Should I block it?

No, this file is 100% safe to run.

Additional versions

3, 10, 1, 6	62.50%
3, 10, 1, 6	37.50%

(Note, Hewlett-Packard publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

accelerometerdll.dll (Hewlett-Packard Corporation Mobile Data Protection System by Hewlett-Packard)
accelerometerst.exe (Hewlett-Packard Corporation Mobile Data Protection System by Hewlett-Packard)

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, OpenServiceW, OpenSCManagerW, ReportEventW, RegisterEventSourceW, DeregisterEventSource, RegOpenKeyW, RegCloseKey, RegSetValueExW, RegCreateKeyW, CreateServiceW, DeleteService, SetServiceStatus, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, ConvertSidToStringSidW, GetTokenInformation

kernel32.dll

SetEvent, OutputDebugStringW, GetCurrentThreadId, GetModuleFileNameW, GetLastError, Sleep, CloseHandle, CreateEventW, SetConsoleCtrlHandler, GetModuleHandleW, GetCommandLineW, SetProcessShutdownParameters, GetProcessShutdownParameters, DebugBreak, LocalFree, LocalAlloc, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, UnhandledExceptionFilter, InterlockedExchange

msvcrt.dll

DllMain

user32.dll

RegisterDeviceNotificationW, UnregisterDeviceNotification

wtsapi32.dll

WTSQueryUserToken

HpService.exe

Hewlett-Packard Corporation HP 3D DriveGuard by Hewlett-Packard

Remove HpService.exe

Version:	3, 10, 1, 6
MD5:	6d0ac28c5bd8d8495f83f5929a45e559
SHA1:	15af040bb6087443d9dd4ffe0a8f96066f7f2c23
SHA256:	d53ca110de2605a3f026e52d310dd300a0c38488c4149f3023ff2f64c28290c6

Overview

hpservice.exe runs as a service under the name hpsrv (hpsrv) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC).

Details

File name:	hpservice.exe
Publisher:	Hewlett-Packard Corporation
Product name:	Hewlett-Packard Corporation HP 3D DriveGuard
Description:	HpService
Typical file path:	C:\Windows\System32\hpservice.exe
File version:	3, 10, 1, 6
Size:	19 KB (19,456 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

hpsrv
'hpsrv' (HP Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00020071%	0.028634%
Kernel CPU:	0.00013526%	0.013761%
User CPU:	0.00006545%	0.014873%
Kernel CPU time:	31 ms/min	100,923,805ms/min
CPU cycles:	6,219/sec	17,470,203/sec
Context switches:	1/sec	284/sec
Memory
Private memory:	2.52 MB	21.59 MB
Private (maximum):	4.45 MB
Private (minimum):	3.69 MB
Non-paged memory:	2.52 MB	21.59 MB
Virtual memory:	60.77 MB	140.96 MB
Virtual memory (peak):	62.69 MB	169.69 MB
Working set:	3.69 MB	18.61 MB
Working set (peak):	4.45 MB	37.95 MB
Page faults:	1,168/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	2 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	73	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\Windows\System32\hpservice.exe
Owner:	SYSTEM
Windows Service
Service name:	hpsrv
Display name:	hpsrv
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

Hpservice.exe (main module)
Total CPU:	0.00027132%	0.272967%
Kernel CPU:	0.00013566%	0.107585%
User CPU:	0.00013566%	0.165382%
CPU cycles:	4,230/sec	5,741,424/sec
Memory:	32 KB	1.16 MB
ADVAPI32.dll
Total CPU:	0.00013566%
Kernel CPU:	0.00013566%
User CPU:	0.00000000%
CPU cycles:	15,520/sec
Context switches:	1/sec
Memory:	792 KB