Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.93%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.11%
6.3.9600.16384 (winblue_rtm.130821-1623)	2.90%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.27%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.05%
6.2.9200.16384 (win8_rtm.120725-1247)	2.68%
6.2.9200.16384 (win8_rtm.120725-1247)	15.40%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.11%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.11%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.11%
6.1.7600.16385 (win7_rtm.090713-1255)	6.49%
6.1.7600.16385 (win7_rtm.090713-1255)	43.56%
6.1.7600.16385 (win7_rtm.090713-1255)	20.49%
6.1.7600.16385 (win7_rtm.090713-1255)	4.02%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	0.21%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.91%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.11%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.16%
6.0.6000.16386 (vista_rtm.061101-2205)	0.21%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 22 versions of wbengine.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'Servicio del módulo de copia de seguridad a nivel de bloque' with the name 'wbengine' and described as “Copias de seguridad de Windows usa el servicio WBENGINE para realizar operaciones de copia de seguridad y recuperación. Si el usuario detiene este servicio, es posible que se produzcan errores en la operación de copia de seguridad o de recuperación que se esté ejecutando. Si se deshabilita este servicio, es posible que se deshabiliten las operaciones de copia de seguridad y de recuperación que usa”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.25 MB. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 6.35 MB with the maximum memory reaching around 7.81 MB. Addionally, typically read and write I/O disk operations is about 24 Bytes per minute for reads and 18 Bytes per minute for writes.

Block Level Backup Engine Service allows for a Complete PC backup at the block level of the Hard Drive, versus file by file. This means you get an image of the hard drive. This service backs up your PC at the block level and not file by file. This essentially means creating an image of the drive. This service is part of Vista's drive backup capability.