Technical Information
- https://klingers-kfc.site/nhg.exe as %temp+%\newfile.exe
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.word\~wrf{a556d991-ecbc-49d7-b67f-13d812b61b5c}.tmp
- '%ProgramFiles%\microsoft office\office14\excel.exe' -Embedding
- '%ProgramFiles%\microsoft office\office14\excelcnv.exe' -Embedding