Should I block it?

No, this file is 100% safe to run.

Additional versions

3.0.0.9016	10.00%
3.0.0.9015	5.00%
3.0.0.7011	3.33%
3.0.0.7009	1.67%
3.0.0.6005	11.67%
3.0.0.6001	8.33%
3.0.0.4001	3.33%
3.0.0.3001	13.33%
3.0.0.2004	18.33%
3.0.0.0005	1.67%
2.0.0.4003	10.00%
2.0.0.3003	5.00%
2.0.0.3001	3.33%
2.0.0.1003	5.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegConnectRegistryW, CryptHashData, CryptDestroyHash, CryptCreateHash, CryptGetHashParam, CryptReleaseContext, CryptAcquireContextW, RegSetValueExW, RegCloseKey, RegOpenKeyExW, RegEnumValueW, RegDeleteValueW, RegDeleteKeyW, RegQueryInfoKeyW, RegQueryValueExW, RegCreateKeyExW, LsaFreeMemory, ConvertSidToStringSidW, AdjustTokenPrivileges, LookupPrivilegeDisplayNameW, LsaNtStatusToWinError, SetSecurityDescriptorOwner, LsaClose, GetSecurityInfo, LookupPrivilegeValueW, LookupAccountNameW, LsaAddAccountRights, LsaEnumerateAccountRights, LsaOpenPolicy, SetSecurityDescriptorGroup, GetUserNameW, LookupPrivilegeNameW, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetLengthSid, MakeSelfRelativeSD, GetSecurityDescriptorSacl, AddAce, InitializeSid, GetSidLengthRequired, IsValidSid, GetSecurityDescriptorOwner, InitializeAcl, MakeAbsoluteSD, GetNamedSecurityInfoW, LookupAccountSidW, GetSecurityDescriptorLength, GetAce, SetNamedSecurityInfoW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, EqualSid, GetSecurityDescriptorControl, CopySid, GetAclInformation, GetTokenInformation, GetSidSubAuthority, OpenProcessToken, ControlService, RegisterServiceCtrlHandlerW, SetServiceStatus, QueryServiceStatus, StartServiceW, ChangeServiceConfig2W, OpenServiceW, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, CloseServiceHandle, CreateServiceW

comdlg32.dll

GetFileTitleW

fltlib.dll

FilterDetach, FilterSendMessage, FilterVolumeInstanceFindNext, FilterVolumeInstanceFindClose, FilterGetDosName, FilterConnectCommunicationPort, FilterUnload, FilterAttach, FilterVolumeInstanceFindFirst, FilterVolumeFindNext, FilterLoad, FilterVolumeFindClose, FilterVolumeFindFirst

gdi32.dll

GetStockObject, DeleteDC, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SelectObject, Escape, ExtTextOutW, TextOutW, RectVisible, SetMapMode, RestoreDC, SaveDC, DeleteObject, SetBkColor, SetTextColor, GetClipBox, PtVisible, CreateBitmap, GetDeviceCaps

iphlpapi.dll

GetAdaptersInfo

kernel32.dll

DllMain

netapi32.dll

NetApiBufferFree, NetGetJoinInformation, NetWkstaGetInfo, NetGetDCName

ole32.dll

CoCreateInstanceEx, CoCreateInstance, CoInitializeEx, CoUninitialize, CLSIDFromProgID

oleacc.dll

CreateStdAccessibleObject, LresultFromObject

psapi.dll

EnumProcesses, GetModuleFileNameExW

secur32.dll

GetUserNameExW

shell32.dll

SHGetFolderPathW

shlwapi.dll

PathStripToRootW, PathIsUNCW, PathFindFileNameW

user32.dll

SetMenu, MapWindowPoints, GetMessagePos, GetMessageTime, DestroyWindow, GetTopWindow, GetDlgItem, GetForegroundWindow, IsWindow, RemovePropW, GetPropW, SetPropW, GetClassNameW, GetClassLongW, GetCapture, WinHelpW, LoadIconW, RegisterWindowMessageW, SetWindowTextW, ShowWindow, ClientToScreen, TabbedTextOutW, DrawTextW, DrawTextExW, GrayStringW, DestroyMenu, PostQuitMessage, CopyRect, PtInRect, GetMenu, SetWindowLongW, SetWindowPos, SystemParametersInfoA, IsIconic, GetWindowPlacement, GetWindowRect, GetWindow, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, LoadBitmapW, GetFocus, ModifyMenuW, EnableMenuItem, CheckMenuItem, LoadCursorW, GetDC, ReleaseDC, GetSysColor, GetSysColorBrush, GetWindowThreadProcessId, GetParent, GetWindowLongW, GetLastActivePopup, IsWindowEnabled, EnableWindow, MessageBoxW, GetWindowTextW, UnhookWindowsHookEx, CharUpperW, GetSystemMetrics, SetWindowsHookExW, CallNextHookEx, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, IsWindowVisible, SendMessageW, GetKeyState, PeekMessageW, GetCursorPos, ValidateRect, GetMenuState, GetMenuItemID, GetMenuItemCount, GetSubMenu, SetForegroundWindow, GetClientRect, PostMessageW, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, AdjustWindowRectEx, GetDlgCtrlID, DefWindowProcW, CallWindowProcW

version.dll

VerQueryValueW, GetFileVersionInfoW

wininet.dll

HttpOpenRequestW, HttpQueryInfoW, InternetQueryDataAvailable, InternetGetLastResponseInfoW, InternetOpenW, InternetSetStatusCallbackW, InternetSetFilePointer, InternetCloseHandle, InternetConnectW, HttpSendRequestW, InternetReadFile, InternetWriteFile, InternetSetOptionExW, InternetQueryOptionW

winspool.drv

ClosePrinter, OpenPrinterW, DocumentPropertiesW

PSIA.exe

Secunia PSI Agent by Secunia (Signed)

Remove PSIA.exe

Version:	3.0.0.6001
MD5:	306f9390976e41063d21ab9ab6d48122
SHA1:	d0781d2f7fb7b9440e4676c4265b63db9421ec2d
SHA256:	77c4814afc6719059e64492bd4b79a1b3ada8f9ec4c34b51489983c98ac6e300

Overview

psia.exe runs as a service under the name Secunia PSI Agent with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Secunia PSI (3.0.0.6001) published by Secunia and Secunia PSI (3.0.0.4001) published by Secunia. The file is digitally signed by Secunia which was issued by the VeriSign certificate authority (CA).

Details

File name:	psia.exe
Publisher:	Secunia
Product name:	Secunia PSI Agent
Typical file path:	C:\Program Files\secunia\psi\psia.exe
File version:	3.0.0.6001
Size:	1.17 MB (1,225,312 bytes)
Certificate
Issued to:	Secunia
Authority (CA):	VeriSign
Effective date:	Friday, May 28, 2010
Expiration date:	Tuesday, May 28, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Secunia PSI

Secunia

3% remove

“The Secunia PSI is an invaluable tool for you to use when assessing the security patch state of software installed on your system. It constantly monitors your system for insecure software installations, notifies you when an insecure application is installed, and even provides you with detailed instructions for updating the application when available. The Secunia PSI allows you to scan, detect, check, and secure the applications install...”

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'Secunia PSI Agent'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00231587%	0.028634%
Kernel CPU:	0.00129962%	0.013761%
User CPU:	0.00101625%	0.014873%
Kernel CPU time:	22,435 ms/min	100,923,805ms/min
CPU cycles:	20,233,928/sec	17,470,203/sec
Context switches:	60/sec	284/sec
Memory
Private memory:	15.82 MB	21.59 MB
Private (maximum):	21.6 MB
Private (minimum):	17.7 MB
Non-paged memory:	15.82 MB	21.59 MB
Virtual memory:	95.73 MB	140.96 MB
Virtual memory (peak):	152.26 MB	169.69 MB
Working set:	21.29 MB	18.61 MB
Working set (peak):	22.91 MB	37.95 MB
Page faults:	18,647/min	2,039/min
I/O
I/O read transfer:	622.75 KB/sec	1.02 MB/min
I/O read operations:	11/sec	343/min
I/O write transfer:	116.26 KB/sec	274.99 KB/min
I/O write operations:	37/sec	227/min
I/O other transfer:	180.77 KB/sec	448.09 KB/min
I/O other operations:	3,601/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	375	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\secunia\psi\psia.exe" --start-service
Owner:	SYSTEM
Windows Service
Service name:	Secunia PSI Agent
Description:	“Performs routine software inspections of the system, the results of which can be seen in your Secunia PSI”
Type:	Win32OwnProcess
Parent process:	services.exe (by Microsoft)

Threads