Wab.exe

Windows address book manager

Paths

  • C:\Program Files\Windows Mail\wab.exe
  • C:\Program Files (x86)\Windows Mail\wab.exe

Commands

Execute

Change HKLM\Software\Microsoft\WAB\DLLPath and execute DLL of choice

Use case: Execute dll file. Bypass defensive counter measures

Privileges: Administrator

wab.exe

Detection

Resources