VersionsVersions

6.3.9600.16384 (winblue_rtm.130821-1623) 5.26%
6.2.9200.16384 (win8_rtm.120725-1247) 10.53%
6.2.9200.16384 (win8_rtm.120725-1247) 5.26%
6.2.9200.16384 (win8_rtm.120725-1247) 5.26%
6.1.7600.16385 (win7_rtm.090713-1255) 5.26%
6.1.7600.16385 (win7_rtm.090713-1255) 63.16%
6.0.6000.16386 (vista_rtm.061101-2205) 5.26%

Relationships

werfault.exe

Windows Problem Reporting by Microsoft Corporation (Signed)

Remove werfault.exe
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

There are 7 versions of werfault.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). werfault.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 371.4 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 4.86 MB with the maximum memory reaching around 15.9 MB. Addionally, typically read and write I/O disk operations is about 276 Bytes per minute for reads and 2 Bytes per minute for writes.

DetailsDetails

File name:werfault.exe
Publisher:Microsoft Corporation
Product name:Windows Problem Reporting
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\werfault.exe
Original name:WerFault.exe.mui
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Tuesday, April 10, 2012
Expiration date:Wednesday, July 10, 2013

BehaviorsBehaviors

(Note, the behaviors below are for all versions of werfault.exe, select a unique version for details.)
Startup files (all users) run once
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
  • '*WerKernelReporting' → C:\Windows\SYSTEM32\WerFault.exe -k -rq

VersionsAll file variations of werfault.exe

MD5SHA-1File size
f1801776a9c160371a165e96bf3bd1e5 d365ceb7a5dea7504ff534c0bdbd2a30f653d03c 447.87 KB
f8467fa7734c53f115d6810616ca7bcb 92811c0261bb3b268827edf219c591c0faa9a77a 429.09 KB
9a7d2e2b854c0d1c9e61cf13f2703914 1cb794c07f701fee1458c93374d2d09ed03eb077 376.63 KB
3631ae3089de4faa50d3bd62e370299e 9745e605a913c46b4e176f1023a4bf3124d42bcb 376.73 KB
8784236eed5079493da9fc95b28b89f8 dd663f6c6cf66c8b99ab32809ca74880168503bd 405.5 KB
5feab868caedbbd1b7a145ca8261e4aa f43f28cc5165608e6fb3794e9a3d083ca2c75f0e 352 KB
7bedd051b53821b040ead42db0724848 feb09d9e93c27087ba62800aa15d1ada60319517 212 KB
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE