SungHoon_Kim

What information can you get from an WER file?

Blog Post created by SungHoon_Kim Employee on Oct 27, 2016

When something goes wrong(crash) on your windows app, you might have found WER files.

In case if someone gives you an WER file, what information can you get out of it?

 

Note: Those WER files are generally created under:

  • "C:\ProgramData\Microsoft\Windows\WER\ReportQueue"
  • "C:\Users\....\AppData\Microsoft\Windows\WER\ReportArchive\"
  • "C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\"

 

More info at About WER (Windows) 

 

So, if you received an WER file, you need a tool to view the content.

 

http://www.nirsoft.net/utils/app_crash_view.html

Above is a good tool that shows you the content in a friendly way.

It would scan your known folders and list all the WER files available too.

 

But if you don't have a tool, don't worry. Notepad is sufficient as it is a text file.

 

So, when you receive WER file that was created from other machines, you can open it from a text editor but if they are many then the tool above is recommended.

 

The information you would be interested in would be the the:

EventType
EventTime

Application Name

Fault Module Name

Exception Code

 

If you look at the tool screen, it already has those information extracted and displayed nicely.

If the Exception Code is a generic one, it might not help.

But if that returns some specific value, that is something that may help you to get more information.

Outcomes