Technical Information
- wab.exe
- %TEMP%\content\5172-5784-<File name>.exe-18-04-05-585.dump
- %TEMP%\content\5172-5784-<File name>.exe-18-04-07-132.dump
- %TEMP%\content\5172-5784-<File name>.exe-18-04-08-541.dump
- %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\<File name>.exe.log
- DNS ASK t.#e
- '%ProgramFiles%\windows mail\wab.exe'