Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2, 0, 0, 47 98.18%
2, 0, 0, 42 1.82%

Relationships

Parent process
Child processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCreateKeyExA, GetUserNameA, RegCreateKeyA, RegSetValueExA, RegCloseKey, RegQueryValueExA, RegOpenKeyExA, QueryServiceStatus, UnlockServiceDatabase, ChangeServiceConfigA, QueryServiceLockStatusA, LockServiceDatabase, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerExA, SetServiceStatus, CloseServiceHandle, DeleteService, ControlService, StartServiceA, ChangeServiceConfig2A, CreateServiceA, QueryServiceConfigA, OpenServiceA, OpenSCManagerA, CreateProcessAsUserA, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, AdjustTokenPrivileges, LookupPrivilegeValueA, ConvertStringSecurityDescriptorToSecurityDescriptorA
kernel32.dll
GetProcessHeap, Sleep, CreateProcessA, CreateToolhelp32Snapshot, Process32First, ProcessIdToSessionId, Process32Next, OpenProcess, VerSetConditionMask, VerifyVersionInfoA, GetFileAttributesW, SetFileAttributesW, DeleteFileW, FindFirstFileW, FindNextFileW, CreateDirectoryW, CopyFileW, FindClose, CreateDirectoryA, RemoveDirectoryW, GetDiskFreeSpaceA, GetLogicalDriveStringsA, GetDriveTypeA, Process32FirstW, Process32NextW, DeviceIoControl, GetCommandLineA, GetCommandLineW, LocalFree, lstrcmpiA, OutputDebugStringA, CreateSemaphoreA, SetEvent, InterlockedIncrement, InterlockedDecrement, LocalAlloc, GetExitCodeProcess, GetCurrentThreadId, CreateEventA, CreateThread, GetTickCount, WaitForMultipleObjects, ResetEvent, FindFirstFileA, GetPrivateProfileStringA, TerminateProcess, GetLocalTime, GetTempPathA, GetFileSize, DeleteFileA, GetFileAttributesA, SetFileAttributesA, CopyFileA, Thread32First, Thread32Next, GetVolumeNameForVolumeMountPointA, lstrlenA, FindNextFileA, GetWindowsDirectoryA, LCMapStringA, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, ReadFile, SetFilePointer, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetFileType, SetLastError, GetCurrentProcess, HeapFree, HeapAlloc, LoadLibraryA, CreateFileA, FreeLibrary, GetModuleFileNameA, GetProcAddress, GetModuleHandleA, WaitForSingleObject, CloseHandle, GetLastError, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, InitializeCriticalSectionAndSpinCount, GetLocaleInfoA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetStringTypeA, GetStringTypeW, SetEndOfFile, SetConsoleCtrlHandler, SetHandleCount, HeapSize, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetStdHandle, WriteFile, ExitProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapReAlloc, GetStartupInfoA, RaiseException, RtlUnwind, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualAlloc, GetModuleHandleW
setupapi.dll
CM_Get_Parent, SetupDiCallClassInstaller, CM_Get_Device_IDA, SetupDiGetDeviceInterfaceDetailA, SetupDiEnumDeviceInterfaces, CM_Reenumerate_DevNode, CM_Locate_DevNodeA, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceRegistryPropertyA, SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiGetDeviceInstallParamsA
shell32.dll
ShellExecuteA, CommandLineToArgvW, SHCreateDirectoryExA, SHGetFolderPathA
shlwapi.dll
PathFileExistsW, PathFileExistsA, PathAppendA
user32.dll
CharNextA, GetMessageA, DispatchMessageA, UnregisterDeviceNotification, PostThreadMessageA, RegisterDeviceNotificationA, wsprintfA
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeA

HWDeviceService.exe

HWDeviceService by HUAWEI Technologies Co. (Signed)

Remove HWDeviceService.exe
Version:   2, 0, 0, 47
MD5:   5ef3427ae503b5c03a48f7c9ff458b69
SHA1:   69469c58152634fad743b23a5660de64ccd029a7
SHA256:   c75d6e860aa9a1ea0351388b137fe39ce47e96471841bdca96ff63c87ce99132

Overview

hwdeviceservice.exe runs as a service under the name HWDeviceService.exe with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Optus Mobile Broadband published by Huawei Technologies Co.,Ltd, Optus Mobile Broadband from Huawei Technologies Co.,Ltd and Optus Mobile Broadband by Huawei Technologies Co.,Ltd. The file is digitally signed by HUAWEI Technologies Co. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:hwdeviceservice.exe
Product name:HWDeviceService
Description:DCSHOST
Typical file path:C:\ProgramData\datacardservice\hwdeviceservice.exe
File version:2, 0, 0, 47
Size:265.34 KB (271,712 bytes)
Certificate
Issued to:HUAWEI Technologies Co.
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Huawei Technologies Co.,Ltd
11% remove
Huawei Technologies Co.,Ltd
10% remove
Huawei Technologies Co.,Ltd
7% remove

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'HWDeviceService.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01278524%
0.028634%
Kernel CPU:0.00549674%
0.013761%
User CPU:0.00728850%
0.014873%
Kernel CPU time:4,444,487 ms/min
100,923,805ms/min
CPU cycles:89,381/sec
17,470,203/sec
Context switches:98/sec
284/sec
Memory
Private memory:2.64 MB
21.59 MB
Private (maximum):4.84 MB
Private (minimum):2.52 MB
Non-paged memory:2.64 MB
21.59 MB
Virtual memory:56.21 MB
140.96 MB
Virtual memory (peak):59.49 MB
169.69 MB
Working set:2.8 MB
18.61 MB
Working set (peak):5.49 MB
37.95 MB
Page faults:11,245/min
2,039/min
I/O
I/O read transfer:1.12 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:54 Bytes/sec
274.99 KB/min
I/O write operations:2/sec
227/min
I/O other transfer:140 Bytes/sec
448.09 KB/min
I/O other operations:6/sec
1,671/min
Resource allocations
Threads:6
12
Handles:126
600
GUI GDI count:4
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command lines:
  • "C:\ProgramData\datacardservice\hwdeviceservice.exe" -/service
  • "C:\Documents and Settings\user\Application data\datacardservice\hwdeviceservice.exe" -/service
Owner:SYSTEM
Windows Service
Service name:HWDeviceService.exe
Description:“Service for runing Mobile applications autorun.”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ADVAPI32.dll
Total CPU:0.10491931%
0.272967%
Kernel CPU:0.07827428%
0.107585%
User CPU:0.02664502%
0.165382%
Context switches:95/sec
79/sec
Memory:620 KB
1.16 MB
sechost.dll
Total CPU:0.06836207%
Kernel CPU:0.03276963%
User CPU:0.03559244%
CPU cycles:1,458,313/sec
Context switches:22/sec
Memory:100 KB
HWDeviceService.exe (main module)
Total CPU:0.00525706%
Kernel CPU:0.00425399%
User CPU:0.00100307%
CPU cycles:82,625/sec
Memory:280 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 54.55%
Microsoft Windows XP 10.91%
Windows Vista Home Premium 9.09%
Windows 8 Pro 7.27%
Windows 7 Professional 7.27%
Windows 7 Starter 3.64%
Windows 7 Home Premium 3.64%
Windows 7 Home Basic 3.64%

Distribution by countryDistribution by country

Thailand installs about 10.91% of HWDeviceService.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 27.27%
Dell 27.27%
Acer 27.27%
Toshiba 18.18%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE