Windows 10: What is C:\WINDOWS\SysWOW64\WerFault.exe -u -p 10168 -s 1144

Hello All,Good day!We are seeing many command similar to C:\WINDOWS\SysWOW64\WerFault.exe -u -p 10168 -s 1144 and we are observing it is writing ".tmp" file in temp folder.With my little knowledge and google search I got to know that this it windows error reporting tools. However, our EDR is highlighting this writing activity to temp folder as a malicious.In regards to this , I would like you to help me to understand"1. What is meaning of C:\WINDOWS\SysWOW64\WerFault.exe -u -p 10168 -s 1144, I assume -p represents process ID. but would like to know details about the command.2. Is this normal

:)

 

Select C:\winddows\SysWow64\cmd. exe

Ah - I see what you mean. The link was in a more recent post found by searching for
C:\windows\SysWow64\cmd.exe

so I assumed it was directly relevant.

As it suggests, but with a change to use what you are seeing in Win 10:

What happened before this started happening?
Did you install or uninstall anything?
Change anything?
How long has this been happening?

If it started recently, do you have a suitable System Restore point you could use?

 

WerFault exe

https://www.drivereasy.com/knowledge...ication-error/

 

Runtime Error! Program C:\WINDOWS\SysWow64\RunDll32.exe


Hello. I've been trying to update my Nvidia drivers and I haven't had this problem until now (been using Windows 10 for about a month or two with many past driver updates not giving me any problems) and I keep getting this error. One solution was to do a registry cleaner, and I did that, but still got the error. Help? I don't really understand now.

Here's the full error:

"Microsoft Visual C++ Runtime Library


Runtime Error!

Program C:\WINDOWS\SysWow64\RunDll32.exe

This application has requested the runtime to terminate it in an unusual way. Please contact the application's support team for more information."



Also, here's the list of my PC build, if that makes a difference - AMD Athlon X4 860K, EVGA GeForce GTX 960, NZXT Source 210 (Black) - System Build - PCPartPicker