Skip to content

Hide Navigation Hide TOC

Suspicious Child Process Of Wermgr.EXE (396f6630-f3ac-44e3-bfc8-1b161bc00c4e)

Detects suspicious Windows Error Reporting manager (wermgr.exe) child process

Cluster A Galaxy A Cluster B Galaxy B Level
Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) Attack Pattern Suspicious Child Process Of Wermgr.EXE (396f6630-f3ac-44e3-bfc8-1b161bc00c4e) Sigma-Rules 1
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern Suspicious Child Process Of Wermgr.EXE (396f6630-f3ac-44e3-bfc8-1b161bc00c4e) Sigma-Rules 1