Technical Information
Network activity
Connects to
- 'ni##ong.ir':80
- 'ma##.net':445
- 'cd#.###ine.4dsply.com':443
- 'up.##pertemp.ir':80
- 'microsoft.com':80
- 'go#####agmanager.com':443
TCP
HTTP GET requests
- http://ro##log.com/include/rozblog_ads_js.php
- http://ro##p.ir/view/2796666/fonts.css
- http://ro##p.ir/view/2849941/
- http://ro##p.ir/view/2751954/quote_1547809863925.png
- http://ro##p.ir/view/2728558/1%C3%8CE%C3%8C%C2%A93%20('1'F,,,D9F*_51013.jpg
- http://up.##pertemp.ir/view/2782829/yekan.eot?
- http://ro##p.ir/view/2725239/IMG_20181213_130229_714_512006.jpg
- http://up.##pertemp.ir/view/2782758/fontawesome-webfont.eot?
- http://ro##p.ir/view/2800606/Shabnam-Bold-FD.eot?
- http://ro##p.ir/view/2800610/Shabnam-FD.eot?
- http://ro##p.ir/view/2800645/jquery.js
- http://ro##p.ir/view/2800615/bg.png
- http://ro##p.ir/view/2800649/textareabg.png
UDP
- DNS ASK ro##log.com
- DNS ASK ni##ong.ir
- DNS ASK ro##p.ir
- DNS ASK ma##.net
- DNS ASK cd#.###ine.4dsply.com
- DNS ASK up.##pertemp.ir
- DNS ASK microsoft.com
- DNS ASK go#####agmanager.com
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
