werfault.exe
Windows Problem Reporting by Microsoft Corporation (Signed)
| Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| MD5: | 9a7d2e2b854c0d1c9e61cf13f2703914 |
| SHA1: | 1cb794c07f701fee1458c93374d2d09ed03eb077 |
| SHA256: | 2858046add2f1b7b6ecf201c0f7d7e0fe9c2ded08845f40c3266b5d96b56e3c7 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
werfault.exe executes as a process with the local user's privileges. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 64 bit program.
Details
| File name: | werfault.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Windows Problem Reporting |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\werfault.exe |
| Original name: | WerFault.exe.mui |
| File version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Product version: | 6.2.9200.16384 |
| Size: | 376.63 KB (385,672 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Effective date: | Tuesday, April 10, 2012 |
| Expiration date: | Wednesday, July 10, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00778707% | |
| Kernel CPU: | 0.00441879% | |
| User CPU: | 0.00336828% | |
| Kernel CPU time: | 265 ms/min | |
| Memory |
| Private memory: | 4.09 MB | |
| Private (maximum): | 15.49 MB | |
| Private (minimum): | 15.24 MB | |
| Non-paged memory: | 4.09 MB | |
| Virtual memory: | 166.88 MB | |
| Virtual memory (peak): | 178.04 MB | |
| Working set: | 15.24 MB | |
| Working set (peak): | 15.53 MB | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 327 | |
| GUI GDI count: | 43 | |
| GUI GDI peak: | 62 | |
| GUI USER count: | 20 | |
| GUI USER peak: | 42 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | C:\windows\syswow64\werfault.exe -u -p 7508 -s 3372 |
| Owner: | User |
| Parent process: | svchost.exe (by Microsoft) |
Threads
Averages
| WerFault.exe (main module) |
| Total CPU: | 0.00538163% | |
| Kernel CPU: | 0.00307520% | |
| User CPU: | 0.00230643% | |
| CPU cycles: | 219,436/sec | |
| Memory: | 380 KB | |
| wow64.dll |
| Total CPU: | 0.00256282% | |
| Kernel CPU: | 0.00205026% | |
| User CPU: | 0.00051256% | |
| CPU cycles: | 87,011/sec | |
| Memory: | 276 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
40.00% |
|
| Windows 8.1 Enterprise |
20.00% |
|
| Windows 8 Pro |
20.00% |
|
| Windows 8 Pro with Media Center |
20.00% |
|
Distribution by country
United States installs about 40.00% of Windows Problem Reporting.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| American Megatrends |
100.00% |
|
