¿Para qué sirve la dll wer.dll?

Archivo DLL de Informe de errores de Windows

Dependencias de la dll wer.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\wer.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-wow64-l1-1-1.dll
    ntdll.dll
    api-ms-win-oobe-notification-l1-1-0.dll
    api-ms-win-core-sidebyside-l1-1-0.dll
    api-ms-win-core-windowserrorreporting-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-libraryloader-l1-2-1.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-3.dll
    api-ms-win-core-processsnapshot-l1-1-0.dll
    api-ms-win-core-console-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-file-l2-1-0.dll
    api-ms-win-core-file-l2-1-2.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    RPCRT4.dll
    api-ms-win-core-file-l1-2-0.dll
    api-ms-win-core-psapi-l1-1-0.dll
    api-ms-win-core-realtime-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    api-ms-win-core-registry-l1-1-1.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-version-l1-1-0.dll
    api-ms-win-core-path-l1-1-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    api-ms-win-core-toolhelp-l1-1-0.dll
    api-ms-win-core-processtopology-obsolete-l1-1-0.dll
    api-ms-win-core-localization-obsolete-l1-2-0.dll
    api-ms-win-core-wow64-l1-1-0.dll
    api-ms-win-core-synch-l1-2-1.dll

  Image has the following delay load dependencies:

    ext-ms-win-ntuser-window-l1-1-0.dll
    ext-ms-win-ntuser-windowclass-l1-1-0.dll
    ext-ms-win-wer-xbox-l1-1-0.dll
    ext-ms-win-wer-ui-l1-1-0.dll
    ext-ms-win-desktopappx-l1-1-3.dll
    dbghelp.dll
    api-ms-win-appmodel-runtime-l1-1-0.dll
    api-ms-win-shell-shellfolders-l1-1-0.dll
    NETAPI32.dll
    SspiCli.dll
    CRYPTSP.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-service-management-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    USERENV.dll
    api-ms-win-security-sddl-l1-1-0.dll
    bcrypt.dll
    WINHTTP.dll
    OLEAUT32.dll
    api-ms-win-core-winrt-l1-1-0.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    CRYPT32.dll
    Cabinet.dll
    api-ms-win-core-registry-l2-1-0.dll
    api-ms-win-security-provider-l1-1-0.dll
    api-ms-win-eventlog-legacy-l1-1-0.dll
    UMPDC.dll
    ext-ms-win-kernel32-package-l1-1-0.dll
    ext-ms-win-ntuser-message-l1-1-0.dll
    ext-ms-win-ntuser-synch-l1-1-0.dll
    ext-ms-win-ntuser-windowstation-l1-1-0.dll
    ext-ms-win-session-usertoken-l1-1-0.dll
    XmlLite.dll
    ext-ms-win-session-usermgr-l1-1-0.dll
    api-ms-win-eventing-controller-l1-1-0.dll
    api-ms-win-eventing-legacy-l1-1-0.dll
    ext-ms-win-appcompat-aepic-l1-1-0.dll

  Summary

        4000 .data
        1000 .didat
        6000 .pdata
       2B000 .rdata
        1000 .reloc
        2000 .rsrc
       A1000 .text

Funciones que tiene la dll wer.dll


94    0 0005B600 CloseThreadWaitChainSession
95    1 0005B690 GetThreadWaitChain
96    2 0005B890 OpenThreadWaitChainSession
97    3 0005B9B0 RegisterWaitChainCOMCallback
98    4 0005C640 WerAddExcludedApplication
99    5 00062C40 WerFreeString
100    6 0005C830 WerRemoveExcludedApplication
101    7 0005C9E0 WerReportAddDump
102    8 0005CBD0 WerReportAddFile
103    9 00013180 WerReportCloseHandle
104    A 0003A640 WerReportCreate
105    B 0005CD10 WerReportSetParameter
106    C 0005CF20 WerReportSetUIOption
107    D 0005CFE0 WerReportSubmit
108    E 00062C50 WerStoreClose
109    F 00062CE0 WerStoreGetFirstReportKey
110   10 00062E30 WerStoreGetNextReportKey
111   11 00063000 WerStoreGetReportCount
112   12 00063010 WerStoreGetSizeOnDisk
113   13 000630B0 WerStoreOpen
114   14 000632A0 WerStorePurge
115   15 000634F0 WerStoreQueryReportMetadataV1
116   16 000638D0 WerStoreQueryReportMetadataV2
117   17 00063D40 WerStoreQueryReportMetadataV3
118   18 000641E0 WerStoreUploadReport
1   19 0005C0F0 WerSysprepCleanup
2   1A 0005C1B0 WerSysprepGeneralize
3   1B 0005C2D0 WerUnattendedSetup
4   1C 0005D4B0 WerpAddAppCompatData
119   1D 000644C0 WerpAddFile
120   1E 000645A0 WerpAddFileBuffer
121   1F 000646A0 WerpAddFileCallback
5   20 0005D920 WerpAddIfRegisteredForAppLocalDump
6   21 0005DB10 WerpAddMemoryBlock
7   22 00042B90 WerpAddRegisteredDataToReport
8   23 0005DCE0 WerpAddRegisteredDumpsToReport
9   24 0005DEA0 WerpAddRegisteredMetadataToReport
122   25 00033B30 WerpAddTerminationReason
10   26 0005E000 WerpArchiveReport
123   27 00014BC0 WerpAuxmdDumpProcessImages
124   28 00042650 WerpAuxmdDumpRegisteredBlocks
125   29 00048500 WerpAuxmdFree
126   2A 00065890 WerpAuxmdFreeCopyBuffer
127   2B 00038A10 WerpAuxmdHashVaRanges
128   2C 000658D0 WerpAuxmdInitialize
129   2D 00065A00 WerpAuxmdMapFile
11   2E 0005E310 WerpCancelUpload
12   2F 0005E3B0 WerpCleanWer
13   30 0005E600 WerpCloseStore
130   31 000647A0 WerpCreateIntegratorReportId
14   32 0005E690 WerpCreateMachineStore
15   33 0005E8D0 WerpDeleteReport
16   34 0004FD60 WerpDestroyWerString
17   35 00034300 WerpEnumerateStoreNext
18   36 0004D910 WerpEnumerateStoreStart
131   37 00064840 WerpExtractReportFiles
19   38 0004DA80 WerpFlushImageCache
20   39 0005E940 WerpForceDeferredCollection
132   3A 00064900 WerpFreeString
21   3B 0005EB70 WerpFreeUnmappedVaRanges
22   3C 0005ED20 WerpGetBucketId
23   3D 0005EE70 WerpGetDynamicParameter
24   3E 0005EF80 WerpGetEventType
25   3F 0005F000 WerpGetExtendedDiagData
26   40 0005F2B0 WerpGetFileByIndex
27   41 0005F3D0 WerpGetFilePathByIndex
133   42 00064930 WerpGetIntegratorReportId
28   43 0005F4B0 WerpGetLegacyBucketId
29   44 0005F600 WerpGetLoadedModuleByIndex
30   45 0005F6D0 WerpGetNumFiles
31   46 0005F770 WerpGetNumLoadedModules
32   47 0005F7E0 WerpGetNumSigParams
33   48 0005F860 WerpGetPathOfWERTempDirectory
134   49 000649A0 WerpGetReportConsent
34   4A 0005FBE0 WerpGetReportCount
35   4B 0005FC80 WerpGetReportFinalConsent
36   4C 0005FCF0 WerpGetReportFlags
37   4D 0004FE50 WerpGetReportId
38   4E 0005FD80 WerpGetReportInformation
39   4F 0005FDF0 WerpGetReportSettings
40   50 0005FEA0 WerpGetReportTime
41   51 0005FF10 WerpGetReportType
42   52 0005FF80 WerpGetResponseId
43   53 00060020 WerpGetSigParamByIndex
135   54 00064AC0 WerpGetStoreLocation
44   55 000382A0 WerpGetStorePath
45   56 000600B0 WerpGetStoreType
46   57 00060180 WerpGetTextFromReport
47   58 00060200 WerpGetUIParamByIndex
48   59 000602D0 WerpGetUploadTime
49   5A 00060350 WerpGetWerStringData
50   5B 00060370 WerpGetWow64Process
51   5C 00060400 WerpHashApplicationParameters
52   5D 00065290 WerpInitializeImageCache
136   5E 00064BF0 WerpIsDisabled
53   5F 00060540 WerpIsOnBattery
54   60 00013A20 WerpIsTransportAvailable
137   61 00064CE0 WerpLoadReport
55   62 000607C0 WerpLoadReportFromBuffer
56   63 000609E0 WerpOpenMachineArchive
57   64 00013840 WerpOpenMachineQueue
58   65 000609F0 WerpPromptUser
59   66 00060A60 WerpPruneStore
60   67 00060B10 WerpReportCancel
61   68 00060BB0 WerpReportSetMaxProcessHoldMilliseconds
62   69 00060C10 WerpReportSprintfParameter
63   6A 00060D00 WerpReserveMachineQueueReportDir
64   6B 000652D0 WerpResetTransientImageCacheStatistics
65   6C 00060F20 WerpRestartApplication
138   6D 00064D10 WerpSetAuxiliaryArchivePath
139   6E 00064D90 WerpSetCallBack
140   6F 00064E00 WerpSetDefaultUserConsent
66   70 000617A0 WerpSetDynamicParameter
67   71 000618A0 WerpSetEventName
141   72 00065010 WerpSetExitListeners
142   73 000650A0 WerpSetIntegratorReportId
143   74 00065110 WerpSetIptEnabled
68   75 00061910 WerpSetProcessTimelines
69   76 00061980 WerpSetQuickDumpType
70   77 000619F0 WerpSetReportApplicationIdentity
71   78 00061A60 WerpSetReportFlags
72   79 00061AC0 WerpSetReportInformation
73   7A 00061B50 WerpSetReportIsFatal
74   7B 00061BC0 WerpSetReportNamespaceParameter
144   7C 00065190 WerpSetReportOption
75   7D 00061CB0 WerpSetReportTime
76   7E 00061D20 WerpSetReportUploadContextToken
77   7F 00061DD0 WerpSetTelemetryAppParams
78   80 00061E60 WerpSetTelemetryKernelParams
79   81 00061EC0 WerpSetTelemetryServiceParams
145   82 00065230 WerpSetTtdStatus
80   83 00061F70 WerpShowUpsellUI
81   84 00015C40 WerpStitchedMinidumpVmPostReadCallback
82   85 000159D0 WerpStitchedMinidumpVmPreReadCallback
83   86 00054710 WerpStitchedMinidumpVmQueryCallback
84   87 000120E0 WerpSubmitReportFromStore
85   88 00061FC0 WerpTraceAuxMemDumpStatistics
86   89 00062110 WerpTraceDuration
87   8A 00062300 WerpTraceImageCacheStatistics
88   8B 00062590 WerpTraceSnapshotStatistics
89   8C 00054780 WerpTraceStitchedDumpWriterStatistics
90   8D 00062970 WerpTraceUnmappedVaRangesStatistics
91   8E 00041E30 WerpUnmapProcessViews
92   8F 00062A40 WerpValidateReportKey
93   90 0004B3A0 WerpWalkGatherBlocks

Información avanzada sobre funciones que tiene la dll wer.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\wer.dll

File Type: DLL

  Section contains the following exports for wer.dll

    00000000 characteristics
    8C240D72 time date stamp
        0.00 version
           1 ordinal base
         145 number of functions
         145 number of names

    ordinal hint RVA      name

         94    0 0005B600 CloseThreadWaitChainSession
         95    1 0005B690 GetThreadWaitChain
         96    2 0005B890 OpenThreadWaitChainSession
         97    3 0005B9B0 RegisterWaitChainCOMCallback
         98    4 0005C640 WerAddExcludedApplication
         99    5 00062C40 WerFreeString
        100    6 0005C830 WerRemoveExcludedApplication
        101    7 0005C9E0 WerReportAddDump
        102    8 0005CBD0 WerReportAddFile
        103    9 00013180 WerReportCloseHandle
        104    A 0003A640 WerReportCreate
        105    B 0005CD10 WerReportSetParameter
        106    C 0005CF20 WerReportSetUIOption
        107    D 0005CFE0 WerReportSubmit
        108    E 00062C50 WerStoreClose
        109    F 00062CE0 WerStoreGetFirstReportKey
        110   10 00062E30 WerStoreGetNextReportKey
        111   11 00063000 WerStoreGetReportCount
        112   12 00063010 WerStoreGetSizeOnDisk
        113   13 000630B0 WerStoreOpen
        114   14 000632A0 WerStorePurge
        115   15 000634F0 WerStoreQueryReportMetadataV1
        116   16 000638D0 WerStoreQueryReportMetadataV2
        117   17 00063D40 WerStoreQueryReportMetadataV3
        118   18 000641E0 WerStoreUploadReport
          1   19 0005C0F0 WerSysprepCleanup
          2   1A 0005C1B0 WerSysprepGeneralize
          3   1B 0005C2D0 WerUnattendedSetup
          4   1C 0005D4B0 WerpAddAppCompatData
        119   1D 000644C0 WerpAddFile
        120   1E 000645A0 WerpAddFileBuffer
        121   1F 000646A0 WerpAddFileCallback
          5   20 0005D920 WerpAddIfRegisteredForAppLocalDump
          6   21 0005DB10 WerpAddMemoryBlock
          7   22 00042B90 WerpAddRegisteredDataToReport
          8   23 0005DCE0 WerpAddRegisteredDumpsToReport
          9   24 0005DEA0 WerpAddRegisteredMetadataToReport
        122   25 00033B30 WerpAddTerminationReason
         10   26 0005E000 WerpArchiveReport
        123   27 00014BC0 WerpAuxmdDumpProcessImages
        124   28 00042650 WerpAuxmdDumpRegisteredBlocks
        125   29 00048500 WerpAuxmdFree
        126   2A 00065890 WerpAuxmdFreeCopyBuffer
        127   2B 00038A10 WerpAuxmdHashVaRanges
        128   2C 000658D0 WerpAuxmdInitialize
        129   2D 00065A00 WerpAuxmdMapFile
         11   2E 0005E310 WerpCancelUpload
         12   2F 0005E3B0 WerpCleanWer
         13   30 0005E600 WerpCloseStore
        130   31 000647A0 WerpCreateIntegratorReportId
         14   32 0005E690 WerpCreateMachineStore
         15   33 0005E8D0 WerpDeleteReport
         16   34 0004FD60 WerpDestroyWerString
         17   35 00034300 WerpEnumerateStoreNext
         18   36 0004D910 WerpEnumerateStoreStart
        131   37 00064840 WerpExtractReportFiles
         19   38 0004DA80 WerpFlushImageCache
         20   39 0005E940 WerpForceDeferredCollection
        132   3A 00064900 WerpFreeString
         21   3B 0005EB70 WerpFreeUnmappedVaRanges
         22   3C 0005ED20 WerpGetBucketId
         23   3D 0005EE70 WerpGetDynamicParameter
         24   3E 0005EF80 WerpGetEventType
         25   3F 0005F000 WerpGetExtendedDiagData
         26   40 0005F2B0 WerpGetFileByIndex
         27   41 0005F3D0 WerpGetFilePathByIndex
        133   42 00064930 WerpGetIntegratorReportId
         28   43 0005F4B0 WerpGetLegacyBucketId
         29   44 0005F600 WerpGetLoadedModuleByIndex
         30   45 0005F6D0 WerpGetNumFiles
         31   46 0005F770 WerpGetNumLoadedModules
         32   47 0005F7E0 WerpGetNumSigParams
         33   48 0005F860 WerpGetPathOfWERTempDirectory
        134   49 000649A0 WerpGetReportConsent
         34   4A 0005FBE0 WerpGetReportCount
         35   4B 0005FC80 WerpGetReportFinalConsent
         36   4C 0005FCF0 WerpGetReportFlags
         37   4D 0004FE50 WerpGetReportId
         38   4E 0005FD80 WerpGetReportInformation
         39   4F 0005FDF0 WerpGetReportSettings
         40   50 0005FEA0 WerpGetReportTime
         41   51 0005FF10 WerpGetReportType
         42   52 0005FF80 WerpGetResponseId
         43   53 00060020 WerpGetSigParamByIndex
        135   54 00064AC0 WerpGetStoreLocation
         44   55 000382A0 WerpGetStorePath
         45   56 000600B0 WerpGetStoreType
         46   57 00060180 WerpGetTextFromReport
         47   58 00060200 WerpGetUIParamByIndex
         48   59 000602D0 WerpGetUploadTime
         49   5A 00060350 WerpGetWerStringData
         50   5B 00060370 WerpGetWow64Process
         51   5C 00060400 WerpHashApplicationParameters
         52   5D 00065290 WerpInitializeImageCache
        136   5E 00064BF0 WerpIsDisabled
         53   5F 00060540 WerpIsOnBattery
         54   60 00013A20 WerpIsTransportAvailable
        137   61 00064CE0 WerpLoadReport
         55   62 000607C0 WerpLoadReportFromBuffer
         56   63 000609E0 WerpOpenMachineArchive
         57   64 00013840 WerpOpenMachineQueue
         58   65 000609F0 WerpPromptUser
         59   66 00060A60 WerpPruneStore
         60   67 00060B10 WerpReportCancel
         61   68 00060BB0 WerpReportSetMaxProcessHoldMilliseconds
         62   69 00060C10 WerpReportSprintfParameter
         63   6A 00060D00 WerpReserveMachineQueueReportDir
         64   6B 000652D0 WerpResetTransientImageCacheStatistics
         65   6C 00060F20 WerpRestartApplication
        138   6D 00064D10 WerpSetAuxiliaryArchivePath
        139   6E 00064D90 WerpSetCallBack
        140   6F 00064E00 WerpSetDefaultUserConsent
         66   70 000617A0 WerpSetDynamicParameter
         67   71 000618A0 WerpSetEventName
        141   72 00065010 WerpSetExitListeners
        142   73 000650A0 WerpSetIntegratorReportId
        143   74 00065110 WerpSetIptEnabled
         68   75 00061910 WerpSetProcessTimelines
         69   76 00061980 WerpSetQuickDumpType
         70   77 000619F0 WerpSetReportApplicationIdentity
         71   78 00061A60 WerpSetReportFlags
         72   79 00061AC0 WerpSetReportInformation
         73   7A 00061B50 WerpSetReportIsFatal
         74   7B 00061BC0 WerpSetReportNamespaceParameter
        144   7C 00065190 WerpSetReportOption
         75   7D 00061CB0 WerpSetReportTime
         76   7E 00061D20 WerpSetReportUploadContextToken
         77   7F 00061DD0 WerpSetTelemetryAppParams
         78   80 00061E60 WerpSetTelemetryKernelParams
         79   81 00061EC0 WerpSetTelemetryServiceParams
        145   82 00065230 WerpSetTtdStatus
         80   83 00061F70 WerpShowUpsellUI
         81   84 00015C40 WerpStitchedMinidumpVmPostReadCallback
         82   85 000159D0 WerpStitchedMinidumpVmPreReadCallback
         83   86 00054710 WerpStitchedMinidumpVmQueryCallback
         84   87 000120E0 WerpSubmitReportFromStore
         85   88 00061FC0 WerpTraceAuxMemDumpStatistics
         86   89 00062110 WerpTraceDuration
         87   8A 00062300 WerpTraceImageCacheStatistics
         88   8B 00062590 WerpTraceSnapshotStatistics
         89   8C 00054780 WerpTraceStitchedDumpWriterStatistics
         90   8D 00062970 WerpTraceUnmappedVaRangesStatistics
         91   8E 00041E30 WerpUnmapProcessViews
         92   8F 00062A40 WerpValidateReportKey
         93   90 0004B3A0 WerpWalkGatherBlocks

  Summary

        4000 .data
        1000 .didat
        6000 .pdata
       2B000 .rdata
        1000 .reloc
        2000 .rsrc
       A1000 .text

Integridad de la dll wer.dll



Algorithm       Hash                                                                   Path                                                           
---------       ----                                                                   ----                                                           
SHA256          E5F5EEE350CBDF1A4D55AD11803BAE7ED887DFC2BD3B95B38180B74D49CBEC05       C:\Windows\System32\wer.dll                                    


Detalles sobre el fichero dll wer.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\wer.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : wer.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\wer.dll
                    InternalName:     wer.dll
                    OriginalFilename: wer.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Archivo DLL de Informe de errores de Windows
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : wer
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.19041.630_none_fe74c92c64b0cf8c\wer.dll}
LinkType          : HardLink
Name              : wer.dll
Length            : 883712
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\wer.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:42:38
CreationTimeUtc   : 29/11/2020 10:42:38
LastAccessTime    : 03/12/2020 16:43:31
LastAccessTimeUtc : 03/12/2020 15:43:31
LastWriteTime     : 29/11/2020 11:42:38
LastWriteTimeUtc  : 29/11/2020 10:42:38
Attributes        : Archive



Procesos que utilizan la dll wer.dll


explorer
powershell_ise
powershell_ise
powershell_ise
TeamViewer