Parent process

Child process

Related files

sba.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent sbu.exe (SBWatchman by Speed-Bit LTD). The file is digitally signed by Speed-Bit LTD which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 8 (6.2.9200.0).

CPU
Total CPU:	0.00000388%	0.028634%
Kernel CPU:	0.00000194%	0.013761%
User CPU:	0.00000194%	0.014873%
Kernel CPU time:	16 ms/min	100,923,805ms/min
CPU cycles:	376/sec	17,470,203/sec
Memory
Private memory:	2.59 MB	21.59 MB
Private (maximum):	500 KB
Private (minimum):	192 KB
Non-paged memory:	2.59 MB	21.59 MB
Virtual memory:	83.13 MB	140.96 MB
Virtual memory (peak):	84.27 MB	169.69 MB
Working set:	496 KB	18.61 MB
Working set (peak):	9.07 MB	37.95 MB
Page faults:	2,575/min	2,039/min
I/O
I/O read transfer:	7 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	16	12
Handles:	149	600

WININET.dll
Total CPU:	0.00000807%	0.272967%
Kernel CPU:	0.00000807%	0.107585%
User CPU:	0.00000000%	0.165382%
CPU cycles:	155/sec	5,741,424/sec
Memory:	2.18 MB	1.16 MB
sba.exe (main module)
Total CPU:	0.00000807%
Kernel CPU:	0.00000000%
User CPU:	0.00000807%
CPU cycles:	156/sec
Memory:	128 KB