CmdID

CmdID / Commands

wmplayer

Play and manage media files using Windows Media Player. tldr-pages

On Windows 1 Sigma rule name it File wmplayer.exe

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

Play and manage media files using Windows Media Player. Note: This command only applies to Windows Media Player versions released prior to Windows 10.

Launch Windows Media Player

wmplayerIdentify

Play an audio, video, or playlist file

wmplayer path\to\fileIdentify

Play a DVD or Audio CD

wmplayer /device:dvdIdentify

Play a file in fullscreen mode

wmplayer path\to\file /fullscreenIdentify

Specify a user interface skin when playing a file

wmplayer "path\to\file?wmpskin=skin_name"Identify

Show the Media Library page

wmplayer /Task MediaLibraryIdentify

Show the Now Playing page

wmplayer /Task NowPlayingIdentify

What detects it

Sigma process creation rules that name wmplayer
criticalWinnti Malware HK University CampaignFlorian Roth (Nextron Systems), Markus Neis