Technical Information
- '%WINDIR%\syswow64\net.exe' stop Spooler
- 'rz.###tect-file.com':80
- http://rz.###tect-file.com/hmdbtpro.asp
- DNS ASK rz.###tect-file.com
- '%WINDIR%\syswow64\cmd.exe' /c net stop Spooler' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c net stop Spooler
- '%WINDIR%\syswow64\net1.exe' stop Spooler