well, first you are not allowed to attempt to reverse engineer Moss and even less to publish the content and URL, I removed the information from your post
then yes Moss acces to Internet to :
– auto update
– give me Google analytics anonimous stats
– give a server Date ( not a pc one)
– get the player public IP , traced in log on C class
nothing more , nothing less.
so no definitively it’s not a virus , trojan , adware or whatever.
it’s only based on windows API and a trusted ZIP lib, rest is my C code