Should I block it?

No, this file is 100% safe to run.

Additional versions

5.9.4.6685	12.50%
5.9.4.6685	12.50%
5.8.2.4217	12.50%
5.6.2.3475	62.50%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryInfoKeyW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, RegEnumKeyExW

kernel32.dll

InterlockedDecrement, lstrcmpiW, FreeLibrary, SizeofResource, LoadResource, FindResourceW, Sleep, CloseHandle, InterlockedIncrement, OpenEventW, CreateMutexW, FlushInstructionCache, GetCurrentProcess, WTSGetActiveConsoleSessionId, lstrlenW, LoadLibraryExW, GetCurrentThreadId, OutputDebugStringA, LoadLibraryW, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, FormatMessageW, MultiByteToWideChar, GetModuleFileNameW, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, GetLastError, SetLastError, GetTickCount, GetVersion, GetFileAttributesW, GetProcAddress, GetModuleHandleW, SetEvent, GetModuleHandleA, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoA, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, LoadLibraryA, HeapAlloc, GetProcessHeap, HeapFree, InterlockedCompareExchange, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetCurrentProcessId, GetVersionExW, LocalAlloc

msvcr80.dll

DllMain

ole32.dll

CoTaskMemAlloc, CoTaskMemRealloc, CoCreateInstance, CoTaskMemFree

user32.dll

DispatchMessageW, MessageBoxW, CharNextW, DestroyWindow, DefWindowProcW, SetWindowLongW, GetWindowLongW, GetThreadDesktop, OpenDesktopW, CallWindowProcW, TranslateMessage, UnregisterClassA, CreateWindowExW, GetClassInfoExW, RegisterClassExW, LoadCursorW, IsWindow

wtsapi32.dll

WTSQuerySessionInformationW, WTSFreeMemory

upeksvr.exe

SPBA by UPEK Inc. (Signed)

Remove upeksvr.exe

Version:	5.8.2.4217
MD5:	641edb851339f2884ae57b5a0b1b02f5
SHA1:	b4206dfb6a34de8be2bb8c25b6bea4d532e53926
SHA256:	8a52116d79f633108bfdf82387b95f21d1eaa60ba34529e88e9fc9b7c494149c

Overview

upeksvr.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). The file is digitally signed by UPEK Inc. which was issued by the VeriSign certificate authority (CA).

Details

File name:	upeksvr.exe
Publisher:	UPEK Inc.
Product name:	SPBA
Description:	Fingerprint Server Process for Vista
Typical file path:	C:\Program Files\common files\spba\upeksvr.exe
File version:	5.8.2.4217
Product version:	5.8.2
Size:	49.76 KB (50,952 bytes)
Certificate
Issued to:	UPEK Inc.
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00162789%	0.028634%
Kernel CPU:	0.00054263%	0.013761%
User CPU:	0.00108526%	0.014873%
Kernel CPU time:	1,248,008 ms/min	100,923,805ms/min
Memory
Private memory:	4.52 MB	21.59 MB
Private (maximum):	7.65 MB
Private (minimum):	7.33 MB
Non-paged memory:	4.52 MB	21.59 MB
Virtual memory:	85.49 MB	140.96 MB
Virtual memory (peak):	90.49 MB	169.69 MB
Working set:	7.43 MB	18.61 MB
Working set (peak):	9.45 MB	37.95 MB
Resource allocations
Threads:	16	12
Handles:	226	600
GUI GDI count:	14	103
GUI USER count:	23	49