Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.17031 (winblue_gdr.140221-1952) 3.03%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.04%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.27%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.03%
6.2.9200.16384 (win8_rtm.120725-1247) 2.67%
6.2.9200.16384 (win8_rtm.120725-1247) 15.78%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.06%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.03%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 24.33%
6.1.7600.16385 (win7_rtm.090713-1255) 43.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.03%
6.1.7600.16384 (win7_rtm.090710-1945) 0.03%
6.0.6001.18000 (longhorn_rtm.080118-1840) 5.82%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.41%
6.0.6000.16386 (vista_rtm.061101-2205) 0.48%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetLengthSid, CheckTokenMembership, AllocateAndInitializeSid, DuplicateToken, OpenProcessToken, RegGetValueW, CopySid, IsValidSid, FreeSid, ConvertSidToStringSidW, RegQueryValueExW, ImpersonateLoggedOnUser, CreateProcessAsUserW, RevertToSelf, GetTokenInformation, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW
kernel32.dll
InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoA, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnmapViewOfFile, CloseHandle, CreateProcessW, SetEvent, GetLastError, MapViewOfFile, CreateMutexW, Wow64RevertWow64FsRedirection, GetSystemDirectoryW, Wow64DisableWow64FsRedirection, IsWow64Process, GlobalFree, GetCommandLineW, HeapSetInformation, GetApplicationRecoveryCallback, DeleteFileW, OpenProcess, GetSystemDefaultLCID, InterlockedIncrement, lstrlenW, InterlockedDecrement, CreateEventW, LocalFree, OutputDebugStringA, GetProcAddress, GetModuleHandleW, OpenMutexW, ReadProcessMemory, UnhandledExceptionFilter, WaitForSingleObject, LoadLibraryExW, FreeLibrary, OpenFileMappingW, ClosePrivateNamespace, CreateFileMappingW, GetProcessHeap, HeapAlloc, OpenPrivateNamespaceW, HeapFree
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationToken, RtlFreeSid, NtClose, NtAlpcConnectPort, RtlAllocateAndInitializeSid, RtlInitUnicodeString, NtQueryInformationProcess, RtlDeleteBoundaryDescriptor, RtlAddSIDToBoundaryDescriptor, RtlImageNtHeaderEx, RtlCreateBoundaryDescriptor, RtlCreateServiceSid, NtAlpcSendWaitReceivePort
ole32.dll
StringFromGUID2, CoInitialize, CoCreateInstance, CoCreateGuid, CoInitializeEx, CoUninitialize, CoRegisterClassObject, CoRevokeClassObject
shell32.dll
CommandLineToArgvW, ShellExecuteExW
user32.dll
CloseDesktop, CloseWindowStation, GetUserObjectInformationW, GetThreadDesktop, GetProcessWindowStation
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wer.dll
WerReportCloseHandle, WerpSetReportInformation, WerpAddRegisteredDataToReport, WerpSetCallBack, WerReportAddDump, WerpEnumerateStoreStart, WerpEnumerateStoreNext, WerpGetCustomerWatsonData, WerReportCreate, WerReportSetParameter, WerReportSubmit, WerpGetResponseId, WerpSetCustomerWatsonData, WerpGetReportInformation, WerpOpenMachineQueue, WerpSubmitReportFromStore, WerpOpenUserQueue, WerpCloseStore, WerpShowNXNotification, WerpIsTransportAvailable, WerpLoadReport, WerpGetReportType
wevtapi.dll
EvtNext, EvtClose, EvtRender, EvtCreateRenderContext, EvtQuery

wermgr.exe

Windows Problem Reporting by Microsoft Corporation (Signed)

Remove wermgr.exe
Version:   6.3.9600.16384 (winblue_rtm.130821-1623)
MD5:   d74ab3da863e9d8c504d14c2af4eee71
SHA1:   71402006291cc7e532f2445109aadf2c5ff6ac50
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wermgr.exe?

The error reporting feature enables users to notify Microsoft of application faults, kernel faults, unresponsive applications, and other application specific problems. Microsoft can use the error reporting feature to provide customers with troubleshooting information, solutions, or updates for their specific problems.

About wermgr.exe (from Microsoft Corporation)

Windows provides crash, non-response, and kernel fault error reporting by default without requiring changes to your application. The report will include minidump and heap dump information if required.

DetailsDetails

File name:wermgr.exe
Publisher:Microsoft Corporation
Product name:Windows Problem Reporting
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wermgr.exe
Original name:WerMgr
File version:6.3.9600.16384 (winblue_rtm.130821-1623)
Product version:6.3.9600.16384
Size:134.13 KB (137,352 bytes)
Build date:8/22/2013 8:33 AM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows GUI
Entropy:5.974084
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'QueueReporting' runs on logon in the path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'
  • Entry path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path '\Microsoft\Windows\Windows Error Reporting\QueueReporting'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 19.50%
Windows 7 Ultimate 15.00%
Windows 8.1 Pro 12.00%
Windows 7 Professional 8.00%
Windows 8.1 Single Language 5.00%
Windows 8.1 Pro with Media Center 1.50%
Windows 8.1 N 1.00%
Windows Seven Black Edition 1.00%
Windows 7 Home Basic 1.00%
Windows 8.1 Enterprise Evaluation 1.00%
Windows Vista Home Premium 1.00%

Distribution by countryDistribution by country

United States installs about 48.99% of Windows Problem Reporting.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 25.00%
ASUS 19.35%
Hewlett-Packard 18.15%
Acer 12.90%
Toshiba 8.87%
Lenovo 6.45%
Sony 4.03%
Alienware 2.42%
GIGABYTE 1.61%
Samsung 1.21%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE