wtf community v1.0.0

Network Detective Data Collector (nddc.exe)

WMIExec-ish NDCC

📋 Live Preview 
Network Detective Data Collector
Network Detective Data Collector

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.generic
security.execution.impacket

Documentation

examples:

  • description: "Execute Network Detective Data Collector (nddc.exe) and observe the unusual behavior" command: "Network Detective Data Collector"

Network Detective Data Collector (nddc.exe)

WMIExec-ish NDCC

The executable for Network Detective Data Collector displays false positive activity similar to Impacket's WMI/SMBexec.

Contributed by Dray Agha (@purp1ew0lf)

References