~/Privilege Escalation/Windows/Binaries# cat Wab.exe.md

Windows address book manager

Paths:

C:\Program Files\Windows Mail\wab.exe
C:\Program Files (x86)\Windows Mail\wab.exe

Detection: WAB.exe should normally never be used

Execute

Change HKLM\Software\Microsoft\WAB\DLLPath and execute DLL of choice

wab.exe