Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.17031 (winblue_gdr.140221-1952) 3.03%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.04%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.27%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.03%
6.2.9200.16384 (win8_rtm.120725-1247) 2.67%
6.2.9200.16384 (win8_rtm.120725-1247) 15.78%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.06%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.03%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 24.33%
6.1.7600.16385 (win7_rtm.090713-1255) 43.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.03%
6.1.7600.16384 (win7_rtm.090710-1945) 0.03%
6.0.6001.18000 (longhorn_rtm.080118-1840) 5.82%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.41%
6.0.6000.16386 (vista_rtm.061101-2205) 0.48%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetLengthSid, CheckTokenMembership, AllocateAndInitializeSid, DuplicateToken, OpenProcessToken, RegGetValueW, CopySid, IsValidSid, FreeSid, ConvertSidToStringSidW, RegQueryValueExW, ImpersonateLoggedOnUser, CreateProcessAsUserW, RevertToSelf, GetTokenInformation, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW
kernel32.dll
InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoA, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnmapViewOfFile, CloseHandle, CreateProcessW, SetEvent, GetLastError, MapViewOfFile, CreateMutexW, Wow64RevertWow64FsRedirection, GetSystemDirectoryW, Wow64DisableWow64FsRedirection, IsWow64Process, GlobalFree, GetCommandLineW, HeapSetInformation, GetApplicationRecoveryCallback, DeleteFileW, OpenProcess, GetSystemDefaultLCID, InterlockedIncrement, lstrlenW, InterlockedDecrement, CreateEventW, LocalFree, OutputDebugStringA, GetProcAddress, GetModuleHandleW, OpenMutexW, ReadProcessMemory, UnhandledExceptionFilter, WaitForSingleObject, LoadLibraryExW, FreeLibrary, OpenFileMappingW, ClosePrivateNamespace, CreateFileMappingW, GetProcessHeap, HeapAlloc, OpenPrivateNamespaceW, HeapFree
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationToken, RtlFreeSid, NtClose, NtAlpcConnectPort, RtlAllocateAndInitializeSid, RtlInitUnicodeString, NtQueryInformationProcess, RtlDeleteBoundaryDescriptor, RtlAddSIDToBoundaryDescriptor, RtlImageNtHeaderEx, RtlCreateBoundaryDescriptor, RtlCreateServiceSid, NtAlpcSendWaitReceivePort
ole32.dll
StringFromGUID2, CoInitialize, CoCreateInstance, CoCreateGuid, CoInitializeEx, CoUninitialize, CoRegisterClassObject, CoRevokeClassObject
shell32.dll
CommandLineToArgvW, ShellExecuteExW
user32.dll
CloseDesktop, CloseWindowStation, GetUserObjectInformationW, GetThreadDesktop, GetProcessWindowStation
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wer.dll
WerReportCloseHandle, WerpSetReportInformation, WerpAddRegisteredDataToReport, WerpSetCallBack, WerReportAddDump, WerpEnumerateStoreStart, WerpEnumerateStoreNext, WerpGetCustomerWatsonData, WerReportCreate, WerReportSetParameter, WerReportSubmit, WerpGetResponseId, WerpSetCustomerWatsonData, WerpGetReportInformation, WerpOpenMachineQueue, WerpSubmitReportFromStore, WerpOpenUserQueue, WerpCloseStore, WerpShowNXNotification, WerpIsTransportAvailable, WerpLoadReport, WerpGetReportType
wevtapi.dll
EvtNext, EvtClose, EvtRender, EvtCreateRenderContext, EvtQuery

wermgr.exe

Windows Problem Reporting by Microsoft Corporation (Signed)

Remove wermgr.exe
Version:   6.0.6000.16386 (vista_rtm.061101-2205)
MD5:   2c8d466741833d6ca430da2b07bcb16a
SHA1:   fadaed3719b612f4f03ca719b36a5a2937fcb705
SHA256:   55b6216cab9d24ee3d05ec359ee16d608edc106bf720693d6cb4e0b6457d8351
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wermgr.exe?

The error reporting feature enables users to notify Microsoft of application faults, kernel faults, unresponsive applications, and other application specific problems. Microsoft can use the error reporting feature to provide customers with troubleshooting information, solutions, or updates for their specific problems.

About wermgr.exe (from Microsoft Corporation)

Windows provides crash, non-response, and kernel fault error reporting by default without requiring changes to your application. The report will include minidump and heap dump information if required.

DetailsDetails

File name:wermgr.exe
Publisher:Microsoft Corporation
Product name:Windows Problem Reporting
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wermgr.exe
Original name:WerMgr
File version:6.0.6000.16386 (vista_rtm.061101-2205)
Product version:6.0.6000.16386
Size:60.5 KB (61,952 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows GUI
Entropy:5.974084
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'QueueReporting' runs on logon in the path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'
  • Entry path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00015429%
0.028634%
Kernel CPU:0.00008326%
0.013761%
User CPU:0.00007103%
0.014873%
Kernel CPU time:109 ms/min
100,923,805ms/min
CPU cycles:12,060/sec
17,470,203/sec
Memory
Private memory:3.49 MB
21.59 MB
Private (maximum):7.79 MB
Private (minimum):5.95 MB
Non-paged memory:3.49 MB
21.59 MB
Virtual memory:61.45 MB
140.96 MB
Virtual memory (peak):62.02 MB
169.69 MB
Working set:6 MB
18.61 MB
Working set (peak):7.8 MB
37.95 MB
Page faults:2,106/min
2,039/min
I/O
I/O read transfer:8 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:3 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:137
600
GUI GDI count:46
103
GUI USER count:29
49

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\Windows\System32\wermgr.exe" "-queuereporting_svc" "C:\ProgramData\microsoft\windows\wer\reportqueue\report128d8c3a"
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
wer.dll
Total CPU:0.00009544%
0.272967%
Kernel CPU:0.00003579%
0.107585%
User CPU:0.00005965%
0.165382%
CPU cycles:10,915/sec
5,741,424/sec
Memory:884 KB
1.16 MB
wermgr.exe (main module)
Total CPU:0.00002386%
Kernel CPU:0.00001193%
User CPU:0.00001193%
CPU cycles:607/sec
Memory:72 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 19.50%
Windows 7 Ultimate 15.00%
Windows 8.1 Pro 12.00%
Windows 7 Professional 8.00%
Windows 8.1 Single Language 5.00%
Windows 8.1 Pro with Media Center 1.50%
Windows 8.1 N 1.00%
Windows Seven Black Edition 1.00%
Windows 7 Home Basic 1.00%
Windows 8.1 Enterprise Evaluation 1.00%
Windows Vista Home Premium 1.00%

Distribution by countryDistribution by country

United States installs about 48.99% of Windows Problem Reporting.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 25.00%
ASUS 19.35%
Hewlett-Packard 18.15%
Acer 12.90%
Toshiba 8.87%
Lenovo 6.45%
Sony 4.03%
Alienware 2.42%
GIGABYTE 1.61%
Samsung 1.21%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE