Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6, 5, 4, 2 9.09%
6, 4, 11, 1 27.27%
6, 4, 8, 2 9.09%
6, 4, 4, 1 27.27%
6, 2, 7, 2 9.09%
6, 1, 2, 9 9.09%
6, 0, 5, 1 9.09%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, StartServiceW, QueryServiceStatus, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenSCManagerW, OpenServiceW, CloseServiceHandle, DeleteService
hid.dll
HidD_GetHidGuid, HidD_GetFeature, HidD_GetPreparsedData, HidP_GetCaps, HidD_FreePreparsedData
kernel32.dll
GetCurrentProcessId, CreateEventW, OpenEventW, PulseEvent, CreateDirectoryW, GetLocalTime, ReleaseSemaphore, CreateSemaphoreW, OpenSemaphoreW, WriteFile, SizeofResource, LoadResource, FindResourceW, lstrcmpiW, GetVersionExW, CreateThread, WaitForSingleObject, RaiseException, InitializeCriticalSection, DeleteCriticalSection, GetModuleFileNameW, GetModuleHandleW, InterlockedIncrement, SetEvent, FreeLibrary, MultiByteToWideChar, LoadLibraryExW, GetCommandLineW, GetCurrentThreadId, VerSetConditionMask, GetProcAddress, LoadLibraryW, lstrcmpW, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, CreateFileA, ReadFile, SetEndOfFile, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, LCMapStringW, LCMapStringA, GetStringTypeW, GetStringTypeA, LoadLibraryA, FlushFileBuffers, SetStdHandle, GetConsoleMode, GetConsoleCP, WideCharToMultiByte, CreateFileW, ResetEvent, DeviceIoControl, GetLastError, Sleep, ExpandEnvironmentStringsW, InterlockedDecrement, LocalFree, GlobalAlloc, GlobalFree, lstrlenW, WaitForMultipleObjects, VerifyVersionInfoW, CloseHandle, SetFilePointer, GetOEMCP, GetCPInfo, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, HeapSize, GetModuleFileNameA, EnterCriticalSection, LeaveCriticalSection, RtlUnwind, HeapAlloc, HeapFree, HeapReAlloc, ExitThread, ResumeThread, GetProcessHeap, GetStartupInfoW, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetStdHandle, ExitProcess, HeapCreate, HeapDestroy, VirtualAlloc, VirtualFree, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedExchange, GetSystemTime, IsValidCodePage, FindClose, GetWindowsDirectoryW, FindFirstFileW, FormatMessageW, OutputDebugStringW, LockResource, GlobalUnlock, GlobalLock, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, InitializeCriticalSectionAndSpinCount, lstrcpyW, lstrcatW, lstrcpynW, GetVersion, GetSystemInfo, VirtualProtect, IsBadCodePtr, IsBadReadPtr, VirtualQuery, IsBadWritePtr
ole32.dll
CoUninitialize, CoInitialize, OleRun, CoCreateInstance, CoTaskMemRealloc, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, StringFromGUID2, CoInitializeEx, CoTaskMemAlloc
setupapi.dll
SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsW, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, SetupDiSetClassInstallParamsW, SetupDiCallClassInstaller, SetupDiSetDeviceRegistryPropertyW, SetupDiGetDeviceRegistryPropertyW, SetupDiEnumDeviceInfo
shell32.dll
Shell_NotifyIconW, SHGetFolderPathW, ShellExecuteW, FindExecutableW
shlwapi.dll
StrStrW, StrCpyW, StrCmpW, StrCatW, StrChrW, StrStrIW, StrTrimW, SHDeleteKeyW, StrCmpNIW, PathFindExtensionW
user32.dll
SetMenuDefaultItem, GetSystemMetrics, TrackPopupMenu, DestroyMenu, UnregisterClassA, DispatchMessageW, GetMessageW, AppendMenuW, PostThreadMessageW, CharUpperW, PostMessageW, FindWindowW, TranslateMessage, LoadCursorW, SetForegroundWindow, CharNextW, DestroyWindow, GetClassInfoExW, CreatePopupMenu, RegisterClassExW, CreateWindowExW, ShowWindow, UpdateWindow, KillTimer, PostQuitMessage, LoadImageW, DefWindowProcW, GetDoubleClickTime, SetTimer, GetCursorPos, LoadStringW, keybd_event, wsprintfW, RegisterDeviceNotificationW, MessageBoxW
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW

QLBCTRL.exe

HP Quick Launch Buttons by Hewlett-Packard Company (Signed)

Remove QLBCTRL.exe
Version:   6, 5, 4, 2
MD5:   72839658341fe6b7e7e2fba8311a4e27
SHA1:   5d2fc2161f74532810865cca475d9f74a2eb47cf
SHA256:   163b65e6bf696206cc1154add7c7e4e20fcbe163e479277f69b40c97254b0adc

What is QLBCTRL.exe?

This contains the software that enables the Quick Launch Buttons on the keyboard and the external Easy Access Buttons Keyboard to be programmed for the supported notebook models and operating systems. This application enables menu control of various bezel buttons such as volume, internal/external display, and mute on/off; HotKeys, and Docked Events.

Overview

qlbctrl.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program HP Quick Launch Buttons published by Hewlett-Packard and is usually factory installed by the OEM. The file is digitally signed by Hewlett-Packard Company which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:qlbctrl.exe
Publisher: Hewlett-Packard Development Company, L.P.
Product name:HP Quick Launch Buttons
Description:QLB Controller
Typical file path:C:\Program Files\hewlett-packard\hp quick launch buttons\qlbctrl.exe
File version:6, 5, 4, 2
Size:313.55 KB (321,080 bytes)
Certificate
Issued to:Hewlett-Packard Company
Authority (CA):VeriSign
Expiration date:Sunday, January 18, 2009
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Hewlett-Packard
  52% remove
This program contains software that enables customers to program the Quick Launch Buttons on the keyboard and the external Easy Access Buttons Keyboard for the supported notebook models and operating systems. This application enables menu control of various buttons such as volume, internal/external display, and mute on/off.

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'QlbCtrl.exe' → C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
  • 'QlbCtrl' → C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00685889%
0.028634%
Kernel CPU:0.00431736%
0.013761%
User CPU:0.00254154%
0.014873%
Kernel CPU time:530 ms/min
100,923,805ms/min
Context switches:2/sec
284/sec
Memory
Private memory:2.36 MB
21.59 MB
Private (maximum):10.14 MB
Private (minimum):8.81 MB
Non-paged memory:2.36 MB
21.59 MB
Virtual memory:86.13 MB
140.96 MB
Virtual memory (peak):96.15 MB
169.69 MB
Working set:9.92 MB
18.61 MB
Working set (peak):10.71 MB
37.95 MB
Resource allocations
Threads:9
12
Handles:425
600
GUI GDI count:13
103
GUI GDI peak:17
142
GUI USER count:13
49
GUI USER peak:16
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\hewlett-packard\hp quick launch buttons\qlbctrl.exe" /start
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
WINMM.dll
Total CPU:0.00502608%
0.272967%
Kernel CPU:0.00264531%
0.107585%
User CPU:0.00238078%
0.165382%
CPU cycles:69,615/sec
5,741,424/sec
Memory:132 KB
1.16 MB
QLBCTRL.exe (main module)
Total CPU:0.00236434%
Kernel CPU:0.00160449%
User CPU:0.00075985%
CPU cycles:57,889/sec
Memory:328 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 36.36%
Windows Vista Home Basic 27.27%
Microsoft Windows XP 18.18%
Windows Vista Business 9.09%
Windows 8 Pro 9.09%

Distribution by countryDistribution by country

Australia installs about 20.00% of HP Quick Launch Buttons.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE