Mason, a professional hacker, targets an organization and spreads Emotet malware through malicious script. After infecting the victim's device. Mason further used Emotet to spread the infection across

NetPass.exe is a legitimate Nirsoft password recovery utility that recovers network credentials stored on a local machine, not a tool for enumerating shared network drives.

Outlook scraper is a separate Emotet module that harvests email contacts and message content from Microsoft Outlook to facilitate spam campaigns, not to identify network shares.

WebBrowserPassView is a Nirsoft utility used to recover passwords saved in web browsers and is sometimes abused for credential theft, but it does not enumerate network resources or writable shares.

The Emotet malware includes a module referred to as the 'credential enumerator,' packaged as a self-extracting RAR file, that specifically discovers and enumerates network resources including writable shared drives. This information is used to facilitate lateral movement across local networks, allowing Emotet to propagate from machine to machine. This component is distinct from Emotet's password-stealing modules and is focused on network reconnaissance to maximize the spread of infection.