EIP-2026-117520

This Metasploit module exploits a vulnerability in Microsoft Windows Contact File Format by embedding a malicious executable path in a .contact file. When the user clicks the URL link in the contact file, it executes the embedded executable instead of navigating to a website.