Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	10.53%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	63.16%
6.0.6000.16386 (vista_rtm.061101-2205)	5.26%

Relationships

wermgr.exe (Windows Problem Reporting by Microsoft Corporation)

werfault.exe

Windows Problem Reporting by Microsoft Corporation (Signed)

Remove werfault.exe

Version:	6.2.9200.16384 (win8_rtm.120725-1247)
MD5:	f8467fa7734c53f115d6810616ca7bcb
SHA1:	92811c0261bb3b268827edf219c591c0faa9a77a

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

werfault.exe executes as a process with the local user's privileges. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 64 bit program.

Details

File name:	werfault.exe
Publisher:	Microsoft Corporation
Product name:	Windows Problem Reporting
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\werfault.exe
Original name:	WerFault.exe.mui
File version:	6.2.9200.16384 (win8_rtm.120725-1247)
Product version:	6.2.9200.16384
Size:	429.09 KB (439,392 bytes)
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Effective date:	Tuesday, April 10, 2012
Expiration date:	Wednesday, July 10, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.24720426%	0.028634%
Kernel CPU:	0.14846896%	0.013761%
User CPU:	0.09873530%	0.014873%
Kernel CPU time:	8 ms/min	100,923,805ms/min
CPU cycles:	277/sec	17,470,203/sec
Memory
Private memory:	1.26 MB	21.59 MB
Private (maximum):	9.06 MB
Private (minimum):	8.68 MB
Non-paged memory:	1.26 MB	21.59 MB
Virtual memory:	73.06 MB	140.96 MB
Virtual memory (peak):	74.78 MB	169.69 MB
Working set:	2.91 MB	18.61 MB
Working set (peak):	3.38 MB	37.95 MB
Page faults:	937/min	2,039/min
I/O
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	47	600
GUI GDI count:	4	103
GUI GDI peak:	4	142
GUI USER count:	1	49
GUI USER peak:	1	71

Process properties

Platform:	64-bit
Command lines:	C:\Windows\System32\werfault.exe -u -p 728 -s 2248 C:\Windows\System32\werfault.exe -u -p 1104 -s 420
Owner:	User
Parent process:	svchost.exe (by Microsoft)