Windows Analysis Report ATT78678_Covid-19.HTM

AV Detection:

Antivirus detection for URL or domain

Source: https://medisolhealthcare.com/tamu.edu/index.html	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://medisolhealthcare.com/00/	Avira URL Cloud: Label: phishing
Source: https://medisolhealthcare.com/tamu.edu/index.phpP	Avira URL Cloud: Label: phishing

Phishing:

HTML body contains low number of good links

Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Number of links: 1
Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Number of links: 1

HTML title does not match URL

Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Title: Central Authentication Service does not match URL
Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Title: Central Authentication Service does not match URL

Suspicious form URL found

Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Form action: login.php
Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: Form action: login.php

META copyright tag missing

Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://medisolhealthcare.com/tamu.edu/index.html	HTTP Parser: No <meta name="copyright".. found

Compliance:

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 204.93.193.76:443 -> 192.168.2.7:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.93.193.76:443 -> 192.168.2.7:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 165.91.22.70:443 -> 192.168.2.7:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 165.91.22.70:443 -> 192.168.2.7:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 128.194.43.60:443 -> 192.168.2.7:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 128.194.43.60:443 -> 192.168.2.7:50022 version: TLS 1.2

Networking:

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

IP address seen in connection with other malware

Source: Joe Sandbox View

IP Address: 151.101.0.217 151.101.0.217

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /00 HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /00/ HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tamu.edu/index.html HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medisolhealthcare.com/00/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /https://cas.tamu.edu/cas/media/js/foundation.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/css/style-cas.css HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/js/jquery.js HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/js/foundation.reveal.js HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/js/modernizer.js HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/js/hideShowPassword.min.js HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/js/cas.js HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/tamu.edu/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/OpenSans-Bold-webfont.woff HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/OpenSans-Regular-webfont.woff HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/oswald-light-webfont.woff HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/OpenSans-Regular-webfont.ttf HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/OpenSans-Bold-webfont.ttf HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/fonts/oswald-light-webfont.ttf HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cas/media/img/TAM-Logo-white.svg HTTP/1.1Host: cas.tamu.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cas.tamu.edu/cas/media/css/style-cas.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/tether/tether.min.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/dropdown/css/style.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/animate.css/animate.min.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/theme/css/style.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/mobirise/css/mbr-additional.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/socicon/css/styles.css HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/oswald/v40/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=Oswald:400,300,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gtag/js?id=UA-119896657-1 HTTP/1.1Host: www.googletagmanager.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/titilliumweb/v10/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=Titillium+Web:400,300,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/medisol-logo-n-90x100.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/web/assets/jquery/jquery.min.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/tether/tether.min.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap-carousel-swipe/bootstrap-carousel-swipe.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/titilliumweb/v10/NaPDcZTIAOhVxoMyOr9n_E7ffGjEGItzYw.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=Titillium+Web:400,300,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/raleway/v22/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900iAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/socicon/fonts/socicon.woff HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://medisolhealthcare.com/assets/socicon/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/banner-1-2000x750.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/Services_0001.png HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/smooth-scroll/smooth-scroll.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/dropdown/js/script.min.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://medisolhealthcare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m18!1m12!1m3!1d3945.9165706755552!2d76.92436481460193!3d8.507481599281519!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3b05bbfc5555555b%3A0x951cc4a2b9385586!2sMedisol+Healthcare!5e0!3m2!1sen!2sin!4v1543508867808 HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/touch-swipe/jquery.touch-swipe.min.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/viewport-checker/jquery.viewportchecker.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/theme/js/script.js HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/images/banner-2-2000x750.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/images/banner-3-2000x750.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/images/banner-4-2000x750.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /assets/images/health-banner-1400x702.jpg HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET /files/Services_0003.png HTTP/1.1Host: medisolhealthcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medisolhealthcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.69123124.1632186691; _gid=GA1.2.2129179337.1632186691; _gat_gtag_UA_119896657_1=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.tamu.eduConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Site_Policies.php HTTP/1.1Host: cio.tamu.eduConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _dc_gtm_UA-1617721-44=1; _dc_gtm_UA-1617721-2=1; _gid=GA1.2.1052970607.1632186708; _ga_SJ5GMN0ZQL=GS1.1.1632186708.1.0.1632186708.60; _ga=GA1.1.2027263532.1632186708; _ga_PBV6K94CC1=GS1.1.1632186708.1.0.1632186708.60; _hjid=64becfa3-6b75-4a80-a734-02327e12e9c8; _hjFirstSeen=1; _hjAbsoluteSessionInProgress=0

URLs found in memory or binary data

Source: Favicons.1.dr	String found in binary or memory: http://cio.tamu.edu/Site_Policies.php
Source: History.1.dr	String found in binary or memory: http://cio.tamu.edu/Site_Policies.phpLeadership
Source: Current Session.1.dr	String found in binary or memory: http://cio.tamu.edu/Site_Policies.phpg
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: http://maps.gstatic.cn/mapfiles/api-3/images/mapcnt6.png
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: http://maps.gstatic.cn/mapfiles/api-3/images/mapcnt6_hdpi.png
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: http://maps.gstatic.cn/mapfiles/transparent.png)
Source: a169b384dfc96f9b_0.1.dr	String found in binary or memory: http://www.google.cn
Source: Favicons.1.dr	String found in binary or memory: http://www.tamu.edu/
Source: History.1.dr	String found in binary or memory: http://www.tamu.edu/Texas
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=LxAo%2BrVkuc8aHRxhbDN3qLKC0mD0brRBnEYd3LioXk0f5K8qcBSwqv0w7
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=SSo3MQasPtQVMiW4VK3E9kpqyLR5k0juSSFMRmL3qFV9a1xB7k7FCZ4HYxh
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, manifest.json0.1.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://accounts.google.com
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://ajax.googleapis.com
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://ajax.googleapis.com/
Source: arial.ttf.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://analytics.google.com
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, manifest.json0.1.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://apis.google.com
Source: 2eae8fc2f849aab2_0.1.dr	String found in binary or memory: https://app.interakt.ai/kiwi-sdk/kiwi-sdk-17-prod-min.js?v=1632186690039
Source: 97d21510985a8eea_0.1.dr	String found in binary or memory: https://app.interakt.ai/kiwi-sdk/kiwi-sdk-17-prod-min.js?v=1632186724712
Source: 6a541bbf12112915_0.1.dr	String found in binary or memory: https://cas.tamu.edu/cas/media/js/foundation.reveal.js
Source: dd8ea5d88b54d623_0.1.dr	String found in binary or memory: https://cas.tamu.edu/cas/media/js/hideShowPassword.min.js
Source: 6e7eced35ab2febc_0.1.dr	String found in binary or memory: https://cas.tamu.edu/cas/media/js/jquery.js
Source: f71de80139fccadb_0.1.dr	String found in binary or memory: https://cas.tamu.edu/cas/media/js/modernizer.js
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.1.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: manifest.json0.1.dr	String found in binary or memory: https://content.googleapis.com
Source: Reporting and NEL.2.dr, Reporting and NEL-journal.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/geo-tactile
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/geo-tactilea
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/maps-api-js
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/maps-api-js_
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr, de99fabe-9935-44b3-85b6-cab114895a5f.tmp.2.dr, bd293af4-b3ac-4dec-9286-8e73465352d4.tmp.2.dr	String found in binary or memory: https://dns.google
Source: manifest.json0.1.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://gateway.tamu.edu/
Source: Current Session.1.dr	String found in binary or memory: https://gateway.tamu.edu/activation/
Source: History.1.dr	String found in binary or memory: https://gateway.tamu.edu/activation/NetID
Source: Favicons.1.dr	String found in binary or memory: https://gateway.tamu.edu/favicon.ico
Source: Favicons.1.dr	String found in binary or memory: https://gateway.tamu.edu/favicon.icoJ
Source: Current Session.1.dr	String found in binary or memory: https://gateway.tamu.edu/password-reset/
Source: History.1.dr	String found in binary or memory: https://gateway.tamu.edu/password-reset/Welcome
Source: Current Session.1.dr	String found in binary or memory: https://gateway.tamu.edu/password-reset/m
Source: bbbf882f508443af_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/activation.js
Source: 7b16bfc03bbfb5ae_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/app.js
Source: 7b16bfc03bbfb5ae_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/app.jsaD
Source: 352888151a61213b_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/cleave.min.js
Source: 352888151a61213b_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/cleave.min.jsa
Source: 352888151a61213b_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/cleave.min.jsaD
Source: 7924e45aad8a467b_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/foundation.js
Source: 344b2c7516b11a54_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/foundation.jsa
Source: 344b2c7516b11a54_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/foundation.jsaD
Source: bcf2da12a90df2c4_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/foundation.reveal.js
Source: bcf2da12a90df2c4_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/foundation.reveal.jsaD
Source: a12f04773ac92630_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/hideShowPassword.min.js
Source: 22aff53d8c3d2958_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/jquery.js
Source: b053779cd1efe7c2_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/jquery.jsa
Source: b053779cd1efe7c2_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/jquery.jsaD
Source: a0980d45e3abc14d_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/modernizer.js
Source: a0980d45e3abc14d_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/modernizer.jsa
Source: a0980d45e3abc14d_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/modernizer.jsaD
Source: 0a2197cadd8e4b97_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/motion-ui.js
Source: 0a2197cadd8e4b97_0.1.dr	String found in binary or memory: https://gateway.tamu.edu/services/media/js/motion-ui.jsaD
Source: 337f32f67e7ec069_0.1.dr	String found in binary or memory: https://google.com/
Source: 7bb65f416e2d5794_0.1.dr	String found in binary or memory: https://google.com/U
Source: 96c3a7ce86fd7415_0.1.dr	String found in binary or memory: https://google.com/e%
Source: f74f2b6c9f121f0e_0.1.dr	String found in binary or memory: https://google.com/e8
Source: 50dd5d6cb6fcf72d_0.1.dr	String found in binary or memory: https://google.com/q
Source: manifest.json0.1.dr	String found in binary or memory: https://hangouts.google.com/
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://it.tamu.edu/
Source: b8d2c6a2e4b0bb74_0.1.dr	String found in binary or memory: https://it.tamu.edu/assets/js/TAMU.js
Source: 7bcfb593ff988bab_0.1.dr	String found in binary or memory: https://it.tamu.edu/assets/js/TAMU.js?20.137.47251
Source: b4751ef62e2ff60a_0.1.dr	String found in binary or memory: https://it.tamu.edu/assets/js/WinIT.js?20.138.48864
Source: Favicons.1.dr	String found in binary or memory: https://it.tamu.edu/favicon.ico
Source: Favicons.1.dr	String found in binary or memory: https://it.tamu.edu/favicon.ico8
Source: 6b2fac6ae22c012f_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/alerts.js?19.113.26204
Source: c845b0dbd15696be_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/bootstrap.min.js?20.259.64502
Source: 543801d69036d7ab_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/jquery-3.3.1.min.js?20.259.64498
Source: 675aed2ac303a57b_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/jquery-sliding-menu.js?20.259.64502
Source: 93c3c10c9093cc3b_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/oneit.js?20.259.64503
Source: e220f31ffe28e1b8_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/search.js?20.137.56303
Source: f323b45a2548fe5a_0.1.dr	String found in binary or memory: https://it.tamu.edu/js/site.js?20.259.64502
Source: Favicons.1.dr	String found in binary or memory: https://it.tamu.edu/leadership/
Source: History.1.dr	String found in binary or memory: https://it.tamu.edu/leadership/Leadership
Source: Current Session.1.dr	String found in binary or memory: https://it.tamu.edu/search.php
Source: d8af8100610b5218_0.1.dr	String found in binary or memory: https://it.tamu.edu/stack/js/Stack.js?18.171.32322
Source: 68b63bab14f17a64_0.1.dr	String found in binary or memory: https://it.tamu.edu/stack/js/modernizr.js?18.171.32322
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://maps.googleapis.com
Source: f74f2b6c9f121f0e_0.1.dr, a169b384dfc96f9b_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/common.js
Source: a169b384dfc96f9b_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/common.jsaD
Source: 337f32f67e7ec069_0.1.dr, aba92518196da695_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/map.js
Source: aba92518196da695_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/map.jsaD
Source: 7bb65f416e2d5794_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/onion.js
Source: 7bb65f416e2d5794_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/onion.jsa
Source: 7bb65f416e2d5794_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/onion.jsaD
Source: 90a73e17aa20d02a_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/overlay.js
Source: 90a73e17aa20d02a_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/overlay.jsaD
Source: 4288a3017ab4b890_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/search_impl.js
Source: 4288a3017ab4b890_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/search_impl.jsaD
Source: 6ff1346bdf56e4c3_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/util.js
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/46/5/util.jsaD
Source: 50dd5d6cb6fcf72d_0.1.dr, 96c3a7ce86fd7415_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/ViewportInfoService.GetViewportInfo?1m6&1m2&1d8.497325998871
Source: bd312f2b8b5367de_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/ViewportInfoService.GetViewportInfo?1m6&1m2&1d8.497724964126
Source: cb588c6db8bcc19f_0.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://maps.gstatic.com
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/mapcnt6.png
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/mapcnt6_hdpi.png
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/defaultphoto
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: c8541f85084e2883_0.1.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/transparent.png);height:10px;width:4px;float:left;margin-top:3px;m
Source: 46ce81332f2c4037_0.1.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/46/5/init_embed.js
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/46/5/init_embed.jsa
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/46/5/init_embed.jsaD
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com%
Source: 5313946ae3e46240_0.1.dr, Favicons.1.dr, 668d8173b08fa931_0.1.dr, 1b48bac0974da259_0.1.dr, dd8ea5d88b54d623_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/&
Source: ATT78678_Covid-19.HTM	String found in binary or memory: https://medisolhealthcare.com/00
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/00/
Source: History.1.dr	String found in binary or memory: https://medisolhealthcare.com/Healthcare
Source: 7d589616bef44ee0_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/K4u
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/PHealthcare
Source: ce777d467f405060_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/bootstrap-carousel-swipe/bootstrap-carousel-swipe.js
Source: 25a3ab3861ce4c12_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/bootstrap/js/bootstrap.min.js
Source: 8c0707e5cd72b147_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/dropdown/js/script.min.js
Source: Favicons.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/images/medisol-logo-n-90x100.jpg
Source: Favicons-journal.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/images/medisol-logo-n-90x100.jpgx
Source: 7d589616bef44ee0_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/smooth-scroll/smooth-scroll.js
Source: 5e35d025c7ef2253_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/tether/tether.min.js
Source: 357c858e4180f954_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/theme/js/script.js
Source: 111af5ccb62b6b70_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/touch-swipe/jquery.touch-swipe.min.js
Source: 1b48bac0974da259_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/viewport-checker/jquery.viewportchecker.js
Source: 668d8173b08fa931_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/assets/web/assets/jquery/jquery.min.js
Source: f71de80139fccadb_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/e
Source: 357c858e4180f954_0.1.dr	String found in binary or memory: https://medisolhealthcare.com/j-
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/index.html
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/index.php
Source: History.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/index.phpHealthcare
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/index.phpP
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/index.phpPHealthcare
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.com/tamu.edu/login.php
Source: Favicons-journal.1.dr	String found in binary or memory: https://medisolhealthcare.com/x
Source: Current Session.1.dr	String found in binary or memory: https://medisolhealthcare.comh
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://myaccount.google.com/
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: manifest.json.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://pro.fontawesome.com/
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://r5---sn-4g5ednsl.gvt1.com
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: manifest.json.1.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 5d5fa87c4fac1422_0.1.dr	String found in binary or memory: https://script.hotjar.com/modules.5fe2f4f38cf4833026a9.js
Source: Current Session.1.dr	String found in binary or memory: https://services.tamu.edu/directory-search/
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 53aed352ab9346a8_0.1.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-13764.js?sv=7
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://stats.g.doubleclick.net
Source: messages.json83.1.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json83.1.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://support.google.com/maps/?p=thirdpartymaps
Source: add4778db30f37f1_0.1.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: 352888151a61213b_0.1.dr, 7bcfb593ff988bab_0.1.dr, bbbf882f508443af_0.1.dr, 50002f7bb64ea525_0.1.dr	String found in binary or memory: https://tamu.edu/
Source: de0e6a64a6f72ad0_0.1.dr	String found in binary or memory: https://tamu.edu/$
Source: 33e9019b23fa72ca_0.1.dr	String found in binary or memory: https://tamu.edu/)
Source: b8d2c6a2e4b0bb74_0.1.dr	String found in binary or memory: https://tamu.edu/1
Source: 6b2fac6ae22c012f_0.1.dr	String found in binary or memory: https://tamu.edu/C
Source: 675aed2ac303a57b_0.1.dr	String found in binary or memory: https://tamu.edu/Mi
Source: e220f31ffe28e1b8_0.1.dr	String found in binary or memory: https://tamu.edu/ND
Source: f323b45a2548fe5a_0.1.dr	String found in binary or memory: https://tamu.edu/Nb
Source: 53aed352ab9346a8_0.1.dr	String found in binary or memory: https://tamu.edu/U9
Source: c845b0dbd15696be_0.1.dr	String found in binary or memory: https://tamu.edu/W5
Source: b4751ef62e2ff60a_0.1.dr	String found in binary or memory: https://tamu.edu/oc
Source: 1295a2006ceccd71_0.1.dr	String found in binary or memory: https://unpkg.com/micromodal
Source: 9e15e7e73598d066_0.1.dr	String found in binary or memory: https://unpkg.com/popper.js
Source: ef944c513728ab40_0.1.dr	String found in binary or memory: https://unpkg.com/tippy.js
Source: Current Session.1.dr	String found in binary or memory: https://vars.hotjar.com/box-dfc01efbdc94bb0936d9a35a502b0b64.html
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://vod-progressive.akamaized.net
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: 5313946ae3e46240_0.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://www.google.co.uk
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, manifest.json0.1.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr, a169b384dfc96f9b_0.1.dr	String found in binary or memory: https://www.google.com
Source: Current Session.1.dr	String found in binary or memory: https://www.google.com%
Source: 000003.log0.1.dr	String found in binary or memory: https://www.google.com/
Source: Current Session.1.dr	String found in binary or memory: https://www.google.com/maps/embed?pb=
Source: manifest.json0.1.dr	String found in binary or memory: https://www.google.com;
Source: Current Session.1.dr	String found in binary or memory: https://www.google.comh
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: 66e1bb11f2b7360e_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-PBV6K94CC1&l=dataLayer&cx=c
Source: e822e54fc3a4a146_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-SJ5GMN0ZQL&l=dataLayer&cx=c
Source: 008dc773b56dfd0d_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-119896657-1
Source: 50002f7bb64ea525_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-53LFZF
Source: 41ed385887268f9f_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-N7BC73
Source: 27b227d8-2c49-4556-9e0d-cf30e8190870.tmp.2.dr, 79b30cee-e407-4c1d-aa4b-4044b217dd40.tmp.2.dr, e23e83ca-ae76-464d-9599-0804eba09c4d.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.1.dr	String found in binary or memory: https://www.gstatic.com;
Source: 000003.log6.1.dr	String found in binary or memory: https://www.tamu.edu
Source: Favicons.1.dr, 000003.log0.1.dr	String found in binary or memory: https://www.tamu.edu/
Source: Current Session.1.dr	String found in binary or memory: https://www.tamu.edu/)Texas
Source: History.1.dr	String found in binary or memory: https://www.tamu.edu/Texas
Source: Favicons.1.dr	String found in binary or memory: https://www.tamu.edu/assets/images/icons/favicon.ico
Source: Favicons.1.dr	String found in binary or memory: https://www.tamu.edu/assets/images/icons/favicon.ico(
Source: e1b6990de6b7633f_0.1.dr	String found in binary or memory: https://www.tamu.edu/assets/js/main.min.js
Source: 33e9019b23fa72ca_0.1.dr	String found in binary or memory: https://www.tamu.edu/assets/js/scripts-max.v4.js
Source: 424c8833d7029573_0.1.dr	String found in binary or memory: https://www.tamu.edu/assets/js/vendor/fastclick.min.js
Source: 25fee9239af0f367_0.1.dr	String found in binary or memory: https://www.tamu.edu/assets/js/vendor/jquery.jcarousel.min.js
Source: 1a54f2caba9a14a8_0.1.dr	String found in binary or memory: https://www.tamu.edu/assets/js/vendor/modernizr.min.js
Source: Current Session.1.dr	String found in binary or memory: https://www.tamu.edu/search/index.html

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 204.93.193.76:443 -> 192.168.2.7:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.93.193.76:443 -> 192.168.2.7:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 165.91.22.70:443 -> 192.168.2.7:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 165.91.22.70:443 -> 192.168.2.7:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 128.194.43.60:443 -> 192.168.2.7:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 128.194.43.60:443 -> 192.168.2.7:50022 version: TLS 1.2

System Summary:

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user~1\AppData\Local\Temp\bed74d5a-8ebc-431f-9a10-2e9bfb3820aa.tmp

Jump to behavior

Classification label

Source: classification engine

Classification label: mal48.winHTM@58/359@32/26

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\ATT78678_Covid-19.HTM'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1620,10020745847991899420,12407152926095554639,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1708 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1620,10020745847991899420,12407152926095554639,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=2040 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1620,10020745847991899420,12407152926095554639,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1708 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1620,10020745847991899420,12407152926095554639,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=2040 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6149312D-FB4.pma

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior