Where are Windows Diagnostic Reports stored?

Windows Diagnostic Reports

On Windows 10 OS, errors, bugs, app crashes, app hangs and OS crashes are by default orgainzed into reports, known as Windows Diagnostic Reports (WER). The purpose of these reports, is to help Microsoft resolve issues. This means that depending on the error, bug or crash the report is submitted to Microsoft servers, that is if you haven’t restricted report sending (By default, sending of these reports is enabled – Stay tuned to thetqweb’s “Windows OS Revealed” Series for ways to block these reports from being sent).

Note that these errors, bugs, app crashes, app hangs and OS crashes are still collected despite blocking the reports from being sent to Microsoft servers.

Now to be sent, these reports have to be stored in files first. If you were to locate these files you could;
– Use them to keep track of your PC’s health and Software stability,
– Get rid of them, or
– Do whatever it is that you wish with them

To access the files, navigate to the following location:

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\

 

In this location, the reports are located inside folders, organized by “Error classification” (AppCrash, AppHang, Critical, Kernel & NonCritical) and App. For instance a Critical error in Powershell could be contained in a folder named “Critical_Powershell.exe”.

 

NOTE:// All these Error Reports are stored in files with the same name, that is, “Report.wer”, but organised in different folders as explained above. Despite this fact, these Windows Error Reports (WER) contain different data, specific to Error Classification & App.

 

This article is part of the “Windows OS Revealed” series. Follow the Series to learn more about the Windows Operating System. It’s a Next-Level Analysis of the internal working of Microsoft Windows OS.

 

 

Where are Windows Diagnostic Reports stored?
Hacking | thetqweb