34 f3 1f 93 ef b4 18 d3 51 b7 95 75 2d 0e 7f 8a db 55 b7 a3 27 13 f6 44 c1 6b e9 37 f9 5f dd b7 fc 26 12 e9 fa 8d fe 93 79 1e a1 a6 5c 3d b5 dc 5f 62 54 f0 ee ae a7 e1 74 3f b4 8f f0 e1 a7 96 fc d9 aa 79 66 47 5b 6e 37 3a 7c f5 17 7a 64 ff 00 14 12 86 d9 b6 35 f4 dc 8f db 5f f9 e8 af 87 97 7e 56 d2 3c cf 6b 26 b1 e4 36 22 68 c7 3b ef 2f 4a 40 9a 23 dc db 54 fc 49 fc a9 cb 83 7f ba df fd d5 97 f8 92 Data Ascii: q5k'jNW~$<8Xo_kKr_Qu~%YuT/ZVkyz?GOMa3LWS.,^9A4Qu-U'Dk7_&y\=_bTt?yfG[n7:\|zd5_~V<k&6"h;/J@#TI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:33 UTC	669	OUT	GET /content/images/site%20logos/tms/49e60473-cde5-484c-ac04-eaaa54c5d7ce__secondary.jpg?v=769 HTTP/1.1 Host: av360.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://av360.app/TMS/User/4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:34 UTC	270	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 21 Jan 2021 21:24:16 GMT Accept-Ranges: bytes ETag: "72f977c53bf0d61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:33 GMT Connection: close Content-Length: 14006
2025-04-02 20:02:34 UTC	14006	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0f 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 0a 52 65 73 6f 6c 75 74 69 6f 6e 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 18 46 58 20 47 6c 6f 62 61 6c 20 4c 69 67 68 74 69 6e 67 20 41 6e 67 6c 65 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 12 46 58 20 47 6c 6f 62 61 6c 20 41 6c 74 69 74 75 64 65 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 0b 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 0e 43 6f 70 79 72 69 67 68 74 20 46 6c 61 67 00 00 00 00 01 00 00 38 42 49 4d 27 10 14 4a 61 70 61 6e 65 73 65 20 50 72 69 6e 74 20 46 6c 61 67 73 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 Data Ascii: JFIFHHPhotoshop 3.08BIMResolutionHH8BIMFX Global Lighting Anglex8BIMFX Global Altitude8BIMPrint Flags8BIMCopyright Flag8BIM'Japanese Print Flags8BI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:34 UTC	460	OUT	GET /content/images/site%20logos/tms/e58e38a1-9af1-47c9-bb58-5f670b752c62__primary.jpg?v=769 HTTP/1.1 Host: av360.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 20:02:35 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Tue, 12 Jul 2022 16:23:44 GMT Accept-Ranges: bytes ETag: "f4597ac1b96d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 02 Apr 2025 20:02:34 GMT Connection: close Content-Length: 18129
2025-04-02 20:02:35 UTC	16115	IN	Data Raw: ff d8 ff e1 0f ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1d 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8f 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 36 3a 30 37 20 31 33 3a 33 37 3a 34 37 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 70 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CC (Windows)2019:06:07 13:37:47pd
2025-04-02 20:02:35 UTC	2014	IN	Data Raw: cf 71 35 ed 8a ed 6b ab 27 fb d7 6a 4e dc 8b 8a b4 89 fe 57 db ff 00 7e 24 d9 d6 3c ef e4 cb 7f 38 58 c4 82 6f ab 5f da 16 6b 4b 8a 72 5f 88 51 a3 94 75 f4 de 8b f6 7e 25 fb 59 c0 75 8d 17 54 d0 2f 5a c3 56 b7 6b 79 c6 e8 7a a4 8b fc f1 3f 47 4f f8 8f ed e6 fb 4d 97 1e a7 14 61 33 fb c8 0e 9b 4c 57 f1 c4 fd ee 8f 53 8b 2e 9b 2c a7 8c 5e 39 f4 e7 1d ff 00 86 41 34 f3 1f 93 ef b4 18 d3 51 b7 95 75 2d 0e 7f 8a db 55 b7 a3 27 13 f6 44 c1 6b e9 37 f9 5f dd b7 fc 26 12 e9 fa 8d fe 93 79 1e a1 a6 5c 3d b5 dc 5f 62 54 f0 ee ae a7 e1 74 3f b4 8f f0 e1 a7 96 fc d9 aa 79 66 47 5b 6e 37 3a 7c f5 17 7a 64 ff 00 14 12 86 d9 b6 35 f4 dc 8f db 5f f9 e8 af 87 97 7e 56 d2 3c cf 6b 26 b1 e4 36 22 68 c7 3b ef 2f 4a 40 9a 23 dc db 54 fc 49 fc a9 cb 83 7f ba df fd d5 97 f8 92 Data Ascii: q5k'jNW~$<8Xo_kKr_Qu~%YuT/ZVkyz?GOMa3LWS.,^9A4Qu-U'Dk7_&y\=_bTt?yfG[n7:\|zd5_~V<k&6"h;/J@#TI

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:48 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 20:02:48 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 20:02:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 01 Apr 2025 23:06:39 GMT ETag: "0x8DD7171DC6A9E79" x-ms-request-id: 86ebbf9d-801e-00a3-5f95-a37cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T200248Z-17cccd5449bk9jrqhC1EWRqvg400000008tg0000000060aw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 20:02:48 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2025-04-02 20:02:49 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:49 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 20:02:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 20:02:49 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: e9e264f8-a01e-0021-2aa1-a3814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T200249Z-17cccd5449bh49mhhC1EWRu74000000016m000000000bgey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 20:02:49 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:49 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 20:02:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 20:02:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 55cc964b-c01e-002b-6203-a46e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T200249Z-17cccd5449bzw64jhC1EWRz23400000016gg00000000hcd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 20:02:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Timestamp	Bytes transferred	Direction	Data
2025-04-02 20:02:49 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 20:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 20:02:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: d5f8a99e-b01e-001e-0999-a30214000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T200249Z-17cccd5449bvj9xqhC1EWRh59s00000016qg000000001tg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 20:02:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">