Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
SetServiceStatus, StartServiceCtrlDispatcherA, CreateServiceA, StartServiceA, OpenSCManagerA, OpenServiceA, ControlService, DeleteService, CloseServiceHandle, RegisterServiceCtrlHandlerExA
hid.dll
HidP_GetCaps
kernel32.dll
CreateFileA, CreateEventA, Sleep, SetLastError, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, CreateProcessA, ExitThread, ReadFile, ResetEvent, OutputDebugStringA, LocalFree, DeviceIoControl, GetLastError, HeapSize, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, VirtualQuery, InterlockedExchange, CreateThread, CloseHandle, GetPrivateProfileStringA, FormatMessageA, GetOverlappedResult, GetLocaleInfoA, VirtualProtect, GetSystemInfo, LCMapStringA, GetFileAttributesA, HeapAlloc, HeapFree, LCMapStringW, GetModuleHandleA, GetCommandLineA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, ExitProcess, GetProcAddress, TerminateProcess, GetCurrentProcess, WriteFile, FlushFileBuffers, GetModuleFileNameA, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetFilePointer, SetStdHandle, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, GetACP, GetOEMCP, GetCPInfo, LoadLibraryA, RtlUnwind
setupapi.dll
SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsA, SetupDiGetDeviceInterfaceDetailA
user32.dll
CloseDesktop, CloseWindowStation, SetThreadDesktop, OpenDesktopA, MessageBoxA, SetProcessWindowStation, OpenWindowStationA

hidservice.exe

Remove hidservice.exe
MD5:   69202c049779ae09470370f163363f13
SHA1:   e7b3c2bf300016df435e708c087244f638796e90
SHA256:   f912d077f687dffaa058c917b373ca85d253491b54b203ccdc0d76d19ae029d1

Overview

hidservice.exe runs as a service under the name Generic Service for HID Keyboard Input Collections (GenericHidService) with extensive SYSTEM privileges (full administrator access). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

DetailsDetails

File name:hidservice.exe
Typical file path:C:\apps\hidservice\hidservice.exe
Size:48 KB (49,152 bytes)
Build date:1/7/2005 11:01 AM
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'GenericHidService' (Generic Service for HID Keyboard Input Collections)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00016533%
0.028634%
Kernel CPU:0.00005391%
0.013761%
User CPU:0.00011142%
0.014873%
Kernel CPU time:3,125 ms/min
100,923,805ms/min
Memory
Private memory:1.64 MB
21.59 MB
Private (maximum):2.02 MB
Private (minimum):2.02 MB
Non-paged memory:1.64 MB
21.59 MB
Virtual memory:20.94 MB
140.96 MB
Virtual memory (peak):21.95 MB
169.69 MB
Working set:2.02 MB
18.61 MB
Working set (peak):2.02 MB
37.95 MB
Resource allocations
Threads:5
12
Handles:55
600
GUI GDI count:4
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\apps\hidservice\hidservice.exe
Owner:SYSTEM
Windows Service
Service name:GenericHidService
Display name:Generic Service for HID Keyboard Input Collections
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Tjenester og controllerprogrammer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE