Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
Fair programs  
Bad programs 

What is werfault.exe?

Part of Windows Problem Reporting by Microsoft

What is it?

The error reporting feature enables users to notify Microsoft of application faults, kernel faults, unresponsive applications, and other application specific problems. Microsoft can use the error reporting feature to provide customers with troubleshooting information, solutions, or updates for their specific problems.
Description of werfault.exe from Microsoft
Windows provides crash, non-response, and kernel fault error reporting by default without requiring changes to your application. The report will include minidump and heap dump information if required. Applications instead use the WER API to send application-specific problem reports to Microsoft. Because Windows automatically reports unhandled exceptions, application should not handle fatal exceptions. If the faulting or not-responding process is interactive, WER displays a user interface informing the user of the problem. An application is considered unresponsive if it does not respond to Windows messages for five seconds while the user is trying to interact with the application. The error reporting system sends all data to Microsoft through the Internet.
(werfault.exe is a system file that is installed with Windows)
Download Boost and enjoy your PC. Remove Windows Problem Reporting and optimize your PC.

How does werfault.exe run?

Process - werfault.exe is an instance of a running program. This 32-bit program executes with the privileges as the currently logged in user account. werfault.exe is executed by the process sbupdate.exe (SBUpdate Module by Speed-Bit LTD).

How does werfault.exe start?

Startup files (all users) run once - werfault.exe is registered with the run identifier '*WerKernelReporting' and the execution command 'C:\Windows\SYSTEM32\WerFault.exe -k -rq' in the Windows registry HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. RunOnce keys are used to launch a service or background process whenever a user logs into Windows. Once the application is launched for the first time its entry will be removed from the Registry so it does not run again when the user logins again. Applications here are designed to be used primarily by Setup programs.


What is the community is seeing?What is the community is doing?
About 0.1% of all Boost users have the werfault.exe process running.Of the 0.1% of werfault.exe users, 76.0% have disabled it.
How stable is Windows Problem Reporting?
Based on crash data discovered by Boost, stability is a measure of how sound this particular process and the average percent of times it crashes.
Typical program1.26%
How resource intensive is werfault.exe?
Comparison based on the average resource utilization across all programs.
0.00043% CPU4332.2%
Average CPU utilization across all programs is 0.00001%.
          4.63 MB RAM21.5%
Average private memory utilization across all programs is 21.53 MB.
82 GDI objects54.7%
Average number of GUI GDI and USER objects for all programs is 150.
Typical file (disk image) location:

Are there other versions of Windows Problem Reporting?

Why are multiple of the same versions listed?

What else is related?

Windows Problem Reporting Stability

werfault.exe crashes or has encountered a critical error 0.8900% of the time.
Error: Encerrar inesperadamente (BlueScreen)
Occurred: over 6 months ago
Error: Encerrar inesperadamente (BlueScreen)
Occurred: over 6 months ago
Error: Encerrar inesperadamente (BlueScreen)
Occurred: over 6 months ago

What Windows OS versions does this run on?

Windows Vista (TM) Home Premium (6.0.6002.131072)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...
Download Boost

File details

File name: werfault.exe
Publisher: Microsoft Corporation (verified)
Name: Windows Problem Reporting
Description: Microsoft® Windows® Operating System
Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product version: 6.0.6000.16386
Size: 212 KB
Original file name: WerFault.exe.mui
Windows file protection: Yes

Resource utilization

CPU utilization averages
Total CPU: 0.0004624015%
Privileged CPU: 0.0000291773%
User CPU: 0.00043322420123%
Privileged CPU time: 1326008.5 ms
Privileged CPU time /min: 0 ms
CPU cycle count: 503,421,264
Memory utilization averages
Committed memory: 60.52 MB
Peak committed memory: 61.15 MB
Paged memory: 4.63 MB
Peak paged memory: 4.84 MB
Paged system memory: 58.38 KB
Non-paged system memory: 4.36 KB
Working set memory: 10.08 MB
Peak working set memory: 10.08 MB
Min working set memory: 1.84 MB
Private memory: 4.63 MB
Page faults: 1,299
Page faults /min: 0
Process I/O averages
Total read operations: 3
Total read transfer: 1.7 KB
Total write operations: 3
Total write transfer: 592 Bytes
Total other operations: 1,088
Total other transfer: 7.89 KB
GUI Object Averages
GDI objects: 82
USER objects: 42
Handle count average: 127
Thread count average: 3

Process details

Runs as (owner): User
Integrety level: High
Windows platform: 32-bit
Parent Process
Process Commands
C:\Windows\system32\WerFault.exe -u -p 636 -s 268
C:\Windows\system32\WerFault.exe -u -p 4908 -s 268

Startup files (all users) run once details

Name: *WerKernelReporting
Command: C:\Windows\SYSTEM32\WerFault.exe -k -rq

Image hashes

MD5: 7bedd051b53821b040ead42db0724848
SHA-1: feb09d9e93c27087ba62800aa15d1ada60319517
SHA-256: 42c4495e5d524496a9ff879648b4d1b2998b2aab49fa612e9630bcd5d629476a

PE image details

CLR assembly: Yes
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No
Import Table
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
© 2018 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.

Save 40% on Boost

For a limited time, from now until Wednesday, May 23, 2018 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!