Technical Information
Network activity
Connects to
- 'fa#####ownload.rzb.ir':443
- 'na####iqonline.ir':443
- 'go#####agmanager.com':443
- 'ro##log.com':443
- 'na####iqonline.ir':80
- 'pa###ools.com':80
- 'ha###.taktemp.com':80
- '1a##ar.ir':80
- 'im#.##0download.com':80
- 'pa##gig.com':80
- '0u#.ir':443
- '0u#.ir':80
- 'ir##naz.com':443
- 'dl.##usic.ir':80
- 'ta##az.ir':80
- 'bl#####.parsskin.com':80
- 'up###dtak.com':80
- 'ir##naz.com':80
- 'pi##ak.net':80
- 'ro##log.com':80
- 'fa###addons.com':80
- 'x1.#.lencr.org':80
TCP
HTTP GET requests
- http://ro##log.com/temp/pro/ads_468.jpg
- http://1a##ar.ir/abzar/tools/lig/?mo###############################################################################
- http://1a##ar.ir/abzar/tools/lig/?mo##############################################################################
- http://1a##ar.ir/abzar/tools/taghvim/?mo############################
- http://1a##ar.ir/abzar/tools/azan/v2/?mo################
- http://www.na####iqonline.ir/images/nastaliqonline.png
- http://ro##log.com/include/rozblog_ads_js.php?6
- http://1a##ar.ir/abzar/tools/dic/dic.php?co#####################################
- http://1a##ar.ir/abzar/tools/support/1abzar.php?ad#######################
- http://www.pa###ools.com/calendar/?ty####
- http://ha###.taktemp.com/hafez.gif
- http://www.ir###kin.com/online/js/js.php?c=#####
- http://www.ir###kin.com/online/js/jquery.min.js
- http://im#.##0download.com/software/image/2012/01/1327996177_firefox.jpg
- http://fa###addons.com/tools/flove/index.php?bg######################################
- http://www.pa##gig.com/images/v2449_y9xg77gdkqeijc4uxyux.jpg
- http://0u#.ir/images/wkbipyaspzyrzppympp.jpg
- http://0u#.ir/images/0brydl03aryhifljqda.jpg
- http://dl.##usic.ir/tak-album/7Band%20-%20Dooset%20Daram%20%28128%29/7Band%20-%20Dooset%20Daram%20%28128%29.jpg
- http://dl.##usic.ir/tak-album/maziar-fallahi/Mazyar%20Fallahi%20-%20Lanat%20Be%20Man%20%5B128%5D.jpg
- http://www.ta##az.ir/latest-news
- http://up###dtak.com/images/d6673_2aaf6jxm5rl1xkjd31.gif
- http://up###dtak.com/images/v2449_y9xg77gdkqeijc4uxyux.jpg
- http://bl#####.parsskin.com/zibasazi/welcome/11.gif
- http://www.ir##naz.com/user_files/image/1/ozv.gif
- http://ro##log.com/temp/rang/like.png
- http://pi##ak.net/blogcod/zibasazi/01/image/www.Pichak.net4.gif
- http://www.ta##az.ir/img/groups.gif
- http://ro##log.com/temp/nuke/FBarrow.gif
- http://www.pa##gig.com/images/d6673_2aaf6jxm5rl1xkjd31.gif
- http://x1.#.lencr.org/
Other
- 'fa#####ownload.rzb.ir':443
- 'ir##naz.com':443
- '0u#.ir':443
- 'go#####agmanager.com':443
- 'na####iqonline.ir':443
UDP
- DNS ASK fa#####ownload.rzb.ir
- DNS ASK fa###addons.com
- DNS ASK pa###ools.com
- DNS ASK na####iqonline.ir
- DNS ASK 1a##ar.ir
- DNS ASK ha###.taktemp.com
- DNS ASK ir###kin.com
- DNS ASK pa##gig.com
- DNS ASK 0u#.ir
- DNS ASK im#.##0download.com
- DNS ASK dl.##usic.ir
- DNS ASK dl.###sedaclub.ir
- DNS ASK bl#####.parsskin.com
- DNS ASK up###dtak.com
- DNS ASK ir##naz.com
- DNS ASK ta##az.ir
- DNS ASK pi##ak.net
- DNS ASK ro##log.com
- DNS ASK go#####agmanager.com
- DNS ASK x1.#.lencr.org
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
