Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	10.53%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.2.9200.16384 (win8_rtm.120725-1247)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	5.26%
6.1.7600.16385 (win7_rtm.090713-1255)	63.16%
6.0.6000.16386 (vista_rtm.061101-2205)	5.26%

Parent process

Related files

This is a Windows system installed file with Windows File Protection (WFP) enabled.

werfault.exe executes as a process with the local user's privileges typically within the context of its parent sbupdate.exe (SBUpdate Module by Speed-Bit LTD). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. This version is designed to run on Windows Vista and is compiled as a 32 bit program.

CPU
Total CPU:	0.00005084%	0.028634%
Kernel CPU:	0.00002918%	0.013761%
User CPU:	0.00002166%	0.014873%
Kernel CPU time:	1,326,009 ms/min	100,923,805ms/min
Memory
Private memory:	4.63 MB	21.59 MB
Private (maximum):	4.03 MB
Private (minimum):	1.84 MB
Non-paged memory:	4.63 MB	21.59 MB
Virtual memory:	60.52 MB	140.96 MB
Virtual memory (peak):	61.15 MB	169.69 MB
Working set:	10.08 MB	18.61 MB
Working set (peak):	10.08 MB	37.95 MB
Resource allocations
Threads:	3	12
Handles:	127	600
GUI GDI count:	82	103
GUI USER count:	42	49