Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	10.53%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	63.16%
6.0.6000.16386 (vista_rtm.061101-2205)	5.26%

Parent process

Related files

This is a Windows system installed file with Windows File Protection (WFP) enabled.

werfault.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. This version is designed to run on Windows 7 and is compiled as a 64 bit program.

CPU
Total CPU:	0.16959425%	0.028634%
Kernel CPU:	0.13660840%	0.013761%
User CPU:	0.03298586%	0.014873%
Kernel CPU time:	1,092,162 ms/min	100,923,805ms/min
CPU cycles:	9,199,302/sec	17,470,203/sec
Context switches:	34/sec	284/sec
Memory
Private memory:	5.41 MB	21.59 MB
Private (maximum):	11.36 MB
Private (minimum):	10.52 MB
Non-paged memory:	5.41 MB	21.59 MB
Virtual memory:	95.27 MB	140.96 MB
Virtual memory (peak):	111.02 MB	169.69 MB
Working set:	10.87 MB	18.61 MB
Working set (peak):	12.12 MB	37.95 MB
Page faults:	6,320/min	2,039/min
I/O
I/O read transfer:	333 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	26 Bytes/sec	448.09 KB/min
I/O other operations:	12/sec	1,671/min
Resource allocations
Threads:	5	12
Handles:	172	600
GUI GDI count:	64	103
GUI GDI peak:	78	142
GUI USER count:	31	49
GUI USER peak:	42	71

werui.dll
Total CPU:	0.07710579%	0.272967%
Kernel CPU:	0.07009617%	0.107585%
User CPU:	0.00700962%	0.165382%
CPU cycles:	6,636,070/sec	5,741,424/sec
Context switches:	18/sec	79/sec
Memory:	168 KB	1.16 MB
ntdll.dll
Total CPU:	0.03509050%
Kernel CPU:	0.02105430%
User CPU:	0.01403620%
CPU cycles:	511,379/sec
Context switches:	2/sec
Memory:	1.23 MB
WerFault.exe (main module)
Total CPU:	0.00546481%
Kernel CPU:	0.00370255%
User CPU:	0.00176226%
CPU cycles:	2,890,565/sec
Context switches:	18/sec
Memory:	364 KB