{
	"id": "3b0572fc-23fe-454f-99f9-36354be0608c",
	"created_at": "2026-04-06T02:12:45.689967Z",
	"updated_at": "2026-04-10T03:35:21.532184Z",
	"deleted_at": null,
	"sha1_hash": "c1652d14a944c83e4fc440837897d8d748d79fb6",
	"title": "Ipconfig",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 61384,
	"plain_text": "Ipconfig\r\nArchived: 2026-04-06 01:54:50 UTC\r\nDisplays all current TCP/IP network configuration values and refreshes Dynamic Host Configuration Protocol\r\n(DHCP) and Domain Name System (DNS) settings. Used without parameters, ipconfig displays the IP address,\r\nsubnet mask, and default gateway for all adapters.\r\nipconfig [/all] [/renew [Adapter]] [/release [Adapter]] [/flushdns] [/displaydns] [/registerdns]\r\n[/showclassid Adapter] [/setclassid Adapter [ClassID]]\r\n/all   : Displays the full TCP/IP configuration for all adapters. Without this parameter, ipconfig displays only the\r\nIP address, subnet mask, and default gateway values for each adapter. Adapters can represent physical interfaces,\r\nsuch as installed network adapters, or logical interfaces, such as dial-up connections.\r\n/renew [ Adapter ] : Renews DHCP configuration for all adapters (if an adapter is not specified) or for a specific\r\nadapter if the Adapter parameter is included. This parameter is available only on computers with adapters that are\r\nconfigured to obtain an IP address automatically. To specify an adapter name, type the adapter name that appears\r\nwhen you use ipconfig without parameters.\r\n/release [ Adapter ] : Sends a DHCPRELEASE message to the DHCP server to release the current DHCP\r\nconfiguration and discard the IP address configuration for either all adapters (if an adapter is not specified) or for a\r\nspecific adapter if the Adapter parameter is included. This parameter disables TCP/IP for adapters configured to\r\nobtain an IP address automatically. To specify an adapter name, type the adapter name that appears when you use\r\nipconfig without parameters.\r\n/flushdns   : Flushes and resets the contents of the DNS client resolver cache. During DNS troubleshooting, you\r\ncan use this procedure to discard negative cache entries from the cache, as well as any other entries that have been\r\nadded dynamically.\r\n/displaydns   : Displays the contents of the DNS client resolver cache, which includes both entries preloaded from\r\nthe local Hosts file and any recently obtained resource records for name queries resolved by the computer. The\r\nDNS Client service uses this information to resolve frequently queried names quickly, before querying its\r\nconfigured DNS servers.\r\n/registerdns   : Initiates manual dynamic registration for the DNS names and IP addresses that are configured at a\r\ncomputer. You can use this parameter to troubleshoot a failed DNS name registration or resolve a dynamic update\r\nproblem between a client and the DNS server without rebooting the client computer. The DNS settings in the\r\nadvanced properties of the TCP/IP protocol determine which names are registered in DNS.\r\n/showclassid   Adapter   : Displays the DHCP class ID for a specified adapter. To see the DHCP class ID for all\r\nadapters, use the asterisk (*) wildcard character in place of Adapter. This parameter is available only on\r\ncomputers with adapters that are configured to obtain an IP address automatically.\r\nhttps://technet.microsoft.com/en-us/library/bb490921.aspx\r\nPage 1 of 3\n\n/setclassid   Adapter [ ClassID ] : Configures the DHCP class ID for a specified adapter. To set the DHCP class\r\nID for all adapters, use the asterisk (*) wildcard character in place of Adapter. This parameter is available only on\r\ncomputers with adapters that are configured to obtain an IP address automatically. If a DHCP class ID is not\r\nspecified, the current class ID is removed.\r\n/? : Displays help at the command prompt.\r\nThe ipconfig command is the command-line equivalent to the winipcfg command, which is available in\r\nWindows Millennium Edition, Windows 98, and Windows 95. Although Windows XP does not include a\r\ngraphical equivalent to the winipcfg command, you can use Network Connections to view and renew an IP\r\naddress. To do this, open Network Connections, right-click a network connection, click Status, and then\r\nclick the Support tab.\r\nThis command is most useful on computers that are configured to obtain an IP address automatically. This\r\nenables users to determine which TCP/IP configuration values have been configured by DHCP, Automatic\r\nPrivate IP Addressing (APIPA), or an alternate configuration.\r\nIf the Adapter name contains any spaces, use quotation marks around the adapter name (that is, \"Adapter\r\nName\").\r\nFor adapter names, ipconfig supports the use of the asterisk (*) wildcard character to specify either\r\nadapters with names that begin with a specified string or adapters with names that contain a specified\r\nstring. For example, Local* matches all adapters that start with the string Local and *Con* matches all\r\nadapters that contain the string Con.\r\nThis command is available only if the Internet Protocol (TCP/IP) protocol is installed as a component in\r\nthe properties of a network adapter in Network Connections\r\nTo display the basic TCP/IP configuration for all adapters, type:\r\nipconfig\r\nTo display the full TCP/IP configuration for all adapters, type:\r\nipconfig /all\r\nTo renew a DHCP-assigned IP address configuration for only the Local Area Connection adapter, type:\r\nipconfig /renew \"Local Area Connection\"\r\nTo flush the DNS resolver cache when troubleshooting DNS name resolution problems, type:\r\nipconfig /flushdns\r\nTo display the DHCP class ID for all adapters with names that start with Local, type:\r\nipconfig /showclassid Local*\r\nTo set the DHCP class ID for the Local Area Connection adapter to TEST, type:\r\nhttps://technet.microsoft.com/en-us/library/bb490921.aspx\r\nPage 2 of 3\n\nipconfig /setclassid \"Local Area Connection\" TEST\r\nFormat Meaning\r\nItalic Information that the user must supply\r\nBold\r\nElements that the user must type exactly as\r\nshown\r\nEllipsis (...)\r\nParameter that can be repeated several times in a\r\ncommand line\r\nBetween brackets ([]) Optional items\r\nBetween braces ({}); choices separated by pipe (|).\r\nExample: {even|odd}\r\nSet of choices from which the user must choose\r\nonly one\r\nCourier font Code or program output\r\nTCP/IP utilities and services\r\nPing\r\nCommand-line reference A-Z\r\nSource: https://technet.microsoft.com/en-us/library/bb490921.aspx\r\nhttps://technet.microsoft.com/en-us/library/bb490921.aspx\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://technet.microsoft.com/en-us/library/bb490921.aspx"
	],
	"report_names": [
		"bb490921.aspx"
	],
	"threat_actors": [
		{
			"id": "2864e40a-f233-4618-ac61-b03760a41cbb",
			"created_at": "2023-12-01T02:02:34.272108Z",
			"updated_at": "2026-04-10T02:00:04.97558Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "ETDA:WildCard",
			"tools": [
				"RustDown",
				"SysJoker"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "256a6a2d-e8a2-4497-b399-628a7fad4b3e",
			"created_at": "2023-11-30T02:00:07.299845Z",
			"updated_at": "2026-04-10T02:00:03.484788Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "MISPGALAXY:WildCard",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775441565,
	"ts_updated_at": 1775792121,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/c1652d14a944c83e4fc440837897d8d748d79fb6.pdf",
		"text": "https://archive.orkl.eu/c1652d14a944c83e4fc440837897d8d748d79fb6.txt",
		"img": "https://archive.orkl.eu/c1652d14a944c83e4fc440837897d8d748d79fb6.jpg"
	}
}