CmdID

CmdID / Commands

iexplore

Microsoft Internet Explorer. tldr-pages

On Windows 1 Sigma rule name it File iexplore.exe

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

Microsoft Internet Explorer. Note: This command is deprecated and no longer maintained, use modern browsers like msedge instead.

Open a specific URL or file

iexplore https://example.comIdentify

Open in InPrivate mode

iexplore -private example.comIdentify

Open in kiosk/application mode (without toolbars, URL bar, buttons, etc.)

iexplore -k example.comIdentify

Open with extensions/add-ons disabled

iexplore -extoff example.comIdentify

What detects it

Sigma process creation rules that name iexplore
criticalExploiting CVE-2019-1388Florian Roth (Nextron Systems)