Create Interactive Tour

Windows Analysis Report
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449

Overview

General Information

Sample URL:	https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449
Analysis ID:	1376689
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Downloads suspicious files via Chrome

Creates files inside the system directory

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1804 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2520,i,11167505644179093914,5788870944029355948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• AV Detection
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449

Avira URL Cloud: detection malicious, Label: phishing

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.89
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.89
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/share/970099/df6652bb-f062-418f-aefb-6932f411b449 HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/share/970099/df6652bb-f062-418f-aefb-6932f411b449/preview/pdf/31 HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /app/error/503 HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/runtime.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/polyfills.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/vendor.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/main.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/theme-light.css HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/styles.css HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/assets/images/products-logos/kdrive1x.gif HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /ips-client_0.1.4.min.js HTTP/1.1Host: ips.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /current/init.js?version=latest&project=drive HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/scripts.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/assets/images/products-logos/kdrive1x.gif HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/suisse-intl-400-normal.woff2 HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/enGB.js HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-components/1/init?project=drive HTTP/1.1Host: welcome.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/json;charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://kdrive.infomaniak.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: analytics.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3XSec-WebSocket-Key: /VJ/f3uPbeLlothrnA7nSw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /api/web-components/1/init?project=drive HTTP/1.1Host: welcome.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /api/5/envelope/?sentry_key=712549bfb0ee41fe93015161024e8217&sentry_version=7 HTTP/1.1Host: sentry-kdrive.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /api/web-components/1/profile/config2 HTTP/1.1Host: welcome.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/json;charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://kdrive.infomaniak.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/infomaniak-global.ttf?mql8de HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/suisse-intl-700-normal.woff2 HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/common/main.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /api/web-components/1/profile/config2 HTTP/1.1Host: welcome.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: MrSfQmyjkjYWxiuakkBNkw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/module-common.esm.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/module-kdrive.esm.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-change-group/build/module-change-group.esm.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/module-header-title.esm.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-input-phone/build/module-input-phone.esm.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-f53cad2c.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/module-common.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-2d01425e.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/module-kdrive.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-change-group/build/p-c32a1e39.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-change-group/build/module-change-group.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/p-a6db2df3.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/module-header-title.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-input-phone/build/p-e9ee7773.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-input-phone/build/module-input-phone.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-a418fac6.entry.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-2d01425e.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-72159e6e.entry.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-f53cad2c.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://kdrive.infomaniak.com/app/error/503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/assets/favicon/favicon-16x16.png HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /images/icons-192.png HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/app/error/503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1
Source: global traffic	HTTP traffic detected: GET /31941390fbb28a24ba32ec283a352e06225e5f42/assets/favicon/favicon-16x16.png HTTP/1.1Host: assets.kdrive.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-679acfd3.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-72159e6e.entry.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-16bddcc5.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-72159e6e.entry.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-6e83aa8c.js HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://kdrive.infomaniak.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-72159e6e.entry.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons-192.png HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/support.svg HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/white-cross.svg HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: SCbCThrVAimg3FfNn1GtLA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/support.svg HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/white-cross.svg HTTP/1.1Host: web-components.storage.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: 6HVmRk84OmlcwKSjWhIm7A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /images/icons-512.png HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kdrive.infomaniak.com/app/error/503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1; IkChatBotBeep=0; IkChatBotUser=0
Source: global traffic	HTTP traffic detected: GET /images/icons-512.png HTTP/1.1Host: kdrive.infomaniak.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1; IkChatBotBeep=0; IkChatBotUser=0
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: jYun+qjGHGF+rRT1+cK9IQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: rjVh6q61R+g1ZBuGN18Oqg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: m/eBd7SeTk3Ecv98fz8JWw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: u+f5E/tXRf6cu64YhPuhcA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt
Source: global traffic	HTTP traffic detected: GET /ws HTTP/1.1Host: info-mq.infomaniak.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://kdrive.infomaniak.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0USec-WebSocket-Key: brN+RwvT2vpUY2RmQrQQMA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: mqtt

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: chromecache_101.2.dr	String found in binary or memory: https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/
Source: chromecache_96.2.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_96.2.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_96.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_120.2.dr	String found in binary or memory: https://google.com/recaptcha/api.js?render=explicit
Source: chromecache_120.2.dr	String found in binary or memory: https://hertzen.com
Source: chromecache_120.2.dr	String found in binary or memory: https://html2canvas.hertzen.com
Source: chromecache_96.2.dr	String found in binary or memory: https://piwik.org
Source: chromecache_96.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_118.2.dr	String found in binary or memory: https://www.infomaniak.com/es/ccgg/politica-de-confidencialidad
Source: chromecache_118.2.dr	String found in binary or memory: https://www.infomaniak.com/fr/cgv/politique-de-confidentialite

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49751 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Desktop\kDrive.lnk

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_1804_140996300

Jump to behavior

Source: classification engine

Classification label: mal52.win@16/45@36/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Desktop\kDrive.lnk

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2520,i,11167505644179093914,5788870944029355948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 --field-trial-handle=2520,i,11167505644179093914,5788870944029355948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: kDrive.lnk.0.dr	LNK file: ..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: kDrive.lnk0.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: kDrive.lnk1.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\kDrive.lnk			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449	3%	Virustotal		Browse
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
welcome.infomaniak.com	185.125.25.1	true	false	high
analytics.infomaniak.com	185.125.25.5	true	false	high
kdrive.infomaniak.com	45.157.188.28	true	false	high
accounts.google.com	172.253.122.84	true	false	high
assets.kdrive.infomaniak.com	45.157.188.28	true	false	high
info-mq.infomaniak.com	45.157.188.3	true	false	high
www.google.com	142.250.80.68	true	false	high
web-components.storage.infomaniak.com	185.125.25.5	true	false	high
clients.l.google.com	142.250.81.238	true	false	high
sentry-kdrive.infomaniak.com	185.125.24.210	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
ips.storage.infomaniak.com	185.125.25.5	true	false	high
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://info-mq.infomaniak.com/ws	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/assets/images/products-logos/kdrive1x.gif	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/infomaniak-global.ttf?mql8de	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-a418fac6.entry.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-16bddcc5.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-f53cad2c.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/common/main.js	false	high
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/support.svg	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/p-a6db2df3.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/module-common.esm.js	false	high
https://welcome.infomaniak.com/api/web-components/1/profile/config2	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-change-group/build/p-c32a1e39.js	false	high
https://analytics.infomaniak.com/matomo.php?action_name=kDrive&idsite=3&rec=1&r=777587&h=12&m=1&s=11&url=https%3A%2F%2Fkdrive.infomaniak.com%2Fapp%2Ferror%2F503&_id=a5d6c88f61c6e985&_idn=1&send_image=0&_refts=0&dimension1=-&dimension2=false&dimension3=false&pv_id=dmkh5J&pf_net=354&pf_srv=435&pf_tfr=4&pf_dm1=1698&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.css	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-2d01425e.js	false	high
https://analytics.infomaniak.com/matomo.php?action_name=kDrive&idsite=3&rec=1&r=499249&h=12&m=1&s=11&url=https%3A%2F%2Fkdrive.infomaniak.com%2Fapp%2Ferror%2F503&urlref=https%3A%2F%2Fkdrive.infomaniak.com%2Fapp%2Ferror%2F503&_id=a5d6c88f61c6e985&_idn=0&send_image=0&_refts=0&dimension1=-&dimension2=false&dimension3=false&pv_id=zQB5OS&pf_net=354&pf_srv=435&pf_tfr=4&pf_dm1=1698&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-input-phone/build/module-input-phone.esm.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/scripts.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/assets/icons/white-cross.svg	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/vendor.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-change-group/build/module-change-group.esm.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/enGB.js	false	high
https://analytics.infomaniak.com/matomo.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/polyfills.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/module-kdrive.esm.js	false	high
https://kdrive.infomaniak.com/manifest.json	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/module-header-title.esm.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/suisse-intl-400-normal.woff2	false	high
https://sentry-kdrive.infomaniak.com/api/5/envelope/?sentry_key=712549bfb0ee41fe93015161024e8217&sentry_version=7	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/main.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/suisse-intl-700-normal.woff2	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-6e83aa8c.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/assets/favicon/favicon-16x16.png	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/theme-light.css	false	high
https://web-components.storage.infomaniak.com/current/init.js?version=latest&project=drive	false	high
https://ips.storage.infomaniak.com/ips-client_0.1.4.min.js	false	high
https://welcome.infomaniak.com/api/web-components/1/init?project=drive	false	high
https://kdrive.infomaniak.com/app/error/503	false	high
https://kdrive.infomaniak.com/images/icons-512.png	false	high
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449/preview/pdf/31	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-input-phone/build/p-e9ee7773.js	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-679acfd3.js	false	high
https://kdrive.infomaniak.com/images/icons-192.png	false	high
https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-72159e6e.entry.js	false	high
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/runtime.js	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/	chromecache_101.2.dr	false	high
https://html2canvas.hertzen.com	chromecache_120.2.dr	false	high
https://piwik.org/free-software/bsd/	chromecache_96.2.dr	false	high
https://hertzen.com	chromecache_120.2.dr	false	high
https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers	chromecache_96.2.dr	false	high
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_96.2.dr	false	high
https://developer.matomo.org/api-reference/tracking-javascript	chromecache_96.2.dr	false	high
https://piwik.org	chromecache_96.2.dr	false	high
https://www.infomaniak.com/fr/cgv/politique-de-confidentialite	chromecache_118.2.dr	false	high
https://www.infomaniak.com/es/ccgg/politica-de-confidencialidad	chromecache_118.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.68	www.google.com	United States	15169	GOOGLEUS	false
45.157.188.28	kdrive.infomaniak.com	Switzerland	29222	INFOMANIAK-ASCH	false
185.125.25.1	welcome.infomaniak.com	Switzerland	29222	INFOMANIAK-ASCH	false
185.125.25.5	analytics.infomaniak.com	Switzerland	29222	INFOMANIAK-ASCH	false
172.253.122.84	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.81.238	clients.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
45.157.188.3	info-mq.infomaniak.com	Switzerland	29222	INFOMANIAK-ASCH	false
185.125.24.210	sentry-kdrive.infomaniak.com	Switzerland	29222	INFOMANIAK-ASCH	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1376689
Start date and time:	2024-01-18 12:00:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@16/45@36/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.195, 34.104.35.123, 20.12.23.50, 104.102.251.17, 104.102.251.80, 104.102.251.57, 192.229.211.108, 20.242.39.171, 20.3.187.198, 20.114.59.183, 142.250.176.195, 40.68.123.157
Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 18 10:01:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2685
Entropy (8bit):	3.965746305227502
Encrypted:	false
SSDEEP:	48:8PdFTNFyHPdAKZdA1KO9ehxziZUkcqehxeylrl:8TvGzZreyh
MD5:	E7EF1CBB7CCB9CEA7A0FD4D393E8C92F
SHA1:	B4BCF535592A09F79B3E927D709A37BEC7C6FF49
SHA-256:	826D726B499F1C0685EE455D2E83C3006D59002A95EEFA5CD2146BE07E3F17DD
SHA-512:	D4C4DDD46020C5E51D272E44198048241D2D17E13CA5C0690B2FFE610F3BA8777FF3CBB5D1A173206D1D4476E42A8C0C7699A9A748857DDF7CFB46B725C2C272
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... .0..I..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DW.V..PROGRA~1..t......O.I2X X....B...............J.....i...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V2X X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V2X X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V2X X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V2X3X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..V.....\.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 18, 2024 12:01:03.561248064 CET	51362	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:03.561556101 CET	51534	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:03.562160969 CET	51831	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:03.562540054 CET	55143	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:03.643496990 CET	53	54761	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:03.649497986 CET	53	51831	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:03.649667978 CET	53	51534	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:03.650216103 CET	53	51362	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:03.650836945 CET	53	55143	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:04.202717066 CET	53	53460	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:05.525441885 CET	58892	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:05.525899887 CET	54464	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:05.613737106 CET	53	58892	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:05.793346882 CET	53	54464	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.537873030 CET	60348	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.538603067 CET	64523	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.586513996 CET	50521	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.591506958 CET	53300	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.596731901 CET	51725	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.597297907 CET	55212	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.602036953 CET	52484	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.602861881 CET	55253	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:07.626213074 CET	53	64523	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.626271963 CET	53	60348	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.676314116 CET	53	50521	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.766760111 CET	53	51725	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.766818047 CET	53	55212	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.771220922 CET	53	52484	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.790613890 CET	53	55253	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:07.841386080 CET	53	53300	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:08.717796087 CET	58940	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:08.718805075 CET	64239	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:08.969571114 CET	53	58940	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:08.969604969 CET	53	64239	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:09.419405937 CET	63499	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:09.419876099 CET	54155	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:09.589061022 CET	53	54155	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:09.618280888 CET	53	63499	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:10.831958055 CET	54290	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:10.832516909 CET	63400	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:10.906227112 CET	49712	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:10.906455994 CET	60506	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:10.967530012 CET	57672	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:10.968338013 CET	61002	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:11.001169920 CET	53	54290	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.076611996 CET	53	60506	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.076827049 CET	53	49712	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.082248926 CET	53	63400	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.136548042 CET	53	57672	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.137552977 CET	53	61002	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.743288994 CET	58123	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:11.744034052 CET	49297	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:11.912590981 CET	53	58123	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:11.913235903 CET	53	49297	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:12.092319012 CET	63918	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:12.092833996 CET	61787	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:12.261125088 CET	53	63918	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:12.262181044 CET	53	61787	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:18.071971893 CET	60918	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:18.072280884 CET	57706	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:18.325603962 CET	53	60918	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:18.340584993 CET	53	57706	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:19.726893902 CET	56631	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:19.728136063 CET	57497	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:01:19.914391994 CET	53	56631	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:19.915487051 CET	53	57497	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:21.350567102 CET	53	51153	1.1.1.1	192.168.2.4
Jan 18, 2024 12:01:27.109323025 CET	138	138	192.168.2.4	192.168.2.255
Jan 18, 2024 12:01:40.246658087 CET	53	62913	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:02.940839052 CET	53	60179	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:02.988899946 CET	53	53459	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:13.048590899 CET	53248	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:02:13.048800945 CET	50282	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:02:13.217246056 CET	53	53248	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:13.217876911 CET	53	50282	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:30.572201014 CET	53	62576	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:32.515911102 CET	59602	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:02:32.516161919 CET	58264	53	192.168.2.4	1.1.1.1
Jan 18, 2024 12:02:32.603689909 CET	53	59602	1.1.1.1	192.168.2.4
Jan 18, 2024 12:02:32.604870081 CET	53	58264	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 18, 2024 12:01:05.793498039 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Jan 18, 2024 12:01:07.842447042 CET	192.168.2.4	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Jan 18, 2024 12:01:11.082340002 CET	192.168.2.4	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:03 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-18 11:01:03 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-18 11:01:04 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Jan 2024 11:01:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-_Fr4R14c8KNKAMp2dQl9Vg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-18 11:01:04 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-18 11:01:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:03 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:04 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-fjl53dyd5EMM2xhWyb8PJA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Jan 2024 11:01:03 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6226 X-Daystart: 10863 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-18 11:01:04 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 36 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 31 30 38 36 33 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6226" elapsed_seconds="10863"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-18 11:01:04 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-18 11:01:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:06 UTC	717	OUT	GET /app/share/970099/df6652bb-f062-418f-aefb-6932f411b449 HTTP/1.1 Host: kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:06 UTC	568	IN	HTTP/1.1 302 Found cache-control: must-revalidate, no-cache, no-store, private content-type: text/html; charset=UTF-8 date: Thu, 18 Jan 2024 11:01:06 GMT location: https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449/preview/pdf/31 server: Apache set-cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; expires=Thu, 18 Jan 2024 13:01:06 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; secure; httponly vary: Origin,Accept-Encoding content-length: 638 strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:06 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6b 64 72 69 76 65 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 2f 61 70 70 2f 73 68 61 72 65 2f 39 37 30 30 39 39 2f 64 66 36 36 35 32 62 62 2d 66 30 36 32 2d 34 31 38 66 2d 61 65 66 62 2d 36 39 33 32 66 34 31 31 62 34 34 39 2f 70 72 65 76 69 65 77 2f 70 64 66 2f 33 31 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449/preview/pdf/31'" /> <title>Redirecting to ht

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:07 UTC	737	OUT	GET /app/error/503 HTTP/1.1 Host: kdrive.infomaniak.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:07 UTC	2573	IN	HTTP/1.1 200 OK cache-control: must-revalidate, no-cache, no-store, private content-security-policy: default-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch; script-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://apis.google.com https://.intercom.io http://.intercom.io https://.intercomcdn.com http://.intercomcdn.com; font-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch data: https://fonts.gstatic.com https://.intercomcdn.com; style-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com; img-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch 'unsafe-inline' self data: blob: android-webview-video-poster https:// http://; object-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch; connect-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch ws://.infomaniak.ch:* ws://.infomaniak.com: wss://.infomaniak.ch: wss://.infomaniak.com: https://sessions.bugsnag.com https://notify.bugsnag.com https://.intercom.io http://.intercom.io wss://.intercom.io; child-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch https://accounts.google.com blob:; frame-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch https://accounts.google.com blob:; media-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch https://js.intercomcdn.com; worker-src https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://.infomaniak.ch data: blob:; frame-ancestors https://.infomaniak.com https://.infomaniak.ch http://.infomaniak.com http://*.infomaniak.ch; report-uri /csp-report; content-type: text/html; charset=UTF-8 date: Thu, 18 Jan 2024 11:01:07 GMT server: Apache set-cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; expires=Thu, 18 Jan 2024 13:01:07 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; secure; httponly vary: Origin,Accept-Encoding x-frame-options: DENY x-xss-protection: 1; mode=block transfer-encoding: chunked strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:07 UTC	1569	IN	Data Raw: 36 31 41 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6b 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6b 44 72 69 76 65 20 2d 20 49 6e 66 6f 6d 61 6e 69 61 6b 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 61A<!doctype html><html lang="en"><head> <meta charset="utf-8"> <title>kDrive</title> <meta name="description" content="kDrive - Infomaniak"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta name="viewport" cont
2024-01-18 11:01:07 UTC	3802	IN	Data Raw: 45 43 45 0d 0a 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6b 64 72 69 76 65 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 2f 33 31 39 34 31 33 39 30 66 62 62 32 38 61 32 34 62 61 33 32 65 63 32 38 33 61 33 35 32 65 30 36 32 32 35 65 35 66 34 32 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 0a 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 Data Ascii: ECE href="https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.css"/> <style> body { margin: 0; } .loader { position: absolute; width: 100%; hei

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:08 UTC	619	OUT	GET /31941390fbb28a24ba32ec283a352e06225e5f42/runtime.js HTTP/1.1 Host: assets.kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kdrive.infomaniak.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:08 UTC	657	IN	HTTP/1.1 200 OK access-control-allow-methods: GET access-control-allow-origin: * access-control-expose-headers: x-amz-server-side-encryption,x-amz-request-id,x-amz-id-2,* access-control-max-age: 3000 cache-control: max-age=2592000 content-type: application/javascript date: Thu, 18 Jan 2024 11:01:08 GMT etag: W/"00fea13f718b4e6e8ae2b83703fcfc01" last-modified: Tue, 16 Jan 2024 06:18:21 GMT server: nginx x-amz-request-id: tx00000eaa74f98721bce69-0065a8c418-462c282-ch-gva-nvme-d3 x-cache-status: HIT x-proxy-cache: MISS x-rgw-object-type: Normal transfer-encoding: chunked strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:08 UTC	3715	IN	Data Raw: 45 37 37 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 68 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 61 3d 68 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 68 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 76 2c 72 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f 74 20 62 Data Ascii: E77(()=>{"use strict";var e,v={},h={};function r(e){var a=h[e];if(void 0!==a)return a.exports;var t=h[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,r.amdD=function(){throw new Error("define cannot b

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:08 UTC	613	OUT	GET /ips-client_0.1.4.min.js HTTP/1.1 Host: ips.storage.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:08 UTC	431	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Jan 2024 11:01:08 GMT content-type: application/javascript content-length: 190437 last-modified: Tue, 10 May 2022 08:37:44 GMT x-rgw-object-type: Normal etag: "2cde6984849a3e1ee6d646c03b0075fd" x-amz-request-id: tx00000d1db97a18814e0ee-00658902e2-44a59f5-ch-gva-nvme-d3 x-proxy-cache: HIT accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:08 UTC	14600	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 7c 7c 65 28 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 70 61 72 65 6e 74 3a 72 7d 2c 74 2e 65 78 70 6f 72 74 73 29 2c 74 2e 65 78 70 6f 72 74 73 7d 7d 2c 72 3d 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3b 65 2e 65 78 70 6f 72 74 73 3d 64 2c 64 2e 52 65 61 64 61 62 6c 65 53 74 61 74 65 3d 70 2c 62 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e Data Ascii: !function(){var e,t=function(e){var t;return function(r){return t\|\|e(t={exports:{},parent:r},t.exports),t.exports}},r=t((function(e,t){(function(t,r){(function(){"use strict";var o;e.exports=d,d.ReadableState=p,b.EventEmitter;var s=function(e,t){return e.
2024-01-18 11:01:08 UTC	2920	IN	Data Raw: 69 73 2c 65 29 2c 65 26 26 21 31 3d 3d 3d 65 2e 72 65 61 64 61 62 6c 65 26 26 28 74 68 69 73 2e 72 65 61 64 61 62 6c 65 3d 21 31 29 2c 65 26 26 21 31 3d 3d 3d 65 2e 77 72 69 74 61 62 6c 65 26 26 28 74 68 69 73 2e 77 72 69 74 61 62 6c 65 3d 21 31 29 2c 74 68 69 73 2e 61 6c 6c 6f 77 48 61 6c 66 4f 70 65 6e 3d 21 30 2c 65 26 26 21 31 3d 3d 3d 65 2e 61 6c 6c 6f 77 48 61 6c 66 4f 70 65 6e 26 26 28 74 68 69 73 2e 61 6c 6c 6f 77 48 61 6c 66 4f 70 65 6e 3d 21 31 29 2c 74 68 69 73 2e 6f 6e 63 65 28 22 65 6e 64 22 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 61 6c 6c 6f 77 48 61 6c 66 4f 70 65 6e 7c 7c 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 65 6e 64 65 64 7c 7c 66 74 2e 6e 65 78 74 54 69 63 6b 28 70 2c 74 68 69 73 29 7d 66 Data Ascii: is,e),e&&!1===e.readable&&(this.readable=!1),e&&!1===e.writable&&(this.writable=!1),this.allowHalfOpen=!0,e&&!1===e.allowHalfOpen&&(this.allowHalfOpen=!1),this.once("end",f)}function f(){this.allowHalfOpen\|\|this._writableState.ended\|\|ft.nextTick(p,this)}f
2024-01-18 11:01:08 UTC	16320	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 65 73 74 72 6f 79 26 26 28 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 3d 65 2e 64 65 73 74 72 6f 79 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 66 69 6e 61 6c 26 26 28 74 68 69 73 2e 5f 66 69 6e 61 6c 3d 65 2e 66 69 6e 61 6c 29 29 2c 4a 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 72 2c 6e 2c 69 2c 6f 2c 73 29 7b 74 2e 77 72 69 74 65 6c 65 6e 3d 6e 2c 74 2e 77 72 69 74 65 63 62 3d 73 2c 74 2e 77 72 69 74 69 6e 67 3d 21 30 2c 74 2e 73 79 6e 63 3d 21 30 2c 72 3f 65 2e 5f 77 72 69 74 65 76 28 69 2c 74 2e 6f 6e 77 72 69 74 65 29 3a 65 2e 5f 77 72 69 74 65 28 69 2c 6f 2c 74 2e 6f 6e 77 72 69 74 65 29 2c 74 2e 73 79 6e 63 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6d Data Ascii: "==typeof e.destroy&&(this._destroy=e.destroy),"function"==typeof e.final&&(this._final=e.final)),Jt.call(this)}function b(e,t,r,n,i,o,s){t.writelen=n,t.writecb=s,t.writing=!0,t.sync=!0,r?e._writev(i,t.onwrite):e._write(i,o,t.onwrite),t.sync=!1}function m
2024-01-18 11:01:08 UTC	8500	IN	Data Raw: 62 6c 65 3d 21 31 2c 69 28 22 6f 6e 20 72 65 61 64 61 62 6c 65 22 2c 6f 2e 6c 65 6e 67 74 68 2c 6f 2e 72 65 61 64 69 6e 67 29 2c 6f 2e 6c 65 6e 67 74 68 3f 4d 28 74 68 69 73 29 3a 6f 2e 72 65 61 64 69 6e 67 7c 7c 74 2e 6e 65 78 74 54 69 63 6b 28 4e 2c 74 68 69 73 29 29 29 2c 6e 7d 2c 49 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 49 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 2c 49 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 6e 3d 50 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 72 29 3b 72 65 74 75 72 6e 22 72 65 61 64 61 62 6c 65 22 3d 3d 3d 65 26 26 74 2e 6e 65 78 74 54 69 63 6b Data Ascii: ble=!1,i("on readable",o.length,o.reading),o.length?M(this):o.reading\|\|t.nextTick(N,this))),n},I.prototype.addListener=I.prototype.on,I.prototype.removeListener=function(e,r){var n=P.prototype.removeListener.call(this,e,r);return"readable"===e&&t.nextTick
2024-01-18 11:01:08 UTC	5840	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 74 2c 72 3b 69 66 28 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 74 3d 74 68 69 73 2e 66 69 6c 6c 4c 61 73 74 28 65 29 29 29 72 65 74 75 72 6e 22 22 3b 72 3d 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 2c 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 3d 30 7d 65 6c 73 65 20 72 3d 30 3b 72 65 74 75 72 6e 20 72 3c 65 2e 6c 65 6e 67 74 68 3f 74 3f 74 2b 74 68 69 73 2e 74 65 78 74 28 65 2c 72 29 3a 74 68 69 73 2e 74 65 78 74 28 65 2c 72 29 3a 74 7c 7c 22 22 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 77 72 69 74 65 28 65 29 3a 22 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: th)return"";var t,r;if(this.lastNeed){if(void 0===(t=this.fillLast(e)))return"";r=this.lastNeed,this.lastNeed=0}else r=0;return r<e.length?t?t+this.text(e,r):this.text(e,r):t\|\|""},i.prototype.end=function(e){var t=e&&e.length?this.write(e):"";return this.
2024-01-18 11:01:08 UTC	16320	IN	Data Raw: 6f 6e 20 4d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 52 28 72 29 3b 69 66 28 6e 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 2e 70 72 65 66 69 6e 69 73 68 65 64 7c 7c 72 2e 66 69 6e 61 6c 43 61 6c 6c 65 64 7c 7c 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 5f 66 69 6e 61 6c 7c 7c 72 2e 64 65 73 74 72 6f 79 65 64 3f 28 72 2e 70 72 65 66 69 6e 69 73 68 65 64 3d 21 30 2c 65 2e 65 6d 69 74 28 22 70 72 65 66 69 6e 69 73 68 22 29 29 3a 28 72 2e 70 65 6e 64 69 6e 67 63 62 2b 2b 2c 72 2e 66 69 6e 61 6c 43 61 6c 6c 65 64 3d 21 30 2c 74 2e 6e 65 78 74 54 69 63 6b 28 41 2c 65 2c 72 29 29 29 7d 28 65 2c 72 29 2c 30 3d 3d 3d 72 2e 70 65 6e 64 69 6e 67 63 62 26 26 28 72 2e 66 69 6e 69 73 68 65 64 3d 21 30 2c 65 2e 65 6d 69 74 28 22 66 69 6e 69 Data Ascii: on M(e,r){var n=R(r);if(n&&(function(e,r){r.prefinished\|\|r.finalCalled\|\|("function"!=typeof e._final\|\|r.destroyed?(r.prefinished=!0,e.emit("prefinish")):(r.pendingcb++,r.finalCalled=!0,t.nextTick(A,e,r)))}(e,r),0===r.pendingcb&&(r.finished=!0,e.emit("fini
2024-01-18 11:01:08 UTC	15800	IN	Data Raw: 49 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 3b 69 66 28 72 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 49 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 72 3e 3e 3e 3d 30 2c 69 7c 7c 54 28 65 2c 30 2c 72 2c 34 29 2c 57 2e 77 72 69 74 65 28 65 2c 74 2c 72 2c 6e 2c 32 33 2c 34 29 2c 72 2b 34 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 72 3e 3e 3e 3d 30 2c 69 7c 7c 54 28 65 2c 30 2c 72 2c 38 29 2c 57 2e 77 72 69 74 65 28 65 2c 74 2c 72 2c 6e 2c 35 32 2c 38 29 2c 72 2b 38 7d 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3d 66 75 6e 63 Data Ascii: Index out of range");if(r<0)throw new RangeError("Index out of range")}function R(e,t,r,n,i){return t=+t,r>>>=0,i\|\|T(e,0,r,4),W.write(e,t,r,n,23,4),r+4}function A(e,t,r,n,i){return t=+t,r>>>=0,i\|\|T(e,0,r,8),W.write(e,t,r,n,52,8),r+8}r.prototype.slice=func
2024-01-18 11:01:08 UTC	536	IN	Data Raw: 4d 61 74 68 2e 4c 4e 32 29 2c 74 2a 28 75 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 73 29 29 3c 31 26 26 28 73 2d 2d 2c 75 2a 3d 32 29 2c 28 74 2b 3d 73 2b 68 3e 3d 31 3f 66 2f 75 3a 66 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 2d 68 29 29 2a 75 3e 3d 32 26 26 28 73 2b 2b 2c 75 2f 3d 32 29 2c 73 2b 68 3e 3d 6c 3f 28 61 3d 30 2c 73 3d 6c 29 3a 73 2b 68 3e 3d 31 3f 28 61 3d 28 74 2a 75 2d 31 29 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 69 29 2c 73 2b 3d 68 29 3a 28 61 3d 74 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 68 2d 31 29 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 69 29 2c 73 3d 30 29 29 3b 69 3e 3d 38 3b 65 5b 72 2b 70 5d 3d 32 35 35 26 61 2c 70 2b 3d 64 2c 61 2f 3d 32 35 36 2c 69 2d 3d 38 29 3b 66 6f 72 28 73 3d 73 3c 3c 69 7c 61 2c 63 2b 3d 69 3b 63 3e 30 3b 65 5b 72 2b 70 Data Ascii: Math.LN2),t(u=Math.pow(2,-s))<1&&(s--,u=2),(t+=s+h>=1?f/u:fMath.pow(2,1-h))u>=2&&(s++,u/=2),s+h>=l?(a=0,s=l):s+h>=1?(a=(tu-1)Math.pow(2,i),s+=h):(a=tMath.pow(2,h-1)Math.pow(2,i),s=0));i>=8;e[r+p]=255&a,p+=d,a/=256,i-=8);for(s=s<<i\|a,c+=i;c>0;e[r+p
2024-01-18 11:01:08 UTC	48	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c Data Ascii: (e,t,r){return t in e?Object.defineProperty(e,t,
2024-01-18 11:01:08 UTC	15744	IN	Data Raw: 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 76 61 72 20 51 2c 24 2c 59 3d 67 28 7b 7d 29 2e 42 75 66 66 65 72 2c 47 3d 48 2e Data Ascii: {value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function z(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}var Q,$,Y=g({}).Buffer,G=H.

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:08 UTC	645	OUT	GET /current/init.js?version=latest&project=drive HTTP/1.1 Host: web-components.storage.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:08 UTC	513	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Jan 2024 11:01:08 GMT content-type: application/javascript content-length: 6953 last-modified: Thu, 18 Jan 2024 10:57:25 GMT x-rgw-object-type: Normal etag: "cdc2424197699acb093132e66c93f3ee" cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 x-amz-request-id: tx000005b0118ae5df3d1e2-0065a904f4-46cd5d0-ch-gva-nvme-d3 x-proxy-cache: BYPASS accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:08 UTC	3229	IN	Data Raw: 76 61 72 20 61 3d 27 62 33 31 66 63 61 32 31 61 32 31 61 34 65 64 33 38 35 64 38 32 30 63 31 30 36 30 66 62 38 62 38 62 64 37 38 37 31 39 30 27 3b 77 69 6e 64 6f 77 2e 72 65 61 64 79 48 61 6e 64 6c 65 72 73 3d 5b 5d 3b 77 69 6e 64 6f 77 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 20 62 28 41 29 7b 77 69 6e 64 6f 77 2e 72 65 61 64 79 48 61 6e 64 6c 65 72 73 2e 70 75 73 68 28 41 29 3b 68 61 6e 64 6c 65 53 74 61 74 65 28 29 7d 3b 77 69 6e 64 6f 77 2e 68 61 6e 64 6c 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 69 66 28 5b 27 69 6e 74 65 72 61 63 74 69 76 65 27 2c 27 63 6f 6d 70 6c 65 74 65 27 5d 2e 69 6e 64 65 78 4f 66 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 3e 2d 31 29 77 68 69 6c 65 20 28 77 69 6e 64 6f 77 2e 72 65 61 Data Ascii: var a='b31fca21a21a4ed385d820c1060fb8b8bd787190';window.readyHandlers=[];window.ready=function b(A){window.readyHandlers.push(A);handleState()};window.handleState=function _(){if(['interactive','complete'].indexOf(document.readyState)>-1)while (window.rea
2024-01-18 11:01:08 UTC	3724	IN	Data Raw: 72 6e 2c 20 64 69 65 73 65 20 46 75 6e 6b 74 69 6f 6e 20 7a 75 20 6e 75 74 7a 65 6e 2e 20 42 69 74 74 65 20 6e 65 68 6d 65 6e 20 53 69 65 20 69 6d 20 5a 77 65 69 66 65 6c 73 66 61 6c 6c 20 c3 bc 62 65 72 20 64 69 65 20 57 65 62 73 69 74 65 20 73 75 70 70 6f 72 74 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 20 4b 6f 6e 74 61 6b 74 20 6d 69 74 20 75 6e 73 20 61 75 66 2e 27 2c 65 73 3a 27 4c 45 45 52 20 41 4e 54 45 53 20 44 45 20 55 54 49 4c 49 5a 41 52 20 4c 41 20 43 4f 4e 53 4f 4c 41 3a 20 73 69 20 61 6c 67 75 69 65 6e 20 74 65 20 69 6e 76 69 74 61 20 61 20 63 6f 70 69 61 72 20 79 20 70 65 67 61 72 20 61 6c 67 6f 20 61 71 75 c3 ad 20 70 61 72 61 20 61 63 74 69 76 61 72 20 75 6e 61 20 66 75 6e 63 69 c3 b3 6e 20 75 20 6f 74 72 61 20 63 6f 73 61 2c 20 74 65 Data Ascii: rn, diese Funktion zu nutzen. Bitte nehmen Sie im Zweifelsfall ber die Website support.infomaniak.com Kontakt mit uns auf.',es:'LEER ANTES DE UTILIZAR LA CONSOLA: si alguien te invita a copiar y pegar algo aqu para activar una funcin u otra cosa, te

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-18 11:01:08 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=80038 Date: Thu, 18 Jan 2024 11:01:08 GMT Connection: close X-CID: 2

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	118413
Entropy (8bit):	4.79658869882714
Encrypted:	false
SSDEEP:	1536:on7WlHfoB+xQF9TxdFDWb7hImqEL82SoukEab9IqTenPPyOB:YWlH3TTenPPyOB
MD5:	C98682AF78316AB1248D133DB57E648D
SHA1:	EDDE03E38E69022BB7CA9C1CCDA27627A8813A88
SHA-256:	BD0F54604288819F12874CF4268D4F93BF8EA5303883A0BBD47C72E1499EF7AF
SHA-512:	FA8124EA9CBB5EA201B34DB4F8AAD5424D1465B0A951BBF9EAC457F02B4E733FCFA9372D38C53042F801C5F8BFBD3E21C745A5894E8FB52901B952E1DADFE63C
Malicious:	false
Reputation:	low
URL:	https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/theme-light.css
Preview:	.fontTinySmall{font-size:12px}.fontTiny{font-size:11px}.fontSmall{font-size:13px}.fontBase{font-size:14px}.fontMediumSmall{font-size:16px}.fontMedium{font-size:18px}.fontMediumLarge{font-size:20px}.fontHuge{font-size:35px}.fontxlHuge{font-size:70px}.btn-block{width:100%}.block-buttons{width:100%;display:block}@media (min-width: 768px){.block-buttons{display:flex}.block-buttons--center{justify-content:center}}.block-buttons button,.block-buttons a{display:block;margin-bottom:10px}@media (min-width: 768px){.block-buttons button,.block-buttons a{display:inline-block;margin-bottom:0;width:auto}}.block-buttons button.btn-block,.block-buttons a.btn-block{width:100%}.block-buttons button:not(:last-of-type),.block-buttons button:not(:last-child),.block-buttons a:not(:last-of-type),.block-buttons a:not(:last-child){margin-right:8px}@media (max-width: 991.98px){.block-buttons .mat-form-field{width:100%}}@media (max-width: 991.98px){.block-buttons button,.block-buttons a{width:100%}}@keyframes ik

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10860)
Category:	downloaded
Size (bytes):	11833
Entropy (8bit):	5.190189255141947
Encrypted:	false
SSDEEP:	192:n+MfYfUEkvcq+GT4X/NVj+NO4sck+3WtOcnBulTxWcnS5rHKMlWev9OPr6Gq02Qm:n+MfYfUEkvc1GEX/NVqNO4sck8WkcnB/
MD5:	4FD801CC7F12C353DAC396249BD5044D
SHA1:	4FE15D895EAD2F8A9088A61DC05B541B4EC9DBAC
SHA-256:	3B9F34DB17513E181422C7D2C8BE67D7937A288255C1ACD1AF0EDB8E6605B7EB
SHA-512:	0F5455B016BEE340EFE1BFA2061863171B0A0F068125E3B35022F506485096B771836470E798A97EB32834C0296D69B5B3D9D39949E72A4F32CC654B482AE58D
Malicious:	false
Reputation:	low
URL:	https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-header-title/build/p-a6db2df3.js
Preview:	const t="module-header-title";let e;let n;let s=false;let o=false;const c=t=>{const e=new URL(t,bt.t);return e.origin!==wt.location.origin?e.href:e.pathname};const l=(t,e="")=>{{return()=>{}}};const i=(t,e)=>{{return()=>{}}};const f="{visibility:hidden}.hydrated{visibility:inherit}";const r={};const u="http://www.w3.org/2000/svg";const a="http://www.w3.org/1999/xhtml";const d=t=>t!=null;const h=t=>{t=typeof t;return t==="object"\|\|t==="function"};function y(t){var e,n,s;return(s=(n=(e=t.head)===null\|\|e===void 0?void 0:e.querySelector('meta[name="csp-nonce"]'))===null\|\|n===void 0?void 0:n.getAttribute("content"))!==null&&s!==void 0?s:undefined}const p=(t,e,...n)=>{let s=null;let o=false;let c=false;const l=[];const i=e=>{for(let n=0;n<e.length;n++){s=e[n];if(Array.isArray(s)){i(s)}else if(s!=null&&typeof s!=="boolean"){if(o=typeof t!=="function"&&!h(s)){s=String(s)}if(o&&c){l[l.length-1].o+=s}else{l.push(o?m(null,s):s)}c=o}}};i(n);if(e){{const t=e.className\|\|e.class;if(t){e.class=typeof

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:09 UTC	643	OUT	GET /31941390fbb28a24ba32ec283a352e06225e5f42/scripts.js HTTP/1.1 Host: assets.kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:09 UTC	469	IN	HTTP/1.1 200 OK cache-control: max-age=2592000 content-type: application/javascript date: Thu, 18 Jan 2024 11:01:09 GMT etag: W/"23e6919d56a8845dde16b7b04b88f79f" last-modified: Tue, 16 Jan 2024 06:18:21 GMT server: nginx x-amz-request-id: tx0000063c51ac8b3b00609-0065a8c42e-462c282-ch-gva-nvme-d3 x-cache-status: HIT x-proxy-cache: MISS x-rgw-object-type: Normal transfer-encoding: chunked strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:09 UTC	3628	IN	Data Raw: 45 32 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6b 2c 41 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 41 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 41 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 50 69 63 6b 72 3d 41 28 29 3a 6b 2e 50 69 63 6b 72 3d 41 28 29 7d 28 73 65 6c 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6b 3d 7b 64 3a 28 6c 2c 74 29 3d 3e 7b 66 Data Ascii: E25!function(k,A){"object"==typeof exports&&"object"==typeof module?module.exports=A():"function"==typeof define&&define.amd?define([],A):"object"==typeof exports?exports.Pickr=A():k.Pickr=A()}(self,function(){return(()=>{"use strict";var k={d:(l,t)=>{f
2024-01-18 11:01:09 UTC	16068	IN	Data Raw: 33 45 42 43 0d 0a 70 5b 30 5d 2f 32 35 35 2c 6d 3d 70 5b 31 5d 2f 32 35 35 2c 68 3d 70 5b 32 5d 2f 32 35 35 2c 64 3d 77 28 31 2d 75 2c 31 2d 6d 2c 31 2d 68 29 3b 72 65 74 75 72 6e 5b 31 30 30 2a 28 31 3d 3d 3d 64 3f 30 3a 28 31 2d 75 2d 64 29 2f 28 31 2d 64 29 29 2c 31 30 30 2a 28 31 3d 3d 3d 64 3f 30 3a 28 31 2d 6d 2d 64 29 2f 28 31 2d 64 29 29 2c 31 30 30 2a 28 31 3d 3d 3d 64 3f 30 3a 28 31 2d 68 2d 64 29 2f 28 31 2d 64 29 29 2c 31 30 30 2a 64 5d 7d 28 6f 2e 68 2c 6f 2e 73 2c 6f 2e 76 29 3b 72 65 74 75 72 6e 20 69 2e 74 6f 53 74 72 69 6e 67 3d 72 28 69 2c 73 3d 3e 60 63 6d 79 6b 28 24 7b 73 5b 30 5d 7d 25 2c 20 24 7b 73 5b 31 5d 7d 25 2c 20 24 7b 73 5b 32 5d 7d 25 2c 20 24 7b 73 5b 33 5d 7d 25 29 60 29 2c 69 7d 2c 74 6f 48 45 58 41 28 29 7b 63 6f 6e 73 Data Ascii: 3EBCp[0]/255,m=p[1]/255,h=p[2]/255,d=w(1-u,1-m,1-h);return[100(1===d?0:(1-u-d)/(1-d)),100(1===d?0:(1-m-d)/(1-d)),100(1===d?0:(1-h-d)/(1-d)),100d]}(o.h,o.s,o.v);return i.toString=r(i,s=>`cmyk(${s[0]}%, ${s[1]}%, ${s[2]}%, ${s[3]}%)`),i},toHEXA(){cons
2024-01-18 11:01:09 UTC	4693	IN	Data Raw: 31 32 34 38 0d 0a 7b 63 6f 6e 73 74 7b 5f 73 77 61 74 63 68 43 6f 6c 6f 72 73 3a 6e 2c 5f 72 6f 6f 74 3a 72 7d 3d 74 68 69 73 2c 6f 3d 52 28 2e 2e 2e 65 29 2c 69 3d 42 28 60 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 73 74 79 6c 65 3d 22 2d 2d 70 63 72 2d 63 6f 6c 6f 72 3a 20 24 7b 6f 2e 74 6f 52 47 42 41 28 29 2e 74 6f 53 74 72 69 6e 67 28 30 29 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 74 68 69 73 2e 5f 74 28 22 62 74 6e 3a 73 77 61 74 63 68 22 29 7d 22 2f 3e 60 29 3b 72 65 74 75 72 6e 20 72 2e 73 77 61 74 63 68 65 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 6e 2e 70 75 73 68 28 7b 65 6c 3a 69 2c 63 6f 6c 6f 72 3a 6f 7d 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 42 69 6e 64 69 6e 67 73 2e 70 75 73 68 28 76 28 69 2c 22 Data Ascii: 1248{const{_swatchColors:n,_root:r}=this,o=R(...e),i=B(`<button type="button" style="--pcr-color: ${o.toRGBA().toString(0)}" aria-label="${this._t("btn:swatch")}"/>`);return r.swatches.appendChild(i),n.push({el:i,color:o}),this._eventBindings.push(v(i,"

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-18 11:01:09 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=80016 Date: Thu, 18 Jan 2024 11:01:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-18 11:01:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:09 UTC	693	OUT	GET /31941390fbb28a24ba32ec283a352e06225e5f42/suisse-intl-400-normal.woff2 HTTP/1.1 Host: assets.kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kdrive.infomaniak.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://assets.kdrive.infomaniak.com/31941390fbb28a24ba32ec283a352e06225e5f42/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:10 UTC	645	IN	HTTP/1.1 200 OK access-control-allow-methods: GET access-control-allow-origin: * access-control-expose-headers: x-amz-server-side-encryption,x-amz-request-id,x-amz-id-2,* access-control-max-age: 3000 cache-control: max-age=2592000 content-type: font/woff2 date: Thu, 18 Jan 2024 11:01:10 GMT etag: W/"b5c7cf1c74aa9b19421670f7e0986d67" last-modified: Tue, 16 Jan 2024 06:18:21 GMT server: nginx x-amz-request-id: tx00000026a3b020ee758b4-0065a8c3f7-462c282-ch-gva-nvme-d3 x-cache-status: HIT x-proxy-cache: MISS x-rgw-object-type: Normal transfer-encoding: chunked strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:10 UTC	3452	IN	Data Raw: 44 37 35 0d 0a 77 4f 46 32 00 01 00 00 00 01 0a dc 00 13 00 00 00 02 f3 90 00 01 0a 71 00 02 7f ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 82 4c 1b 81 e4 2e 1c c8 76 14 89 5f 06 60 00 98 14 08 24 09 82 73 11 14 0a 87 92 1c 86 a2 22 12 81 b9 28 01 36 02 24 03 a6 6c 0b 93 38 00 04 20 05 86 24 07 20 0c 81 37 5b 98 b0 92 0d 99 32 76 7d 1e 1a 00 61 ce 31 d1 10 b5 73 b4 fd 57 05 38 95 05 e5 06 6e c8 86 07 bd 55 76 8e 7e d0 b9 0f 6b 55 be 1b 38 37 27 dc b8 95 9e db b6 57 64 c8 85 85 ec ff ff ff ff ff ff ff f7 25 1d e2 2a d0 2d 50 5b 77 2e af 02 9a 66 1e a3 4c b9 54 85 46 cd cc 4c 16 ba 2b 83 19 32 1a 72 34 57 2a e2 68 3e 99 4c 67 65 9e 51 a4 cf cd 29 9d 26 16 4b c4 ca d5 5a b4 d5 46 b8 30 39 91 71 3d 60 2b 53 d9 81 94 69 8a 3d a5 ed b4 64 Data Ascii: D75wOF2qL.v_`$s"(6$l8 $ 7[2v}a1sW8nUv~kU87'Wd%-P[w.fLTFL+2r4Wh>LgeQ)&KZF09q=`+Si=d
2024-01-18 11:01:10 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a ec d2 28 5b a1 24 7d a6 48 4f b4 91 45 b7 67 90 e4 ea 13 6b 4a aa 36 a1 07 5e e4 6c f8 cb 18 d9 60 11 1b 57 3b a7 1e 91 b8 4d 49 bc 51 b2 dc fc b6 33 93 bc 13 92 e6 6b 06 69 56 58 b3 d9 e7 ec de 15 40 8b 98 52 ca b4 4a a3 75 21 9a b4 35 4e bb c2 f4 31 90 0f ee e6 d8 b4 8c e9 b8 ac 13 29 6d 4d cb c3 66 95 b0 70 d7 58 66 31 8b 60 31 eb 24 94 d4 52 f9 76 d0 4d 2f 58 55 cc ee ae b8 aa 4d 64 63 51 85 15 94 da d3 14 32 9c 12 75 41 ea 54 aa 21 8d e6 43 e5 88 1a 4f 22 2b 2a 0b 59 b4 c0 4c 2a d2 a9 87 cc cc 7a 01 6b dc 73 6d 64 46 e1 22 b2 72 fa 2c 77 50 72 a4 45 8d 5e c8 ea a4 53 99 08 45 6f b2 ce 97 07 fa ea 7c b2 15 14 4f 17 86 bd a8 78 23 fd 52 16 1d bd 26 15 25 6a 93 ac d5 6a cc 25 65 52 0c 08 82 8e da 08 aa 1e 9a 5e 78 fe 7c 8a 31 b2 c5 45 Data Ascii: 3FC0([$}HOEgkJ6^l`W;MIQ3kiVX@RJu!5N1)mMfpXf1`1$RvM/XUMdcQ2uAT!CO"+YLzksmdF"r,wPrE^SEo\|Ox#R&%jj%eR^x\|1E
2024-01-18 11:01:10 UTC	2667	IN	Data Raw: 41 36 34 0d 0a ee e2 47 22 96 89 41 be fd 2a 78 ac a2 69 20 e3 95 e2 9b ed be 5d 78 cd f5 23 77 73 9c 42 47 2a 7a f8 37 71 ea 93 f3 19 5c e1 0b c5 78 ed 1e da 0b 1e 10 96 9d 72 ac 5b c1 6f a7 ab 12 59 cc ba 65 9b 30 79 97 b9 fa 80 da 9c e6 fd fd 9f d2 c2 4d fe b9 81 cb 1a 08 a3 8b 9c ee d9 a7 33 82 8d eb be 0e 9c 93 14 49 54 ba cb ea 5c 51 99 08 d7 63 b8 33 03 59 19 7d 41 1f 20 06 7b dd 47 15 50 46 52 bc 94 b8 c9 1d 2a 49 fa 93 a3 ce 7e f3 8d e6 bc 21 28 02 49 71 23 db 88 e7 09 23 13 ae 4f 5b 5f 80 63 43 11 9d d4 bf b9 ee 5f ca 82 7a 44 f3 6a 83 16 d7 3f 03 ee a4 84 80 0c 55 8b b4 d6 60 50 67 dd 90 b1 3d af 13 c2 3e f5 30 d4 24 94 2a e9 d3 15 69 9c 74 35 8f fb 8e 8c 10 c8 9a 0b 2d f5 b0 86 c6 a3 82 7a b1 06 13 d0 16 f3 53 99 98 0a bb de 21 c3 3c 80 d3 65 Data Ascii: A64G"Axi ]x#wsBGz7q\xr[oYe0yM3IT\Qc3Y}A {GPFRI~!(Iq##O[_cC_zDj?U`Pg=>0$it5-zS!<e
2024-01-18 11:01:10 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 43 93 5b bd fc ce d5 b8 be 63 e4 1e 23 3a a8 8d 1f 64 39 f5 66 f1 0e 75 d1 ac 3e e4 9c 3c 85 17 36 de 59 90 c0 5b a6 27 17 be 7b 57 cc 7d e5 6e 15 69 f3 99 dc 1a e8 4c 61 75 cd d0 ac 3f ce ef cc db 13 6b eb f3 42 15 71 42 fa f7 17 f5 96 36 18 4b 86 1d 79 2d ec 39 6e 89 46 9d 55 39 5a 02 e0 5f 4a 99 f3 78 46 06 1a 77 21 07 89 62 31 17 55 44 c6 3c e5 77 99 22 32 c7 f9 c4 f8 bc 27 95 c1 4b 35 d8 3c c2 de 05 da 4a cb 36 8e e6 c9 b1 12 17 45 d3 e8 b2 17 37 76 61 c8 eb be 91 45 e4 bd 8c b9 a7 d7 94 c6 27 1e 34 45 30 69 05 88 23 2d 47 b5 12 74 ae 07 fc 85 90 0d cd a5 14 52 67 25 02 56 11 70 17 ce 7c 02 f8 89 72 ed 79 35 e3 26 d1 e3 1f 85 f7 76 39 f5 31 e5 63 39 7e 14 09 d8 db 23 d1 07 e7 61 a5 21 6d c5 63 04 75 1a 8d 3b ea 60 76 94 b4 6b f9 95 Data Ascii: 3FB8C[c#:d9fu><6Y['{W}niLau?kBqB6Ky-9nFU9Z_JxFw!b1UD<w"2'K5<J6E7vaE'4E0i#-GtRg%Vp\|ry5&v91c9~#a!mcu;`vk
2024-01-18 11:01:10 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 2b 91 60 9c 5b 2f 6f f8 e6 ed 49 83 9b 76 af 3c c9 7f 5c f9 bb e2 e5 ab e2 7e 7a 6b 4a 14 65 3d f1 77 1f 5e 06 6a 06 f2 ee e7 5d 37 e0 4b 1b 75 0a 31 f6 e2 ac 46 a4 c1 1e 39 f5 f1 f5 3a 52 f5 88 ea 8c ed fe 6f 46 f9 7a e6 df 98 e2 f3 cb 00 82 b6 bc dd 59 45 12 70 1d f8 05 78 27 cf a0 e8 68 74 af e0 c4 09 e6 f1 c6 ec 5f 6f ff cc 9e c2 d4 f3 e6 7a cf ad 67 3f 63 6d 7d d8 60 29 cf ca c1 02 06 28 96 1b a6 d5 3a f6 d4 e9 f4 b9 79 69 c1 99 26 7e ff fb c8 c4 3a 66 76 3d d5 6b 20 7a a8 b5 84 74 92 3a 5f 76 49 5a 6a 16 1a 40 f7 15 67 cd ae ea 31 98 ad ce f6 40 10 cd e1 3a f1 7d f3 c7 4e de d6 e8 5a c1 8a 1b fa 8a eb 51 33 3e 8a d2 aa b7 03 25 24 0e c6 45 7a ea f5 94 c2 44 86 0d 5c 18 52 da fa d0 01 11 cf 82 fa 3f 0f cd 4e ac f4 68 f4 19 1a 5b 5f Data Ascii: 3FC0+`[/oIv<\~zkJe=w^j]7Ku1F9:RoFzYEpx'ht_ozg?cm}`)(:yi&~:fv=k zt:_vIZj@g1@:}NZQ3>%$EzD\R?Nh[_
2024-01-18 11:01:10 UTC	947	IN	Data Raw: 33 41 43 0d 0a 40 43 fc 0a 5f 52 e7 9f 6a 86 a7 ed 19 2c d3 b1 56 d6 21 40 c8 3c 7c 7d 02 3a 6f b7 5f ee d6 8c b6 0c c8 9c 8d 6b c8 5f e6 49 2c e8 13 e1 74 5d 19 1c 93 0f 8d 6d 03 3e d2 86 7f e2 72 54 bb 5f 81 e7 02 94 9c 8e f7 9b f3 45 c7 2e 66 5b 3b 66 9f 94 f1 e5 61 80 b0 33 3e 01 db 2e bb 01 a0 0f e7 21 75 6d cb df f8 f5 72 8d 83 fb 78 de 6f 47 de e7 01 a6 1b 6d 7c a8 ac a6 c7 8b be 5e 56 70 22 c9 4f 13 32 6f c9 43 eb 26 a9 85 5b ca b8 2a b8 25 7e 3f fd a2 a8 2b 44 db a1 1b 33 ea a1 b5 33 de b4 7f 0d 76 71 b0 39 f6 bd fc 06 e1 50 d8 13 0e 29 6e e2 3e 14 07 a7 22 c1 9b dc 27 e3 1a ae 53 fb bf b3 df df e2 1e 67 42 a5 77 26 e4 c8 f7 26 98 de 4f ae 2d 15 00 f0 7f a8 83 96 60 92 3f c0 3f e5 fe 53 04 c5 21 e0 04 97 6e 41 58 f0 67 2a ff 43 df 80 7e cc d6 b1 Data Ascii: 3AC@C_Rj,V!@<\|}:o_k_I,t]m>rT_E.f[;fa3>.!umrxoGm\|^Vp"O2oC&[%~?+D33vq9P)n>"'SgBw&&O-`??S!nAXgC~
2024-01-18 11:01:10 UTC	12332	IN	Data Raw: 33 30 31 46 0d 0a 9c 2c 2d 02 e0 d7 28 42 f5 8d e7 28 2d c8 4b 26 3e 1b 0b a2 27 2d 4e 24 15 a6 37 3d 15 74 93 8f 8b 70 93 4b c5 a0 86 93 18 dd 60 be c1 ed 69 aa 98 ea af f4 9c ce 58 7f 25 38 28 2d 79 a0 9c 9a 32 0e 65 87 42 e7 ac de db b3 28 14 28 53 b3 cf e2 0c 73 0f 14 e8 6f 35 32 b1 6c fc d7 13 34 1b a1 ea 58 47 67 53 17 83 1f 22 4c 40 94 68 17 3a f1 25 fc 4b c1 bf 95 3d 05 72 02 c0 8f c4 dd 64 a3 dc 08 d5 53 d2 14 9c bd 9f e5 1b 7f 58 1e 87 43 cd a7 d5 1d 81 f2 f7 a8 71 08 fb 3d fb dc 35 6d 3c 4d e2 50 16 49 2b bf 95 83 36 0f 9f bf 77 5d ec 46 cb 22 a8 61 63 75 19 7b a2 5c 2f 25 bb 9e 14 98 4b e5 8c 43 d8 92 a2 ca e6 20 9e 59 a2 7d 23 71 c7 3c 8a 75 f4 3a 2c 8c 1b a9 b5 a9 3c 36 f3 8c 2b be 88 7e e6 2c a2 06 6b f0 ea c5 73 53 ff e5 4f aa 4a 64 94 2b Data Ascii: 301F,-(B(-K&>'-N$7=tpK`iX%8(-y2eB((Sso52l4XGgS"L@h:%K=rdSXCq=5m<MPI+6w]F"acu{\/%KC Y}#q<u:,<6+~,ksSOJd+

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:10 UTC	573	OUT	OPTIONS /api/web-components/1/init?project=drive HTTP/1.1 Host: welcome.infomaniak.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type,x-requested-with Origin: https://kdrive.infomaniak.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:10 UTC	530	IN	HTTP/1.1 204 No Content date: Thu, 18 Jan 2024 11:01:10 GMT cache-control: no-cache, private access-control-allow-origin: https://kdrive.infomaniak.com vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, PATCH access-control-allow-headers: content-type,x-requested-with access-control-max-age: 0 x-query-time: 0.26 x-overall-time: 169.72 strict-transport-security: max-age=63072000 connection: close

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:11 UTC	616	OUT	GET /31941390fbb28a24ba32ec283a352e06225e5f42/enGB.js HTTP/1.1 Host: assets.kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kdrive.infomaniak.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:11 UTC	657	IN	HTTP/1.1 200 OK access-control-allow-methods: GET access-control-allow-origin: * access-control-expose-headers: x-amz-server-side-encryption,x-amz-request-id,x-amz-id-2,* access-control-max-age: 3000 cache-control: max-age=2592000 content-type: application/javascript date: Thu, 18 Jan 2024 11:01:11 GMT etag: W/"f3d671ec16b102b046335f96023a2402" last-modified: Tue, 16 Jan 2024 06:18:21 GMT server: nginx x-amz-request-id: tx000002e494d3463b2e173-0065a8c466-462c282-ch-gva-nvme-d3 x-cache-status: HIT x-proxy-cache: MISS x-rgw-object-type: Normal transfer-encoding: chunked strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:11 UTC	14571	IN	Data Raw: 33 38 45 33 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 64 72 69 76 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 64 72 69 76 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 36 5d 2c 7b 32 31 31 37 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 7b 7b 5c 5c 22 53 75 70 70 72 69 6d 65 7a 20 64 65 73 20 76 65 72 73 69 6f 6e 73 20 70 72 65 63 65 64 65 6e 74 65 73 2c 20 76 69 64 65 7a 20 6c 61 20 63 6f 72 62 65 69 6c 6c 65 20 65 74 20 76 65 72 69 66 69 65 7a 20 6c 65 73 20 66 69 63 68 69 65 72 73 20 76 6f 6c 75 6d 69 6e 65 75 78 2e 5c 5c 22 20 7c 20 74 72 61 6e 73 6c 6f 63 6f 20 7d 7d 22 3a 22 7b 7b 5c 5c 22 44 65 6c 65 74 65 20 70 72 65 76 69 6f 75 73 Data Ascii: 38E3"use strict";(self.webpackChunkdrive=self.webpackChunkdrive\|\|[]).push([[386],{21175:e=>{e.exports=JSON.parse('{"{{\\"Supprimez des versions precedentes, videz la corbeille et verifiez les fichiers volumineux.\\" \| transloco }}":"{{\\"Delete previous
2024-01-18 11:01:11 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 73 22 2c 22 41 63 63 65 73 20 63 6f 6d 70 6c 65 74 22 3a 22 46 75 6c 6c 20 61 63 63 65 73 73 22 2c 22 41 63 63 5c 78 65 38 73 20 66 6f 72 63 5c 78 65 39 20 73 75 72 20 6c 65 73 20 64 6f 73 73 69 65 72 73 20 63 6f 6d 6d 75 6e 73 22 3a 22 46 6f 72 63 65 64 20 61 63 63 65 73 73 20 74 6f 20 73 68 61 72 65 64 20 66 6f 6c 64 65 72 73 22 2c 22 41 63 63 65 73 20 69 6e 74 65 72 64 69 74 22 3a 22 41 63 63 65 73 73 20 66 6f 72 62 69 64 64 65 6e 22 2c 22 41 63 63 65 73 20 6c 69 6d 69 74 65 22 3a 22 4c 69 6d 69 74 65 64 20 61 63 63 65 73 73 22 2c 22 41 63 63 65 73 73 20 63 6f 6d 70 6c 65 74 22 3a 22 46 75 6c 6c 20 61 63 63 65 73 73 22 2c 22 41 63 63 65 73 73 20 6c 69 6d 69 74 65 22 3a 22 4c 69 6d 69 74 65 64 20 61 63 63 65 73 73 22 2c 22 41 63 63 65 Data Ascii: 3FC0s","Acces complet":"Full access","Acc\xe8s forc\xe9 sur les dossiers communs":"Forced access to shared folders","Acces interdit":"Access forbidden","Acces limite":"Limited access","Access complet":"Full access","Access limite":"Limited access","Acce
2024-01-18 11:01:12 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 72 6f 78 79 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 50 72 6f 78 79 22 2c 22 61 6e 6f 74 68 65 72 5f 74 61 73 6b 5f 61 6c 72 65 61 64 79 5f 65 78 69 73 74 5f 66 6f 72 5f 74 68 69 73 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 41 6e 6f 74 68 65 72 20 74 61 73 6b 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 20 66 6f 72 20 74 68 69 73 20 6f 70 65 72 61 74 69 6f 6e 22 2c 22 41 6e 74 61 72 63 74 69 63 61 22 3a 22 41 6e 74 61 72 63 74 69 63 61 22 2c 22 41 6e 74 69 67 75 61 20 61 6e 64 20 42 61 72 62 75 64 61 22 3a 22 41 6e 74 69 67 75 61 20 61 6e 64 20 42 61 72 62 75 64 61 22 2c 22 41 70 65 72 63 75 22 3a 22 50 72 65 76 69 65 77 22 2c 22 41 70 65 72 5c 78 65 37 75 22 3a 22 4f 76 65 72 76 69 65 77 22 2c 22 41 70 65 72 63 75 20 64 65 20 6c 61 20 70 61 67 Data Ascii: 3FB8roxy":"Anonymous Proxy","another_task_already_exist_for_this_operation":"Another task already exist for this operation","Antarctica":"Antarctica","Antigua and Barbuda":"Antigua and Barbuda","Apercu":"Preview","Aper\xe7u":"Overview","Apercu de la pag
2024-01-18 11:01:12 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 69 6e 75 6f 75 73 20 69 6d 70 72 6f 76 65 6d 65 6e 74 20 6f 66 20 6f 75 72 20 41 49 2e 22 2c 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 2c 22 42 6f 74 73 77 61 6e 61 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 42 6f 75 74 6f 6e 20 64 5c 27 69 6d 70 6f 72 74 61 74 69 6f 6e 20 64 65 20 66 69 63 68 69 65 72 73 22 3a 22 46 69 6c 65 20 69 6d 70 6f 72 74 20 62 75 74 74 6f 6e 22 2c 22 42 6f 75 74 6f 6e 20 64 65 20 63 72 65 61 74 69 6f 6e 20 64 65 20 66 69 63 68 69 65 72 20 6f 75 20 64 6f 73 73 69 65 72 22 3a 22 46 69 6c 65 20 6f 72 20 66 6f 6c 64 65 72 20 63 72 65 61 74 69 6f 6e 20 62 75 74 74 6f 6e 22 2c 22 42 6f 75 74 6f 6e 20 64 65 20 72 Data Ascii: 3FC0tinuous improvement of our AI.","Bosnia and Herzegovina":"Bosnia and Herzegovina","Botswana":"Botswana","Bouton d\'importation de fichiers":"File import button","Bouton de creation de fichier ou dossier":"File or folder creation button","Bouton de r
2024-01-18 11:01:12 UTC	2028	IN	Data Raw: 37 45 35 0d 0a 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 32 30 30 52 33 22 3a 22 54 68 65 20 66 69 6e 61 6e 63 69 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 20 68 61 73 20 72 65 66 75 73 65 64 20 74 68 69 73 20 70 61 79 6d 65 6e 74 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 62 61 6e 6b 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 32 30 31 35 30 22 3a 22 33 2d 44 20 73 65 63 75 72 65 20 70 72 6f 74 65 63 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 69 74 20 73 65 65 6d 73 20 74 6f 20 62 65 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 79 6f 75 72 20 63 61 72 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f Data Ascii: 7E5more details.","checkout_code_200R3":"The financial institution has refused this payment. Please contact your bank for more details.","checkout_code_20150":"3-D secure protection is required and it seems to be disabled on your card. Please contact yo
2024-01-18 11:01:12 UTC	4095	IN	Data Raw: 46 46 38 0d 0a 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 32 37 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 32 38 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 32 39 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 33 30 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 33 31 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 63 6f 64 65 5f 37 30 30 33 32 22 3a 22 41 6e 20 65 72 Data Ascii: FF8rred.","checkout_code_70027":"An error occurred.","checkout_code_70028":"An error occurred.","checkout_code_70029":"An error occurred.","checkout_code_70030":"An error occurred.","checkout_code_70031":"An error occurred.","checkout_code_70032":"An er
2024-01-18 11:01:12 UTC	12246	IN	Data Raw: 32 46 46 39 0d 0a 69 74 65 20 6f 75 20 67 72 69 6c 6c 65 20 6c 61 72 67 65 22 3a 22 43 68 6f 6f 73 65 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 76 69 65 77 20 6c 61 79 6f 75 74 3a 20 6c 69 73 74 2c 20 73 6d 61 6c 6c 20 67 72 69 64 20 6f 72 20 6c 61 72 67 65 20 67 72 69 64 22 2c 22 43 68 6f 69 73 69 73 73 65 7a 20 6c 65 73 20 66 69 63 68 69 65 72 73 20 61 20 69 6e 73 65 72 65 72 22 3a 22 43 68 6f 6f 73 65 20 74 68 65 20 66 69 6c 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 74 74 61 63 68 22 2c 22 43 68 6f 69 73 69 73 73 65 7a 20 6c 65 73 20 69 6d 61 67 65 73 20 61 20 69 6e 73 65 72 65 72 22 3a 22 43 68 6f 6f 73 65 20 74 68 65 20 69 6d 61 67 65 73 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 22 2c 22 43 68 6f 69 73 69 73 73 65 7a 20 75 6e 65 20 6d 5c 78 65 Data Ascii: 2FF9ite ou grille large":"Choose the element view layout: list, small grid or large grid","Choisissez les fichiers a inserer":"Choose the files you want to attach","Choisissez les images a inserer":"Choose the images to be inserted","Choisissez une m\xe
2024-01-18 11:01:12 UTC	43	IN	Data Raw: 74 69 6f 6e 22 3a 22 43 72 65 61 74 65 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 66 6f 6c 64 65 72 22 2c 22 43 72 0d 0a Data Ascii: tion":"Create an organisation folder","Cr
2024-01-18 11:01:12 UTC	4054	IN	Data Raw: 46 43 46 0d 0a 65 65 72 20 75 6e 20 64 6f 73 73 69 65 72 20 64 5c 27 6f 72 67 61 6e 69 73 61 74 69 6f 6e 22 3a 22 43 72 65 61 74 65 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 66 6f 6c 64 65 72 22 2c 22 43 72 65 65 72 20 75 6e 20 66 69 63 68 69 65 72 20 61 20 70 61 72 74 69 72 20 64 5c 27 75 6e 65 20 76 65 72 73 69 6f 6e 22 3a 22 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 61 20 76 65 72 73 69 6f 6e 22 2c 22 43 72 65 65 72 20 75 6e 20 66 69 63 68 69 65 72 20 61 20 70 61 72 74 69 72 20 64 65 20 63 65 74 74 65 20 76 65 72 73 69 6f 6e 22 3a 22 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 76 65 72 73 69 6f 6e 22 2c 22 43 72 65 65 72 20 75 6e 20 6c 69 65 6e 20 64 65 20 70 61 72 74 61 67 65 22 3a 22 43 72 65 61 74 Data Ascii: FCFeer un dossier d\'organisation":"Create an organisation folder","Creer un fichier a partir d\'une version":"Create a file from a version","Creer un fichier a partir de cette version":"Create a file from this version","Creer un lien de partage":"Creat
2024-01-18 11:01:12 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 20 79 6f 75 72 20 6b 44 72 69 76 65 22 2c 22 44 65 66 69 6e 69 73 73 65 7a 20 6c 65 73 20 64 72 6f 69 74 73 20 64 65 20 76 6f 73 20 75 74 69 6c 69 73 61 74 65 75 72 73 20 65 6e 20 61 63 63 65 73 20 6c 69 6d 69 74 65 20 73 75 72 20 6c 65 73 20 63 61 74 65 67 6f 72 69 65 73 20 64 65 20 76 6f 74 72 65 20 64 72 69 76 65 20 24 6e 61 6d 65 24 22 3a 22 44 65 66 69 6e 65 20 74 68 65 20 72 69 67 68 74 73 20 6f 66 20 79 6f 75 72 20 75 73 65 72 73 20 77 69 74 68 20 6c 69 6d 69 74 65 64 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 79 6f 75 72 20 64 72 69 76 65 20 24 6e 61 6d 65 24 22 2c 22 44 65 66 69 6e 69 73 73 65 7a 20 6c 5c 27 65 6d 70 6c 61 63 65 6d 65 6e 74 20 64 75 20 64 6f 73 73 69 65 72 20 64 61 6e Data Ascii: 3FB8 your kDrive","Definissez les droits de vos utilisateurs en acces limite sur les categories de votre drive $name$":"Define the rights of your users with limited access to the categories of your drive $name$","Definissez l\'emplacement du dossier dan

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:11 UTC	740	OUT	GET /api/web-components/1/init?project=drive HTTP/1.1 Host: welcome.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/json;charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://kdrive.infomaniak.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:11 UTC	807	IN	HTTP/1.1 200 OK date: Thu, 18 Jan 2024 11:01:11 GMT content-type: application/json transfer-encoding: chunked expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache cache-control: no-cache, private access-control-allow-origin: https://kdrive.infomaniak.com vary: Origin access-control-allow-credentials: true x-query-time: 23.56 x-overall-time: 36.6 set-cookie: WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; expires=Thu, 18 Jan 2024 13:01:11 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; samesite=lax set-cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; expires=Thu, 18 Jan 2024 13:01:11 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; httponly strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:11 UTC	546	IN	Data Raw: 32 31 42 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 5f 70 72 6f 6a 65 63 74 22 3a 22 64 72 69 76 65 22 2c 22 63 6f 6e 66 69 67 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 6c 6f 61 64 65 72 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 72 6f 67 72 65 73 73 2d 73 70 69 6e 6e 65 72 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 61 76 61 74 61 72 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 73 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 6d 65 6e 75 Data Ascii: 21B{"result":"success","data":{"current_project":"drive","config":[{"component":"loader","attributes":[]},{"component":"progress-spinner","attributes":[]},{"component":"avatar","attributes":[]},{"component":"products","attributes":[]},{"component":"menu
2024-01-18 11:01:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:11 UTC	705	OUT	POST /api/5/envelope/?sentry_key=712549bfb0ee41fe93015161024e8217&sentry_version=7 HTTP/1.1 Host: sentry-kdrive.infomaniak.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://kdrive.infomaniak.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:11 UTC	504	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 31 2d 31 38 54 31 31 3a 30 31 3a 30 39 2e 36 36 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 61 6e 67 75 6c 61 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 2e 31 39 2e 37 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 32 61 33 64 33 66 39 65 30 66 63 36 34 66 34 35 61 36 35 34 36 64 66 32 35 31 32 61 30 65 34 62 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 31 2d 31 38 54 31 31 3a 30 31 3a 30 39 2e 36 36 35 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 31 2d 31 38 54 31 31 3a 30 31 3a 30 39 2e 36 36 35 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-01-18T11:01:09.665Z","sdk":{"name":"sentry.javascript.angular","version":"6.19.7"}}{"type":"session"}{"sid":"2a3d3f9e0fc64f45a6546df2512a0e4b","init":true,"started":"2024-01-18T11:01:09.665Z","timestamp":"2024-01-18T11:01:09.665Z","stat
2024-01-18 11:01:12 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 18 Jan 2024 11:01:11 GMT Content-Type: application/json Content-Length: 2 Connection: close access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-01-18 11:01:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:11 UTC	597	OUT	GET /matomo.js HTTP/1.1 Host: analytics.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X
2024-01-18 11:01:11 UTC	381	IN	HTTP/1.1 200 OK date: Thu, 18 Jan 2024 11:01:11 GMT content-type: application/javascript content-length: 66607 last-modified: Wed, 10 Jan 2024 09:02:24 GMT etag: "659e5d20-1042f" expires: Thu, 18 Jan 2024 12:01:11 GMT cache-control: max-age=3600 pragma: public cache-control: public accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:11 UTC	5840	IN	Data Raw: 2f 2a 21 21 0a 20 2a 20 4d 61 74 6f 6d 6f 20 2d 20 66 72 65 65 2f 6c 69 62 72 65 20 61 6e 61 6c 79 74 69 63 73 20 70 6c 61 74 66 6f 72 6d 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 6f 6d 6f 2d 6f 72 67 2f 6d 61 74 6f 6d 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 42 53 44 2d 33 20 43 6c 61 75 73 65 20 28 61 6c 73 6f 20 69 6e 20 6a 73 Data Ascii: /!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js
2024-01-18 11:01:12 UTC	8760	IN	Data Raw: 29 22 3b 76 61 72 20 61 79 3d 6e 65 77 20 52 65 67 45 78 70 28 61 75 29 3b 76 61 72 20 61 78 3d 61 79 2e 65 78 65 63 28 61 77 29 3b 72 65 74 75 72 6e 20 61 78 3f 70 28 61 78 5b 31 5d 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 75 29 7b 69 66 28 61 75 26 26 53 74 72 69 6e 67 28 61 75 29 3d 3d 3d 61 75 29 7b 72 65 74 75 72 6e 20 61 75 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 72 65 74 75 72 6e 20 61 75 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 75 29 7b 72 65 74 75 72 6e 20 75 6e 65 73 63 61 70 65 28 75 28 61 75 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 61 4a 29 7b 76 61 72 20 61 77 3d 66 75 6e 63 74 69 6f 6e 28 61 50 2c 61 4f 29 7b 72 65 74 75 72 6e 28 61 50 3c 3c 61 4f 29 7c 28 61 50 3e 3e 3e 28 33 32 2d 61 4f 29 Data Ascii: )";var ay=new RegExp(au);var ax=ay.exec(aw);return ax?p(ax[1]):""}function a(au){if(au&&String(au)===au){return au.replace(/^\s+\|\s+$/g,"")}return au}function G(au){return unescape(u(au))}function ar(aJ){var aw=function(aP,aO){return(aP<<aO)\|(aP>>>(32-aO)
2024-01-18 11:01:12 UTC	10220	IN	Data Raw: 61 6a 2e 6d 61 6b 65 4e 6f 64 65 73 55 6e 69 71 75 65 28 61 76 29 3b 72 65 74 75 72 6e 20 61 76 7d 2c 66 69 6e 64 50 61 72 65 6e 74 43 6f 6e 74 65 6e 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 76 29 7b 69 66 28 21 61 76 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 61 77 3d 61 76 3b 76 61 72 20 61 75 3d 30 3b 77 68 69 6c 65 28 61 77 26 26 61 77 21 3d 3d 4b 26 26 61 77 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 61 6a 2e 68 61 73 4e 6f 64 65 41 74 74 72 69 62 75 74 65 28 61 77 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 41 54 54 52 29 29 7b 72 65 74 75 72 6e 20 61 77 7d 69 66 28 61 6a 2e 68 61 73 4e 6f 64 65 43 73 73 43 6c 61 73 73 28 61 77 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 43 4c 41 53 53 29 29 7b 72 65 74 75 72 6e 20 61 77 7d 69 66 28 61 6a 2e 68 Data Ascii: aj.makeNodesUnique(av);return av},findParentContentNode:function(av){if(!av){return}var aw=av;var au=0;while(aw&&aw!==K&&aw.parentNode){if(aj.hasNodeAttribute(aw,this.CONTENT_ATTR)){return aw}if(aj.hasNodeCssClass(aw,this.CONTENT_CLASS)){return aw}if(aj.h
2024-01-18 11:01:12 UTC	4380	IN	Data Raw: 6e 63 74 69 6f 6e 20 63 34 28 64 4c 2c 64 4a 29 7b 76 61 72 20 64 4b 3b 0a 64 4c 3d 53 74 72 69 6e 67 28 64 4c 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 64 4a 3d 53 74 72 69 6e 67 28 64 4a 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 64 4c 3d 3d 3d 64 4a 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 69 66 28 64 4a 2e 73 6c 69 63 65 28 30 2c 31 29 3d 3d 3d 22 2e 22 29 7b 69 66 28 64 4c 3d 3d 3d 64 4a 2e 73 6c 69 63 65 28 31 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 64 4b 3d 64 4c 2e 6c 65 6e 67 74 68 2d 64 4a 2e 6c 65 6e 67 74 68 3b 69 66 28 28 64 4b 3e 30 29 26 26 28 64 4c 2e 73 6c 69 63 65 28 64 4b 29 3d 3d 3d 64 4a 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 63 42 28 Data Ascii: nction c4(dL,dJ){var dK;dL=String(dL).toLowerCase();dJ=String(dJ).toLowerCase();if(dL===dJ){return true}if(dJ.slice(0,1)==="."){if(dL===dJ.slice(1)){return true}dK=dL.length-dJ.length;if((dK>0)&&(dL.slice(dK)===dJ)){return true}}return false}function cB(
2024-01-18 11:01:12 UTC	16320	IN	Data Raw: 72 69 6e 67 69 66 79 28 61 33 29 29 7d 69 66 28 64 4d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 66 6f 72 28 64 4c 3d 30 3b 64 4c 3c 64 4d 2e 6c 65 6e 67 74 68 3b 64 4c 2b 2b 29 7b 64 4d 5b 64 4c 5d 2b 3d 64 4b 2b 64 4a 7d 7d 65 6c 73 65 7b 64 4d 2b 3d 64 4b 2b 64 4a 7d 72 65 74 75 72 6e 20 64 4d 7d 66 75 6e 63 74 69 6f 6e 20 61 76 28 29 7b 72 65 74 75 72 6e 20 4e 28 67 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 29 26 26 44 28 67 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 2e 67 65 74 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 47 28 64 4a 29 7b 69 66 28 62 79 7c 7c 63 6b 29 7b 72 65 74 75 72 6e 7d 63 6b 3d 74 72 75 65 3b 61 33 3d 7b 62 72 61 6e 64 73 3a 67 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 2e Data Ascii: ringify(a3))}if(dM instanceof Array){for(dL=0;dL<dM.length;dL++){dM[dL]+=dK+dJ}}else{dM+=dK+dJ}return dM}function av(){return N(g.userAgentData)&&D(g.userAgentData.getHighEntropyValues)}function cG(dJ){if(by\|\|ck){return}ck=true;a3={brands:g.userAgentData.
2024-01-18 11:01:12 UTC	16320	IN	Data Raw: 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 4e 29 7b 64 4e 3d 64 4e 7c 7c 58 2e 65 76 65 6e 74 3b 76 61 72 20 64 4f 3d 64 4b 28 64 4e 29 3b 69 66 28 21 64 4f 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 64 4d 3d 62 36 28 64 4e 29 3b 69 66 28 64 4e 2e 74 79 70 65 3d 3d 3d 22 63 6c 69 63 6b 22 29 7b 76 61 72 20 64 4c 3d 66 61 6c 73 65 3b 69 66 28 64 4a 26 26 64 4d 3d 3d 3d 22 6d 69 64 64 6c 65 22 29 7b 64 4c 3d 74 72 75 65 7d 69 66 28 64 4f 26 26 21 64 4c 29 7b 63 33 28 64 4f 29 7d 7d 65 6c 73 65 7b 69 66 28 64 4e 2e 74 79 70 65 3d 3d 3d 22 6d 6f 75 73 65 64 6f 77 6e 22 29 7b 69 66 28 64 4d 3d 3d 3d 22 6d 69 64 64 6c 65 22 26 26 64 4f 29 7b 61 30 3d 64 4d 3b 62 4f 3d 64 4f 7d 65 6c 73 65 7b 61 30 3d 62 4f 3d 6e 75 6c 6c 7d 7d 65 6c 73 65 7b 69 66 28 Data Ascii: }}return function(dN){dN=dN\|\|X.event;var dO=dK(dN);if(!dO){return}var dM=b6(dN);if(dN.type==="click"){var dL=false;if(dJ&&dM==="middle"){dL=true}if(dO&&!dL){c3(dO)}}else{if(dN.type==="mousedown"){if(dM==="middle"&&dO){a0=dM;bO=dO}else{a0=bO=null}}else{if(
2024-01-18 11:01:12 UTC	2328	IN	Data Raw: 76 29 3b 4d 2e 70 75 73 68 28 61 75 29 3b 5f 70 61 71 3d 63 28 5f 70 61 71 2c 46 29 3b 66 6f 72 28 49 3d 30 3b 49 3c 5f 70 61 71 2e 6c 65 6e 67 74 68 3b 49 2b 2b 29 7b 69 66 28 5f 70 61 71 5b 49 5d 29 7b 61 6b 28 5f 70 61 71 5b 49 5d 29 7d 7d 5f 70 61 71 3d 6e 65 77 20 4c 28 29 3b 76 2e 74 72 69 67 67 65 72 28 22 54 72 61 63 6b 65 72 41 64 64 65 64 22 2c 5b 61 75 5d 29 3b 72 65 74 75 72 6e 20 61 75 7d 61 74 28 58 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 61 6e 2c 66 61 6c 73 65 29 3b 61 74 28 58 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6d 29 7b 72 65 74 75 72 6e 7d 69 66 28 4b 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 61 68 28 22 75 6e 6c 6f 61 Data Ascii: v);M.push(au);_paq=c(_paq,F);for(I=0;I<_paq.length;I++){if(_paq[I]){ak(_paq[I])}}_paq=new L();v.trigger("TrackerAdded",[au]);return au}at(X,"beforeunload",an,false);at(X,"visibilitychange",function(){if(m){return}if(K.visibilityState==="hidden"){ah("unloa
2024-01-18 11:01:12 UTC	2439	IN	Data Raw: 61 77 3b 69 66 28 4d 26 26 4d 2e 6c 65 6e 67 74 68 26 26 4d 5b 30 5d 29 7b 61 77 3d 4d 5b 30 5d 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 61 69 28 61 79 2c 61 78 29 7d 69 66 28 21 61 78 26 26 21 61 79 29 7b 72 65 74 75 72 6e 20 61 77 7d 69 66 28 28 21 4e 28 61 78 29 7c 7c 6e 75 6c 6c 3d 3d 3d 61 78 29 26 26 61 77 29 7b 61 78 3d 61 77 2e 67 65 74 53 69 74 65 49 64 28 29 0a 7d 69 66 28 28 21 4e 28 61 79 29 7c 7c 6e 75 6c 6c 3d 3d 3d 61 79 29 26 26 61 77 29 7b 61 79 3d 61 77 2e 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 7d 76 61 72 20 61 76 2c 61 75 3d 30 3b 66 6f 72 28 61 75 3b 61 75 3c 4d 2e 6c 65 6e 67 74 68 3b 61 75 2b 2b 29 7b 61 76 3d 4d 5b 61 75 5d 3b 69 66 28 61 76 26 26 53 74 72 69 6e 67 28 61 76 2e 67 65 74 53 69 74 65 49 64 28 29 29 3d 3d 3d 53 74 Data Ascii: aw;if(M&&M.length&&M[0]){aw=M[0]}else{return ai(ay,ax)}if(!ax&&!ay){return aw}if((!N(ax)\|\|null===ax)&&aw){ax=aw.getSiteId()}if((!N(ay)\|\|null===ay)&&aw){ay=aw.getTrackerUrl()}var av,au=0;for(au;au<M.length;au++){av=M[au];if(av&&String(av.getSiteId())===St

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:11 UTC	599	OUT	GET /ws HTTP/1.1 Host: info-mq.infomaniak.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://kdrive.infomaniak.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X Sec-WebSocket-Key: /VJ/f3uPbeLlothrnA7nSw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqtt
2024-01-18 11:01:11 UTC	228	IN	HTTP/1.1 426 Upgrade Required connection: upgrade content-length: 0 date: Thu, 18 Jan 2024 11:01:11 GMT sec-websocket-protocol: mqtt server: Cowboy upgrade: websocket Sec-Websocket-Accept: X7sdFi1aZDLMcFz+yURsFmFjwvU=

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:12 UTC	570	OUT	OPTIONS /api/web-components/1/profile/config2 HTTP/1.1 Host: welcome.infomaniak.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type,x-requested-with Origin: https://kdrive.infomaniak.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:12 UTC	529	IN	HTTP/1.1 204 No Content date: Thu, 18 Jan 2024 11:01:12 GMT cache-control: no-cache, private access-control-allow-origin: https://kdrive.infomaniak.com vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, PATCH access-control-allow-headers: content-type,x-requested-with access-control-max-age: 0 x-query-time: 0.59 x-overall-time: 13.47 strict-transport-security: max-age=63072000 connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\kDrive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\kDrive.lnk

C:\Users\user\Desktop\kDrive.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
https://kdrive.infomaniak.com/app/share/970099/df6652bb-f062-418f-aefb-6932f411b449

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:12 UTC	544	OUT	GET /api/5/envelope/?sentry_key=712549bfb0ee41fe93015161024e8217&sentry_version=7 HTTP/1.1 Host: sentry-kdrive.infomaniak.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
2024-01-18 11:01:12 UTC	390	IN	HTTP/1.1 405 Method Not Allowed Server: nginx/1.18.0 Date: Thu, 18 Jan 2024 11:01:12 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:12 UTC	1506	OUT	POST /matomo.php?action_name=kDrive&idsite=3&rec=1&r=777587&h=12&m=1&s=11&url=https%3A%2F%2Fkdrive.infomaniak.com%2Fapp%2Ferror%2F503&_id=a5d6c88f61c6e985&_idn=1&send_image=0&_refts=0&dimension1=-&dimension2=false&dimension3=false&pv_id=dmkh5J&pf_net=354&pf_srv=435&pf_tfr=4&pf_dm1=1698&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: analytics.infomaniak.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://kdrive.infomaniak.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
2024-01-18 11:01:13 UTC	344	IN	HTTP/1.1 204 No Response date: Thu, 18 Jan 2024 11:01:12 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/8.2.14 content-encoding: none access-control-allow-origin: https://kdrive.infomaniak.com access-control-allow-credentials: true referrer-policy: origin strict-transport-security: max-age=63072000 connection: close

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:12 UTC	793	OUT	GET /api/web-components/1/profile/config2 HTTP/1.1 Host: welcome.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/json;charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://kdrive.infomaniak.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
2024-01-18 11:01:13 UTC	808	IN	HTTP/1.1 200 OK date: Thu, 18 Jan 2024 11:01:13 GMT content-type: application/json transfer-encoding: chunked expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache cache-control: no-cache, private access-control-allow-origin: https://kdrive.infomaniak.com vary: Origin access-control-allow-credentials: true x-query-time: 13.68 x-overall-time: 21.38 set-cookie: WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; expires=Thu, 18 Jan 2024 13:01:13 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; samesite=lax set-cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; expires=Thu, 18 Jan 2024 13:01:13 GMT; Max-Age=7200; path=/; domain=.infomaniak.com; httponly strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:13 UTC	866	IN	Data Raw: 33 35 42 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 7b 22 6c 6f 67 69 6e 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 22 2c 22 63 61 6c 65 6e 64 61 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 6c 65 6e 64 61 72 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 22 2c 22 63 6f 6e 74 61 63 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 6f 6e 74 61 63 74 73 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 22 2c 22 63 6f 6e 66 69 67 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 6f 6e 66 69 67 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 6f 6d 22 2c 22 64 72 69 76 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6b 64 72 69 76 65 2e 69 6e 66 6f 6d 61 6e 69 61 6b 2e 63 Data Ascii: 35B{"result":"success","data":{"url":{"login":"https:\/\/login.infomaniak.com","calendar":"https:\/\/calendar.infomaniak.com","contact":"https:\/\/contacts.infomaniak.com","config":"https:\/\/config.infomaniak.com","drive":"https:\/\/kdrive.infomaniak.c
2024-01-18 11:01:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:13 UTC	720	OUT	GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/common/main.js HTTP/1.1 Host: web-components.storage.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kdrive.infomaniak.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U
2024-01-18 11:01:13 UTC	462	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Jan 2024 11:01:13 GMT content-type: application/javascript content-length: 341342 last-modified: Thu, 18 Jan 2024 10:57:23 GMT x-rgw-object-type: Normal etag: "eca2bd95fefc0749364c438fdb4f02d9" cache-control: max-age=604800 x-amz-request-id: tx0000016554e879bd86239-0065a90416-462c282-ch-gva-nvme-d3 x-proxy-cache: HIT accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:14 UTC	16060	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 33 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 43 65 20 63 6f 64 65 20 70 65 72 6d 65 74 20 64 65 20 76 6f 75 73 20 61 75 74 68 65 6e 74 69 66 69 65 72 20 6c 6f 72 73 20 64 5c 27 75 6e 20 63 6f 6e 74 61 63 74 20 74 65 6c 65 70 68 6f 6e 69 71 75 65 20 61 76 65 63 20 6e 6f 74 72 65 20 73 75 70 70 6f 72 74 2e 20 50 6f 75 72 20 64 65 73 20 72 61 69 73 6f 6e 73 20 64 65 20 73 65 63 75 72 69 74 65 2c 20 63 65 6c 75 69 2d 63 69 20 73 65 20 72 65 6e 6f 75 76 65 6c 6c 65 20 74 6f 75 74 65 73 20 6c 65 73 20 6d 69 6e 75 74 65 73 2e 22 3a 22 44 69 65 73 65 72 20 43 6f 64 65 20 64 69 65 6e 74 20 7a 75 Data Ascii: !function(){"use strict";var e={330:function(e){e.exports=JSON.parse('{"Ce code permet de vous authentifier lors d\'un contact telephonique avec notre support. Pour des raisons de securite, celui-ci se renouvelle toutes les minutes.":"Dieser Code dient zu
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 6e 73 74 69 67 65 20 4b 65 6e 6e 75 6e 67 65 6e 20 77 65 72 64 65 6e 20 66 c3 bc 72 20 56 6f 72 67 c3 a4 6e 67 65 20 67 65 6e 75 74 7a 74 2c 20 64 69 65 20 66 c3 bc 72 20 64 69 65 20 6f 72 64 6e 75 6e 67 73 67 65 6d c3 a4 73 73 65 20 46 75 6e 6b 74 69 6f 6e 73 77 65 69 73 65 20 75 6e 73 65 72 65 72 20 57 65 62 73 69 74 65 20 6f 64 65 72 20 64 69 65 20 42 65 72 65 69 74 73 74 65 6c 6c 75 6e 67 20 64 65 72 20 76 6f 6e 20 49 68 6e 65 6e 20 67 65 77 c3 bc 6e 73 63 68 74 65 6e 20 44 69 65 6e 73 74 65 20 65 72 66 6f 72 64 65 72 6c 69 63 68 20 73 69 6e 64 2c 20 75 6e 64 20 62 65 64 c3 bc 72 66 65 6e 20 66 6f 6c 67 6c 69 63 68 20 6e 69 63 68 74 20 49 68 72 65 72 20 5a 75 73 74 69 6d 6d 75 6e 67 2e 22 2c 22 43 65 73 20 63 6f 6f 6b 69 65 73 20 6f 75 20 61 75 74 72 Data Ascii: nstige Kennungen werden fr Vorgnge genutzt, die fr die ordnungsgemsse Funktionsweise unserer Website oder die Bereitstellung der von Ihnen gewnschten Dienste erforderlich sind, und bedrfen folglich nicht Ihrer Zustimmung.","Ces cookies ou autr
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 73 20 72 65 70 6f 6e 64 20 65 67 61 6c 65 6d 65 6e 74 20 61 20 62 65 61 75 63 6f 75 70 20 64 65 20 71 75 65 73 74 69 6f 6e 73 2e 20 50 65 6e 73 65 7a 20 61 20 6c 61 20 63 6f 6e 73 75 6c 74 65 72 2e 22 3a 22 44 69 65 20 4f 6e 6c 69 6e 65 2d 44 6f 6b 75 6d 65 6e 74 61 74 69 6f 6e 20 76 6f 6e 20 41 63 72 6f 6e 69 73 20 65 6e 74 68 c3 a4 6c 74 20 65 62 65 6e 66 61 6c 6c 73 20 41 6e 74 77 6f 72 74 65 6e 20 61 75 66 20 76 69 65 6c 65 20 46 72 61 67 65 6e 2e 20 42 69 74 74 65 20 77 65 72 66 65 6e 20 53 69 65 20 65 69 6e 65 6e 20 42 6c 69 63 6b 20 64 61 72 61 75 66 2e 22 2c 22 4c 61 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 65 6e 20 6c 69 67 6e 65 20 64 65 20 4a 65 6c 61 73 74 69 63 20 72 65 70 6f 6e 64 20 65 67 61 6c 65 6d 65 6e 74 20 61 20 62 65 61 75 63 6f Data Ascii: s repond egalement a beaucoup de questions. Pensez a la consulter.":"Die Online-Dokumentation von Acronis enthlt ebenfalls Antworten auf viele Fragen. Bitte werfen Sie einen Blick darauf.","La documentation en ligne de Jelastic repond egalement a beauco
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 20 57 6f 72 64 70 72 65 73 73 22 3a 22 57 6f 72 64 70 72 65 73 73 2d 53 65 69 74 65 22 2c 22 53 6f 75 68 61 69 74 65 7a 2d 76 6f 75 73 20 61 6e 6e 75 6c 65 72 20 6c 61 20 64 65 6d 61 6e 64 65 20 64 65 20 72 61 70 70 65 6c 20 70 61 72 20 6e 6f 74 72 65 20 61 67 65 6e 74 20 64 75 20 73 75 70 70 6f 72 74 20 3f 22 3a 22 4d c3 b6 63 68 74 65 6e 20 53 69 65 20 64 69 65 20 52 c3 bc 63 6b 72 75 66 62 69 74 74 65 20 64 75 72 63 68 20 75 6e 73 65 72 65 6e 20 53 75 70 70 6f 72 74 6d 69 74 61 72 62 65 69 74 65 72 20 73 74 6f 72 6e 69 65 72 65 6e 3f 22 2c 22 53 6f 75 68 61 69 74 65 7a 2d 76 6f 75 73 20 63 6f 6d 6d 61 6e 64 65 72 20 75 6e 20 61 75 74 72 65 20 70 72 6f 64 75 69 74 20 3f 22 3a 22 57 6f 6c 6c 65 6e 20 53 69 65 20 65 69 6e 20 61 6e 64 65 72 65 73 20 50 72 Data Ascii: Wordpress":"Wordpress-Seite","Souhaitez-vous annuler la demande de rappel par notre agent du support ?":"Mchten Sie die Rckrufbitte durch unseren Supportmitarbeiter stornieren?","Souhaitez-vous commander un autre produit ?":"Wollen Sie ein anderes Pr
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 6f 6e 65 20 68 61 73 20 69 6e 76 69 74 65 64 20 79 6f 75 20 74 6f 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 73 6f 6d 65 74 68 69 6e 67 20 68 65 72 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 63 74 69 76 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 20 6f 72 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 61 74 20 61 6c 6c 2c 20 74 68 69 73 20 6d 61 79 20 61 6c 6c 6f 77 20 74 68 65 20 70 65 72 73 6f 6e 20 69 6e 20 71 75 65 73 74 69 6f 6e 20 74 6f 20 73 74 65 61 6c 20 79 6f 75 72 20 49 6e 66 6f 6d 61 6e 69 61 6b 20 6c 6f 67 69 6e 20 64 65 74 61 69 6c 73 20 6f 72 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 57 68 65 6e 20 79 6f 75 20 61 72 65 20 64 65 61 6c 69 6e 67 20 77 69 74 68 20 6f 75 72 20 73 75 70 70 6f 72 74 20 Data Ascii: one has invited you to copy and paste something here in order to activate a function or anything else at all, this may allow the person in question to steal your Infomaniak login details or your personal information. When you are dealing with our support
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 74 20 74 65 61 6d 22 2c 22 43 6f 6e 74 61 63 74 65 72 20 76 6f 74 72 65 20 70 61 72 74 65 6e 61 69 72 65 22 3a 22 43 6f 6e 74 61 63 74 20 79 6f 75 72 20 70 61 72 74 6e 65 72 22 2c 22 43 6f 6e 74 65 6e 75 20 61 20 63 61 72 61 63 74 65 72 65 20 73 65 78 75 65 6c 6c 65 6d 65 6e 74 20 65 78 70 6c 69 63 69 74 65 22 3a 22 53 65 78 75 61 6c 6c 79 20 65 78 70 6c 69 63 69 74 20 63 6f 6e 74 65 6e 74 22 2c 22 43 6f 6e 74 65 6e 75 20 61 20 63 61 72 61 63 74 65 72 65 20 74 65 72 72 6f 72 69 73 74 65 22 3a 22 54 65 72 72 6f 72 69 73 74 20 63 6f 6e 74 65 6e 74 22 2c 22 43 6f 6e 74 69 6e 75 65 72 22 3a 22 43 6f 6e 74 69 6e 75 65 22 2c 22 43 6f 6e 74 69 6e 75 65 72 20 6c 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 43 6f 6e 74 69 6e 75 65 20 63 6f 6e 66 69 67 75 Data Ascii: t team","Contacter votre partenaire":"Contact your partner","Contenu a caractere sexuellement explicite":"Sexually explicit content","Contenu a caractere terroriste":"Terrorist content","Continuer":"Continue","Continuer la configuration":"Continue configu
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 69 73 61 74 69 6f 6e 73 22 3a 22 4d 79 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 73 22 2c 22 6d 69 6e 75 74 65 22 3a 22 6d 69 6e 75 74 65 22 2c 22 6d 69 6e 75 74 65 73 22 3a 22 6d 69 6e 75 74 65 73 22 2c 22 4d 69 73 20 61 20 6a 6f 75 72 20 6c 65 22 3a 22 55 70 64 61 74 65 64 20 6f 6e 22 2c 22 4d 69 73 20 61 20 6a 6f 75 72 20 6c 65 20 24 64 61 74 65 24 22 3a 22 55 70 64 61 74 65 64 20 6f 6e 20 24 64 61 74 65 24 22 2c 22 4d 69 73 65 20 61 20 6a 6f 75 72 22 3a 22 55 70 64 61 74 65 22 2c 22 4d 69 73 65 20 65 6e 20 64 61 6e 67 65 72 20 64 65 6e 66 61 6e 74 73 22 3a 22 43 68 69 6c 64 20 65 6e 64 61 6e 67 65 72 6d 65 6e 74 22 2c 22 6d 6f 69 73 22 3a 22 6d 6f 6e 74 68 22 2c 22 4d 6f 6e 20 70 72 6f 62 6c 65 6d 65 20 63 6f 6e 63 65 72 6e 65 22 3a 22 4d 79 20 70 72 6f Data Ascii: isations":"My organisations","minute":"minute","minutes":"minutes","Mis a jour le":"Updated on","Mis a jour le $date$":"Updated on $date$","Mise a jour":"Update","Mise en danger denfants":"Child endangerment","mois":"month","Mon probleme concerne":"My pro
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 20 64 65 70 61 73 73 65 20 70 61 73 20 33 32 20 4d 42 2e 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 70 72 6f 6a 65 63 74 2c 20 6f 6e 65 20 74 79 70 65 20 6f 66 20 65 73 63 61 6c 61 74 69 6f 6e 20 61 6e 64 20 65 6e 74 65 72 20 61 20 73 75 62 6a 65 63 74 20 6c 69 6e 65 20 61 6e 64 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 74 6f 74 61 6c 20 76 6f 6c 75 6d 65 20 6f 66 20 79 6f 75 72 20 61 74 74 61 63 68 6d 65 6e 74 73 20 64 6f 65 73 20 6e 6f 74 20 65 78 63 65 65 64 20 33 32 20 4d 42 2e 22 2c 22 56 65 75 69 6c 6c 65 7a 20 61 75 20 6d 69 6e 69 6d 75 6d 20 73 65 6c 65 63 74 69 6f 6e 6e 65 72 20 75 6e 20 73 75 6a 65 74 20 65 74 Data Ascii: depasse pas 32 MB.":"Please select at least one project, one type of escalation and enter a subject line and a description. Please also ensure that the total volume of your attachments does not exceed 32 MB.","Veuillez au minimum selectionner un sujet et
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 70 6f 73 65 72 20 64 65 73 20 70 75 62 6c 69 63 69 74 65 73 20 70 65 72 74 69 6e 65 6e 74 65 73 20 74 65 6c 6c 65 73 20 71 75 65 20 64 65 63 72 69 74 65 73 20 64 61 6e 73 20 6e 6f 74 72 65 20 3c 61 20 68 72 65 66 3d 5c 27 24 75 72 6c 24 5c 27 3e 70 6f 6c 69 74 69 71 75 65 20 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 65 20 64 65 73 20 64 6f 6e 6e 65 65 73 3c 2f 61 3e 2e 20 56 6f 75 73 20 70 6f 75 76 65 7a 20 70 65 72 73 6f 6e 6e 61 6c 69 73 65 72 20 6c 5c 27 75 74 69 6c 69 73 61 74 69 6f 6e 20 64 65 73 20 63 6f 6f 6b 69 65 73 20 61 20 6c 5c 27 61 69 64 65 20 64 75 20 62 6f 75 74 6f 6e 20 63 69 2d 64 65 73 73 6f 75 73 2e 20 45 6e 20 66 65 72 6d 61 6e 74 20 63 65 74 74 65 20 66 65 6e 65 74 72 65 2c 20 76 6f 75 73 20 61 63 63 65 70 74 65 7a 20 6c 5c Data Ascii: poser des publicites pertinentes telles que decrites dans notre <a href=\'$url$\'>politique de confidentialite des donnees</a>. Vous pouvez personnaliser l\'utilisation des cookies a l\'aide du bouton ci-dessous. En fermant cette fenetre, vous acceptez l\
2024-01-18 11:01:14 UTC	16320	IN	Data Raw: 64 61 6e 73 20 6c 5c 27 69 6d 70 6f 73 73 69 62 69 6c 69 74 65 20 64 65 20 74 72 61 6e 73 6d 65 74 74 72 65 20 76 6f 74 72 65 20 6d 61 69 6c 2c 20 6d 65 72 63 69 20 64 65 20 72 65 6e 6f 75 76 65 6c 65 72 20 76 6f 74 72 65 20 64 65 6d 61 6e 64 65 20 75 6c 74 65 72 69 65 75 72 65 6d 65 6e 74 22 3a 22 50 61 72 65 63 65 20 71 75 65 20 65 73 20 69 6d 70 6f 73 69 62 6c 65 20 65 6e 76 69 61 72 20 74 75 20 63 6f 72 72 65 6f 2c 20 76 75 65 6c 76 65 20 61 20 69 6e 74 65 6e 74 61 72 6c 6f 20 6d c3 a1 73 20 61 64 65 6c 61 6e 74 65 22 2c 22 49 6c 20 73 65 6d 62 6c 65 20 71 75 69 6c 20 6e 79 20 61 69 20 61 75 63 75 6e 20 72 65 73 75 6c 74 61 74 20 70 6f 75 72 20 76 6f 74 72 65 20 72 65 63 68 65 72 63 68 65 2c 20 76 65 72 69 66 69 65 7a 20 76 6f 74 72 65 20 71 75 65 73 Data Ascii: dans l\'impossibilite de transmettre votre mail, merci de renouveler votre demande ulterieurement":"Parece que es imposible enviar tu correo, vuelve a intentarlo ms adelante","Il semble quil ny ai aucun resultat pour votre recherche, verifiez votre ques

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:14 UTC	655	OUT	GET /ws HTTP/1.1 Host: info-mq.infomaniak.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://kdrive.infomaniak.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U Sec-WebSocket-Key: MrSfQmyjkjYWxiuakkBNkw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: mqtt
2024-01-18 11:01:15 UTC	228	IN	HTTP/1.1 426 Upgrade Required connection: upgrade content-length: 0 date: Thu, 18 Jan 2024 11:01:14 GMT sec-websocket-protocol: mqtt server: Cowboy upgrade: websocket Sec-Websocket-Accept: X7sdFi1aZDLMcFz+yURsFmFjwvU=

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:15 UTC	764	OUT	GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/p-f53cad2c.js HTTP/1.1 Host: web-components.storage.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kdrive.infomaniak.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-common/build/module-common.esm.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:16 UTC	649	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Jan 2024 11:01:16 GMT content-type: application/javascript content-length: 16649 last-modified: Thu, 18 Jan 2024 10:57:24 GMT x-rgw-object-type: Normal etag: "c70c2680cc72031a9d22ee170f256eb7" cache-control: max-age=604800 x-amz-request-id: tx0000066e41523f4c13a30-0065a9041e-462c282-ch-gva-nvme-d3 access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: x-amz-server-side-encryption,x-amz-request-id,x-amz-id-2,* access-control-max-age: 3000 x-proxy-cache: HIT accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:16 UTC	7300	IN	Data Raw: 63 6f 6e 73 74 20 74 3d 22 6d 6f 64 75 6c 65 2d 63 6f 6d 6d 6f 6e 22 3b 6c 65 74 20 65 3b 6c 65 74 20 6e 3b 6c 65 74 20 73 3b 6c 65 74 20 6c 3d 66 61 6c 73 65 3b 6c 65 74 20 6f 3d 66 61 6c 73 65 3b 6c 65 74 20 69 3d 66 61 6c 73 65 3b 6c 65 74 20 63 3d 66 61 6c 73 65 3b 6c 65 74 20 66 3d 6e 75 6c 6c 3b 6c 65 74 20 72 3d 66 61 6c 73 65 3b 63 6f 6e 73 74 20 75 3d 74 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 55 52 4c 28 74 2c 49 74 2e 74 29 3b 72 65 74 75 72 6e 20 65 2e 6f 72 69 67 69 6e 21 3d 3d 48 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 65 2e 68 72 65 66 3a 65 2e 70 61 74 68 6e 61 6d 65 7d 3b 63 6f 6e 73 74 20 61 3d 28 74 2c 65 3d 22 22 29 3d 3e 7b 7b 72 65 74 75 72 6e 28 29 3d 3e 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 64 3d 28 74 2c 65 29 3d 3e Data Ascii: const t="module-common";let e;let n;let s;let l=false;let o=false;let i=false;let c=false;let f=null;let r=false;const u=t=>{const e=new URL(t,It.t);return e.origin!==Ht.location.origin?e.href:e.pathname};const a=(t,e="")=>{{return()=>{}}};const d=(t,e)=>
2024-01-18 11:01:16 UTC	5840	IN	Data Raw: 3d 65 5b 6f 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 6c 6f 74 22 29 29 7b 6e 2e 68 69 64 64 65 6e 3d 74 72 75 65 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 7b 69 66 28 63 3d 3d 3d 31 7c 7c 63 3d 3d 3d 33 26 26 65 5b 6f 5d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 74 72 69 6d 28 29 21 3d 3d 22 22 29 7b 6e 2e 68 69 64 64 65 6e 3d 74 72 75 65 3b 62 72 65 61 6b 7d 7d 7d 7d 4b 28 6e 29 7d 7d 7d 3b 63 6f 6e 73 74 20 51 3d 5b 5d 3b 63 6f 6e 73 74 20 58 3d 74 3d 3e 7b 6c 65 74 20 65 3b 6c 65 74 20 6e 3b 6c 65 74 20 73 3b 6c 65 74 20 6c 3b 6c 65 74 20 69 3b 6c 65 74 20 63 3b 6c 65 74 20 66 3d 30 3b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 69 6c 64 4e 6f 64 65 73 3b 63 6f 6e 73 74 20 75 3d 72 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 66 3c 75 3b 66 2b 2b 29 7b 65 3d 72 5b Data Ascii: =e[o].getAttribute("slot")){n.hidden=true;break}}else{if(c===1\|\|c===3&&e[o].textContent.trim()!==""){n.hidden=true;break}}}}K(n)}}};const Q=[];const X=t=>{let e;let n;let s;let l;let i;let c;let f=0;const r=t.childNodes;const u=r.length;for(;f<u;f++){e=r[
2024-01-18 11:01:16 UTC	3509	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 65 3d 55 74 28 74 29 3b 7b 69 66 28 65 2e 49 29 7b 65 2e 49 2e 6d 61 70 28 28 74 3d 3e 74 28 29 29 29 3b 65 2e 49 3d 75 6e 64 65 66 69 6e 65 64 7d 7d 69 66 28 65 3d 3d 3d 6e 75 6c 6c 7c 7c 65 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 65 2e 50 29 7b 67 74 28 65 2e 50 29 7d 65 6c 73 65 20 69 66 28 65 3d 3d 3d 6e 75 6c 6c 7c 7c 65 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 65 2e 71 29 7b 65 2e 71 2e 74 68 65 6e 28 28 28 29 3d 3e 67 74 28 65 2e 50 29 29 29 7d 7d 7d 3b 63 6f 6e 73 74 20 53 74 3d 28 74 2c 65 29 3d 3e 7b 63 6c 61 73 73 20 6e 20 65 78 74 65 6e 64 73 20 41 72 72 61 79 7b 69 74 65 6d 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 5d 7d 7d 69 66 28 65 2e 70 26 38 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 5f 5f Data Ascii: ){const e=Ut(t);{if(e.I){e.I.map((t=>t()));e.I=undefined}}if(e===null\|\|e===void 0?void 0:e.P){gt(e.P)}else if(e===null\|\|e===void 0?void 0:e.q){e.q.then((()=>gt(e.P)))}}};const St=(t,e)=>{class n extends Array{item(t){return this[t]}}if(e.p&8){const e=t.__

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:16 UTC	763	OUT	GET /current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-a418fac6.entry.js HTTP/1.1 Host: web-components.storage.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kdrive.infomaniak.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web-components.storage.infomaniak.com/current/b31fca21a21a4ed385d820c1060fb8b8bd787190/module-kdrive/build/p-2d01425e.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:17 UTC	648	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Jan 2024 11:01:16 GMT content-type: application/javascript content-length: 5174 last-modified: Thu, 18 Jan 2024 10:57:24 GMT x-rgw-object-type: Normal etag: "a18f31f90dd8591bab9d794b52fbba3b" cache-control: max-age=604800 x-amz-request-id: tx0000026630ac04722062b-0065a90419-462c282-ch-gva-nvme-d3 access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: x-amz-server-side-encryption,x-amz-request-id,x-amz-id-2,* access-control-max-age: 3000 x-proxy-cache: HIT accept-ranges: bytes strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:17 UTC	5174	IN	Data Raw: 69 6d 70 6f 72 74 7b 72 20 61 73 20 65 2c 68 20 61 73 20 74 2c 48 20 61 73 20 6f 7d 66 72 6f 6d 22 2e 2f 70 2d 32 64 30 31 34 32 35 65 2e 6a 73 22 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 73 74 6f 72 65 3d 77 69 6e 64 6f 77 5b 22 77 65 62 43 6f 6d 70 6f 6e 65 6e 74 73 53 74 6f 72 65 22 5d 7d 74 72 61 6e 73 6c 61 74 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 3f 2e 74 72 61 6e 73 6c 61 74 65 28 65 2c 74 29 7d 61 73 79 6e 63 20 68 74 74 70 43 61 6c 6c 28 65 2c 74 2c 6f 2c 69 3d 66 61 6c 73 65 2c 73 3d 66 61 6c 73 65 29 7b 6c 65 74 20 72 3b 69 66 28 74 68 69 73 2e 68 61 73 4d 6f 63 6b 28 29 7c 7c 69 29 7b 63 6f 6e 73 74 20 6f 3d 74 68 69 73 2e 67 65 74 4d 6f 63 6b 54 79 70 65 28 29 3b 63 Data Ascii: import{r as e,h as t,H as o}from"./p-2d01425e.js";class i{constructor(){this.store=window["webComponentsStore"]}translate(e,t){return this.store?.translate(e,t)}async httpCall(e,t,o,i=false,s=false){let r;if(this.hasMock()\|\|i){const o=this.getMockType();c

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:16 UTC	552	OUT	GET /manifest.json HTTP/1.1 Host: kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://kdrive.infomaniak.com/app/error/503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-18 11:01:17 UTC	284	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 637 content-type: application/json date: Thu, 18 Jan 2024 11:01:17 GMT etag: "27d-60f32b2c06a80" last-modified: Thu, 18 Jan 2024 06:44:42 GMT server: Apache strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:17 UTC	637	IN	Data Raw: 7b 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 6b 44 72 69 76 65 22 2c 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6b 44 72 69 76 65 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2d 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2d 35 31 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 Data Ascii: { "short_name": "kDrive", "name": "kDrive", "icons": [ { "src": "/images/icons-192.png", "type": "image/png", "sizes": "192x192" }, { "src": "/images/icons-512.png",

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:17 UTC	798	OUT	GET /images/icons-192.png HTTP/1.1 Host: kdrive.infomaniak.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kdrive.infomaniak.com/app/error/503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1
2024-01-18 11:01:17 UTC	280	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 15275 content-type: image/png date: Thu, 18 Jan 2024 11:01:17 GMT etag: "3bab-60f32b2c06a80" last-modified: Thu, 18 Jan 2024 06:44:42 GMT server: Apache strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:17 UTC	3861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 02 00 00 00 dd be fb 50 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 3b 4d 49 44 41 54 78 da ec 7d 09 8c 24 e7 75 de 7b 55 d5 d5 77 cf bd f7 ee 2c b9 24 c5 4b bc b5 a4 64 91 b6 25 5b b6 62 4b 49 0c c9 51 1c 28 b6 22 08 06 62 c3 0e 92 00 89 13 c0 88 03 c8 08 62 04 8e 24 28 32 02 c7 86 ed 38 31 6c c7 47 6c 03 b6 25 51 94 2d 41 12 09 9a 94 29 72 49 59 24 f7 e4 5e b3 73 f6 dd 5d f5 f2 ff 75 fc 57 55 f5 f4 ec 74 cf cc 4e ba 30 5c 0c 7b ba ba ab fe 7a ff 7b df f7 4e 84 cf f9 b0 85 83 00 30 f8 97 c4 4b 48 d9 ef 23 f1 7e 90 a7 90 76 ba 72 8e fa e6 f8 fd ec 45 fe 1a 6a 9f a0 7f 47 f8 3f a8 bc 81 7d 2f 22 bb 2e d2 3e 2c Data Ascii: PNGIHDRPtEXtSoftwareAdobe ImageReadyqe<;MIDATx}$u{Uw,$Kd%[bKIQ("bb$(281lGl%Q-A)rIY$^s]uWUtN0\{z{N0KH#~vrEjG?}/".>,
2024-01-18 11:01:18 UTC	10403	IN	Data Raw: 77 6d 98 29 5a 82 30 a7 70 ae cd ea b9 46 72 7c e0 ce ca 93 8f cd c0 52 37 6a 4c b8 b3 9c cb 28 b6 8e 3c d1 69 de b5 3d 98 5b 48 8c 76 b9 65 fb d4 4c 6e bd 03 03 e0 66 f8 97 8d 2e 31 31 62 c7 5d f3 f9 f7 dc 31 f5 be bb 66 ef 3f 5c 61 77 d3 e8 78 30 80 73 a5 fb a7 43 19 c2 99 82 1d fa 3d 86 ec a1 31 26 39 fa d5 1f 3a 08 45 1b 5a be e9 4d dd 5e 6e 21 6d ce b9 14 ff 7b fc 29 d6 ad 14 e7 f2 fd 4a de ae e4 ac ae 37 ac 65 e8 f9 c0 a4 ad d9 83 85 b2 f3 e4 6d d5 1f b8 67 76 aa 90 ab 33 19 42 d0 63 7f 86 33 2c a5 65 24 33 9a 55 17 8b 2e 57 42 24 da 7a e8 1c c7 a8 e7 ba 99 92 8c 21 8e bb e6 dc 9f 7a ef 3c 2c 77 b5 8a d0 31 c4 b9 94 40 21 4a 78 82 9a 78 5a b7 50 9c 8b fd 6b 43 c4 a3 b7 98 23 c1 65 68 b5 05 07 ab ce 7b ef 9a ad e4 9d 76 98 b3 27 39 17 2a c2 94 2e c6 Data Ascii: wm)Z0pFr\|R7jL(<i=[HveLnf.11b]1f?\awx0sC=1&9:EZM^n!m{)J7emgv3Bc3,e$3U.WB$z!z<,w1@!JxxZPkC#eh{v'9*.
2024-01-18 11:01:18 UTC	1011	IN	Data Raw: f8 ff 13 e7 22 85 73 25 be 5a 4e 75 4b 99 04 aa 37 af 50 14 38 a9 6d e1 79 eb 0a 2c 3a 50 72 04 1c 36 9c ef 70 6b 71 ae 34 0d e7 c8 a4 bf 5b 3d ce 65 5a 67 49 3c b2 39 17 68 d2 43 72 92 1b 25 86 67 a7 6d 26 c5 4f 23 b0 6c ca 7c 2e c8 ee 15 bf 97 e3 5c 9a d7 2f c5 75 2b 42 19 fb 29 ce a5 e2 24 54 05 94 0c ec 8b 44 04 46 92 04 26 39 17 65 8a 8e fe b0 48 9d 89 4c 60 ce e7 92 8d 2b f6 4a 3d d7 b0 9c 0b 45 d3 17 e3 e9 45 b3 3b 2c d8 24 ce 15 35 6d 89 7f 97 7d 14 b3 39 97 e8 ae 88 b2 c7 91 71 96 fc 1c 63 48 47 c2 84 19 68 98 48 70 58 04 82 0c 15 a1 55 d9 82 76 cd a1 c2 49 19 94 14 7f 81 de 01 45 e7 5c 28 3e 4d 3e e9 b1 ce 44 be b9 be 85 b2 ae 2f b2 f4 da 7a a2 b0 66 44 a0 4d f1 01 f9 b1 a4 01 5b 7d c1 78 4f 5f 8c 5d 80 8e b0 9f fb 28 ce 45 26 e7 d2 6d 38 22 64 Data Ascii: "s%ZNuK7P8my,:Pr6pkq4[=eZgI<9hCr%gm&O#l\|.\/u+B)$TDF&9eHL`+J=EE;,$5m}9qcHGhHpXUvIE\(>M>D/zfDM[}xO_](E&m8"d

Timestamp	Bytes transferred	Direction	Data
2024-01-18 11:01:18 UTC	543	OUT	GET /images/icons-192.png HTTP/1.1 Host: kdrive.infomaniak.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SASESSION=3e2VU12Tp5ZsBny65HS7akuCzdeWzuC1GoML9k3X; WC-XSRF-TOKEN=x6govBal12ioW23U4CoK8ENuyBJ2ebua4mdLQa0U; _pk_id.3.b8a7=a5d6c88f61c6e985.1705575671.; _pk_ses.3.b8a7=1
2024-01-18 11:01:19 UTC	280	IN	HTTP/1.1 200 OK accept-ranges: bytes content-length: 15275 content-type: image/png date: Thu, 18 Jan 2024 11:01:18 GMT etag: "3bab-60f32b2c06a80" last-modified: Thu, 18 Jan 2024 06:44:42 GMT server: Apache strict-transport-security: max-age=63072000 connection: close
2024-01-18 11:01:19 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 02 00 00 00 dd be fb 50 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 3b 4d 49 44 41 54 78 da ec 7d 09 8c 24 e7 75 de 7b 55 d5 d5 77 cf bd f7 ee 2c b9 24 c5 4b bc b5 a4 64 91 b6 25 5b b6 62 4b 49 0c c9 51 1c 28 b6 22 08 06 62 c3 0e 92 00 89 13 c0 88 03 c8 08 62 04 8e 24 28 32 02 c7 86 ed 38 31 6c c7 47 6c 03 b6 25 51 94 2d 41 12 09 9a 94 29 72 49 59 24 f7 e4 5e b3 73 f6 dd 5d f5 f2 ff 75 fc 57 55 f5 f4 ec 74 cf cc 4e ba 30 5c 0c 7b ba ba ab fe 7a ff 7b df f7 4e 84 cf f9 b0 85 83 00 30 f8 97 c4 4b 48 d9 ef 23 f1 7e 90 a7 90 76 ba 72 8e fa e6 f8 fd ec 45 fe 1a 6a 9f a0 7f 47 f8 3f a8 bc 81 7d 2f 22 bb 2e d2 3e 2c Data Ascii: PNGIHDRPtEXtSoftwareAdobe ImageReadyqe<;MIDATx}$u{Uw,$Kd%[bKIQ("bb$(281lGl%Q-A)rIY$^s]uWUtN0\{z{N0KH#~vrEjG?}/".>,
2024-01-18 11:01:19 UTC	7318	IN	Data Raw: 7d f6 ad 6e cb db 2d 7a a4 8d f9 9e 29 d0 4c 01 1f 9c e3 bf af 74 e0 72 93 ce 6d e0 45 26 4c 2d 5a ee 60 97 4f 5d 09 84 c9 da 72 11 e3 76 64 c8 63 42 9c 87 c5 03 53 e7 97 d6 52 39 57 06 41 c1 38 ba 81 19 b9 85 37 c1 b9 e2 f1 bf 68 04 e6 fe cb b2 9c 2c ad 4d 1d 8c 5c d4 48 04 c9 eb a0 38 03 26 49 ae 36 fa 77 1c cb ff e1 87 e7 db 7d de 30 35 75 b9 d9 c3 28 e7 a0 96 e7 b2 c5 24 ac 64 d3 6c 01 67 f3 30 ed f2 36 72 5b e9 9c 3c f6 a3 de 8b 00 13 53 4e ec 67 a5 0b ed 3e 9f 6d 58 70 78 ed a8 ad 75 bb 1b 8b 96 2a ba 70 7d ad fb f4 4b 67 79 33 1e 0b 89 b2 07 f4 06 cf 33 ef e0 95 8d de eb bc 09 b2 85 98 40 c7 a1 fa 31 8a 3c 55 ce 45 fa 1c 4f ad 6b 3a 9a 99 be 3c 1a af 46 f8 b6 cf b9 82 1a ab 1f 7f a8 5a ca 31 d6 93 99 5d ea 05 bd 2f d9 0f 62 d0 1b a8 c3 f1 2c 83 89 Data Ascii: }n-z)LtrmE&L-Z`O]rvdcBSR9WA87h,M\H8&I6w}05u($dlg06r[<SNg>mXpxu*p}Kgy33@1<UEOk:<FZ1]/b,