Additional versions

3.32.2.1	16.67%
3.31.4.2	83.33%

umbrella.exe runs as a service under the name SProtection with extensive SYSTEM privileges (full administrator access). This is typically installed with the program BDE Borland Database Engine published by Luzius Schneider. The file is digitally signed by SIEN S.A. which was issued by the VeriSign certificate authority (CA). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).

CPU
Total CPU:	0.00005550%	0.028634%
Kernel CPU:	0.00004750%	0.013761%
User CPU:	0.00000799%	0.014873%
Kernel CPU time:	1,732 ms/min	100,923,805ms/min
Memory
Private memory:	5.21 MB	21.59 MB
Private (maximum):	12.36 MB
Private (minimum):	8.55 MB
Non-paged memory:	5.21 MB	21.59 MB
Virtual memory:	97.44 MB	140.96 MB
Virtual memory (peak):	98.69 MB	169.69 MB
Working set:	12.32 MB	18.61 MB
Working set (peak):	12.36 MB	37.95 MB
Resource allocations
Threads:	11	12
Handles:	174	600

wow64.dll
Total CPU:	0.00018246%	0.272967%
Kernel CPU:	0.00012569%	0.107585%
User CPU:	0.00005676%	0.165382%
CPU cycles:	61,800/sec	5,741,424/sec
Memory:	252 KB	1.16 MB
ntdll.dll
Total CPU:	0.00013380%
Kernel CPU:	0.00008920%
User CPU:	0.00004460%
CPU cycles:	55,200/sec
Memory:	1.66 MB
umbrella.exe (main module)
Total CPU:	0.00003649%
Kernel CPU:	0.00002635%
User CPU:	0.00001014%
CPU cycles:	1,350/sec
Memory:	2.77 MB