Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

10.0.5815 75.00%
10.0.5815 25.00%
(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey, RegOpenKeyExA, RegQueryValueExA, RegEnumKeyExA, RegQueryInfoKeyA, RegQueryValueExW, DeregisterEventSource, ReportEventA, RegisterEventSourceW, RegEnumValueA, GetUserNameA
gdi32.dll
DeleteDC, RestoreDC, DeleteObject, GetTextMetricsA, GetTextFaceA, SelectObject, CreateFontA, GetDeviceCaps, SetMapMode, SaveDC, Polyline, CreatePen, ExtTextOutW, GetTextExtentPoint32W, SetTextAlign, SetBkMode, SetTextColor, CreateFontIndirectA, GetObjectA
kernel32.dll
MultiByteToWideChar, GetCommandLineA, ExitProcess, GetCommandLineW, MapViewOfFile, ReleaseMutex, WaitForSingleObject, WaitForMultipleObjects, LeaveCriticalSection, EnterCriticalSection, DeleteFileW, GetModuleHandleA, GetStartupInfoA, GetStartupInfoW, CloseHandle, CreateThread, Sleep, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, MulDiv, FreeLibrary, GetProcAddress, WideCharToMultiByte, GetModuleFileNameA, LoadLibraryA, GetSystemDefaultLangID, GetUserDefaultLangID, GetACP, GetSystemDefaultLCID, GetVersionExA, InitializeCriticalSection, GetProcessHeap, DeleteCriticalSection, lstrcpyA, GetLastError, GetProfileStringA, SetEvent, CreateSemaphoreA, CreateFileMappingA, GetFileSize, CreateFileA, UnmapViewOfFile, DeleteFileA, RemoveDirectoryA, RemoveDirectoryW, GetTickCount, SetEnvironmentVariableA, ReadProcessMemory, VirtualQueryEx, GetSystemInfo, GetFileAttributesA, CreateDirectoryA, FindNextFileA, FindClose, FindFirstFileA, GetWindowsDirectoryA, WriteFile, SetFilePointer, CreateFileW, GetTempPathW, GetFileAttributesW, CreateDirectoryW, LockResource, LoadResource, FindResourceExA, GetSystemDirectoryA, SetEndOfFile, ExpandEnvironmentStringsA, ExpandEnvironmentStringsW, IsDBCSLeadByte, CreateProcessA, CreateProcessW, SuspendThread, GetSystemTime, GetComputerNameA, CreateMutexA, TlsAlloc, TlsFree, TlsSetValue, VirtualFree, TlsGetValue, GetTempPathA, ResumeThread, GetCurrentThreadId, TerminateThread, GetCurrentProcessId, IsValidCodePage, HeapAlloc, VirtualAlloc, DuplicateHandle, lstrcmpW, GetStringTypeW, DebugBreak, GetThreadSelectorEntry, GetLocaleInfoA, LCMapStringW, GetThreadContext, HeapFree, SetLastError, GetSystemTimeAsFileTime, OutputDebugStringA, LCMapStringA, GetStringTypeA, RtlUnwind
shell32.dll
ExtractIconExA, ShellExecuteExA
shlwapi.dll
AssocQueryStringW, UrlGetPartA, wnsprintfA
urlmon.dll
CreateURLMoniker
user32.dll
GetScrollInfo, IsDlgButtonChecked, LoadIconA, DrawFocusRect, SetWindowTextW, GetWindow, LoadCursorA, DestroyIcon, GetWindowPlacement, IsIconic, LoadStringW, GetWindowThreadProcessId, EnumWindows, CharPrevA, CallWindowProcA, CallWindowProcW, IsWindowUnicode, EnableWindow, DrawIconEx, DestroyWindow, SetWindowLongA, GetSysColor, SendDlgItemMessageA, GetClientRect, SetScrollInfo, SystemParametersInfoA, CheckDlgButton, SetDlgItemTextA, SetFocus, EndDialog, GetDlgItem, ShowWindow, SetCursor, InvalidateRect, DialogBoxParamW, DialogBoxParamA, CreateDialogParamW, CreateDialogParamA, SetWindowTextA, GetDC, MapWindowPoints, GetSysColorBrush, FillRect, ReleaseDC, GetSystemMetrics, SetForegroundWindow, GetWindowLongA, GetWindowRect, SetWindowPos, RegisterClassExA, CreateWindowExA, GetMessageA, IsDialogMessageA, TranslateMessage, DispatchMessageA, PostQuitMessage, KillTimer, SetTimer, SendMessageA, PostMessageA, DefWindowProcA
version.dll
GetFileVersionInfoSizeA, GetFileVersionInfoSizeW, VerQueryValueA, GetFileVersionInfoW, GetFileVersionInfoA
wininet.dll
InternetReadFileExA, InternetWriteFile, HttpSendRequestExA, InternetSetOptionA, HttpEndRequestA, InternetSetStatusCallback, InternetAutodial, InternetGetConnectedState, InternetCloseHandle, InternetQueryOptionA, HttpQueryInfoA, HttpOpenRequestA, InternetConnectA, InternetOpenA

dwwin.exe

Microsoft Application Error Reporting by Microsoft

Remove dwwin.exe
Version:   10.0.5815
MD5:   86042f6f6a5287eaf9379c91d0bf72b6
SHA1:   532bf74e6aead7438aa7264d01759a065410ee68
SHA256:   92e5974dfd91acebf5d8bd5f14361c0afd7528ef6503d1d8a8c26e64c115a0cb
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

dwwin.exe executes as a process with the local user's privileges typically within the context of its parent browserdefender.exe (Application Manager by Bit89 Inc.).

DetailsDetails

File name:dwwin.exe
Publisher:Microsoft Corporation
Product name:Microsoft Application Error Reporting
Typical file path:C:\Windows\System32\dwwin.exe
Original name:DW.Exe
File version:10.0.5815
Size:176 KB (180,224 bytes)
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00518099%
0.028634%
Kernel CPU:0.00465220%
0.013761%
User CPU:0.00052879%
0.014873%
Kernel CPU time:391 ms/min
100,923,805ms/min
Context switches:6/sec
284/sec
Memory
Private memory:2.56 MB
21.59 MB
Private (maximum):6.22 MB
Private (minimum):3.53 MB
Non-paged memory:2.56 MB
21.59 MB
Virtual memory:44.06 MB
140.96 MB
Virtual memory (peak):47.68 MB
169.69 MB
Working set:3.84 MB
18.61 MB
Working set (peak):6.23 MB
37.95 MB
Page faults:3,433/min
2,039/min
I/O
I/O read transfer:85 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:129 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:177 Bytes/sec
448.09 KB/min
I/O other operations:4/sec
1,671/min
Resource allocations
Threads:3
12
Handles:178
600
GUI GDI count:27
103
GUI USER count:21
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command lines:
  • C:\Windows\System32\dwwin.exe -x -s 500
  • C:\Windows\System32\dwwin.exe -d C:\DOCUME~1\user\Locals~1\temp\wer8951.dir00\manifest.txt
  • C:\Windows\System32\dwwin.exe -x -s 756
Owner:User
Parent processes:

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

Distribution by countryDistribution by country

Turkey installs about 33.33% of Microsoft Application Error Reporting.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 57.14%
Intel 28.57%
GIGABYTE 14.29%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE