WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" C:\Users\test22\AppData\Local\Temp\0712_4408305114.doc
1540rundll32.exe "C:\Windows\System32\rundll32.exe" c:\users\test22\appdata\roaming\microsoft\templates\ier.dll,HINYYIMIVRX
1620