Should I block it?

No, this file is 100% safe to run.

Additional versions

9.0.8.36	8.33%
8.5.4.28	25.00%
8.4.2.5	8.33%
8.1.2.62	8.33%
8.1.0.78	8.33%
3.3.2.27	8.33%
3.3.2.27	8.33%
3.2.0.275	25.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyW, RegQueryValueExW, ReportEventW, RegSetValueExW, RegCreateKeyW, ChangeServiceConfig2W, CreateServiceW, RegDeleteValueW, RegCloseKey, RegDeleteKeyW, RegOpenKeyExW, DeleteService, ControlService, StartServiceW, StartServiceCtrlDispatcherW, RegisterEventSourceW, SetServiceStatus, CloseServiceHandle, OpenServiceW, OpenSCManagerW, DeregisterEventSource, RegisterServiceCtrlHandlerExW, SetNamedSecurityInfoW, CryptGenRandom, CryptReleaseContext, RegisterEventSourceA, ReportEventA, RegCreateKeyExW, CryptAcquireContextW, AllocateAndInitializeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, FreeSid, SetEntriesInAclW, QueryServiceStatus

crypt32.dll

CertCloseStore, CertFindCertificateInStore, CertGetNameStringW, CryptQueryObject, CryptMsgClose, CryptMsgGetParam

gdi32.dll

CreateFontW, GetStockObject, DeleteObject

kernel32.dll

DllMain

setupapi.dll

CMP_WaitNoPendingInstallEvents, CM_Get_Device_IDW, CM_Locate_DevNodeW, CM_Get_Sibling, CM_Get_DevNode_Registry_PropertyW, CM_Get_Parent, CM_Get_DevNode_Status, CM_Get_Child, SetupDiGetClassDevsExW, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiSetClassInstallParamsW, SetupDiEnumDeviceInfo, SetupDiGetDeviceInfoListDetailW, SetupDiCallClassInstaller, CM_Get_Device_ID_ExW, SetupDiOpenDeviceInfoW

shell32.dll

SHGetFolderPathW

shlwapi.dll

StrStrIW

user32.dll

PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, SetTimer, KillTimer, SetWindowLongW, GetClientRect, DefWindowProcW, CallNextHookEx, SystemParametersInfoW, SetParent, GetSystemMetrics, GetFocus, LoadImageW, SetWindowsHookExW, UnhookWindowsHookEx, TranslateAcceleratorW, RegisterClassExW, LoadIconW, LoadCursorW, GetClassInfoExW, wsprintfW, LoadStringW, LoadAcceleratorsW, IsChild, DestroyWindow, CloseDesktop, SwitchDesktop, CallWindowProcW, GetDlgItem, OpenDesktopW, GetParent, CloseWindowStation, DestroyIcon, SetProcessWindowStation, IsWindow, GetUserObjectInformationW, GetDesktopWindow, MessageBoxA, OpenWindowStationW, GetProcessWindowStation, GetWindowTextLengthW, SetFocus, SendMessageW, EndPaint, CreateWindowExW, BeginPaint, CharToOemBuffW, RegisterDeviceNotificationW, PostThreadMessageW, UnregisterDeviceNotification, MessageBoxW

version.dll

GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW

wtsapi32.dll

WTSRegisterSessionNotification

ATService.exe

AuthenTec Fingerprint Security System (AFSS) by AuthenTec (Signed)

Remove ATService.exe

Version:	8.4.2.5
MD5:	1f914641f0c164fb1d2a60c53b87e27a
SHA1:	ac2869d3a25f56aef30fe38fe15b2d6c93273a7e
SHA256:	c51b126fddcb6906504a9f3c7d5580ed95a4d9b776d2a701b9e06d9adac435b9

What is ATService.exe?

AuthenTec Fingerprint Security System (AFSS) is a Biometric logon application that enables the user to logon to their personal computer through the use of the biometric fingerprint reader in replacement of a password.

Overview

AtService.exe runs as a service under the name ATService (SYSTEM\CurrentControlSet\Services\ATService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by AuthenTec which was issued by the VeriSign certificate authority (CA).

Details

File name:	AtService.exe
Publisher:	AuthenTec, Inc.
Product name:	AuthenTec Fingerprint Security System (AFSS)
Description:	AFSS Service
Typical file path:	C:\Windows\System32\atservice.exe
File version:	8.4.2.5
Size:	2.56 MB (2,682,616 bytes)
Certificate
Issued to:	AuthenTec
Authority (CA):	VeriSign
Effective date:	Thursday, October 25, 2007
Expiration date:	Friday, December 5, 2008
Digital DNA
Entropy:	6.606106
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

ATService
'ATService' (AuthenTec Fingerprint Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00003266%	0.028634%
Kernel CPU:	0.00001391%	0.013761%
User CPU:	0.00001875%	0.014873%
Kernel CPU time:	47 ms/min	100,923,805ms/min
CPU cycles:	6,985/sec	17,470,203/sec
Memory
Private memory:	2.32 MB	21.59 MB
Private (maximum):	6.85 MB
Private (minimum):	164 KB
Non-paged memory:	2.32 MB	21.59 MB
Virtual memory:	52.78 MB	140.96 MB
Virtual memory (peak):	54.78 MB	169.69 MB
Working set:	1.44 MB	18.61 MB
Working set (peak):	6.87 MB	37.95 MB
Page faults:	4,499/min	2,039/min
I/O
I/O read transfer:	3 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	4 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	7	12
Handles:	120	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\fingerprint sensor\atservice.exe"
Owner:	SYSTEM
Windows Service
Service name:	SYSTEM\CurrentControlSet\Services\ATService
Display name:	ATService
Description:	“Provides applications with access to AuthenTec fingerprint sensors.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads