Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

deb82 75.00%
deab3 25.00%
(Note, Hewlett-Packard Company publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
StartServiceCtrlDispatcherW, CryptDestroyHash, CryptDestroyKey, CryptEncrypt, CryptDeriveKey, CryptHashData, RegisterServiceCtrlHandlerW, CryptCreateHash, CryptAcquireContextW, CryptDecrypt, CreateServiceW, ControlService, StartServiceW, QueryServiceStatus, OpenSCManagerW, OpenServiceW, CloseServiceHandle, DeleteService, SetServiceStatus, CryptReleaseContext, OpenProcessToken, LookupPrivilegeValueW, SetTokenInformation, AdjustTokenPrivileges, DuplicateTokenEx, GetTokenInformation, ImpersonateLoggedOnUser, CreateProcessAsUserW, RevertToSelf
cfgmgr32.dll
CM_Get_Device_IDW, CM_Get_Device_ID_Size
hid.dll
HidP_GetUsages, HidD_GetAttributes, HidD_GetPreparsedData, HidP_GetCaps, HidP_MaxUsageListLength, HidD_GetHidGuid, HidP_UsageListDifference, HidD_FreePreparsedData
kernel32.dll
GetVersionExA, GetSystemTimeAsFileTime, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, ExitProcess, DeleteCriticalSection, InitializeCriticalSection, GetTickCount, WritePrivateProfileSectionW, GetFileSize, GetPrivateProfileSectionNamesW, GetPrivateProfileSectionW, GetCommandLineW, lstrcpyW, WaitForSingleObject, CopyFileW, DeleteFileW, FormatMessageW, GetLocalTime, OutputDebugStringW, GetModuleHandleW, Sleep, CreateEventW, GetCurrentProcessId, CreateToolhelp32Snapshot, Process32FirstW, ProcessIdToSessionId, Process32NextW, OpenProcess, WTSGetActiveConsoleSessionId, CloseHandle, GetOverlappedResult, ResetEvent, CreateFileW, SetLastError, ReadFile, GetModuleFileNameW, GetLastError, lstrlenW
msvcp71.dll
DllMain
msvcr71.dll
DllMain
ole32.dll
StringFromGUID2
setupapi.dll
SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsW
shlwapi.dll
PathAppendW, PathIsRelativeW, SHRegSetUSValueW, PathFileExistsW, PathRemoveFileSpecW, PathStripPathW, PathRemoveExtensionW
user32.dll
RegisterDeviceNotificationW, DefWindowProcW, PostQuitMessage, DispatchMessageW, GetMessageW, MsgWaitForMultipleObjects, PeekMessageW, CreateWindowExW, RegisterClassExW, UnregisterDeviceNotification, TranslateMessage
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSRegisterSessionNotification, WTSUnRegisterSessionNotification, WTSQueryUserToken

hpbtnsrv.exe

By Hewlett-Packard Company (Signed)

Remove hpbtnsrv.exe
MD5:   deb82af183f1cd06813d91ed104c645c
SHA1:   5a6f57e376038ca1036c7e568ed05e6eddd69b50
SHA256:   e611eb78a1e7d32fce1df60aad9e6894ccd61f3bd37ad7fe1c4ecf068ca1a3d8

Overview

hpbtnsrv.exe runs as a service under the name HP Easy Backup Button Service (HPBtnSrv) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Hewlett-Packard Company which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:hpbtnsrv.exe
Typical file path:C:\hp\hpezbtn\hpbtnsrv.exe
Size:193.59 KB (198,240 bytes)
Certificate
Issued to:Hewlett-Packard Company
Authority (CA):VeriSign
Effective date:Monday, April 2, 2007
Expiration date:Tuesday, September 2, 2008
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++ 7.1
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'HPBtnSrv' (HP Easy Backup Button Service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00008569%
0.028634%
Kernel CPU:0.00004869%
0.013761%
User CPU:0.00003700%
0.014873%
Kernel CPU time:86 ms/min
100,923,805ms/min
Memory
Private memory:4.1 MB
21.59 MB
Private (maximum):7.26 MB
Private (minimum):4.46 MB
Non-paged memory:4.1 MB
21.59 MB
Virtual memory:72.01 MB
140.96 MB
Virtual memory (peak):73.76 MB
169.69 MB
Working set:4.88 MB
18.61 MB
Working set (peak):7.31 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:170
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\hp\hpezbtn\hpbtnsrv.exe
Owner:SYSTEM
Windows Service
Service name:HPBtnSrv
Display name:HP Easy Backup Button Service
Description:“This service provides support for HP Easy Backup Button.”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
HPBtnSrv.exe (main module)
Total CPU:0.00022310%
0.272967%
Kernel CPU:0.00015120%
0.107585%
User CPU:0.00007190%
0.165382%
CPU cycles:6,300/sec
5,741,424/sec
Memory:188 KB
1.16 MB
ntdll.dll
Total CPU:0.00021576%
Kernel CPU:0.00007192%
User CPU:0.00014384%
CPU cycles:5,797/sec
Memory:1.66 MB
msvcr71.dll (Microsoft Visual Studio .NET by Microsoft)
Total CPU:0.00001973%
Kernel CPU:0.00000986%
User CPU:0.00000986%
CPU cycles:227/sec
Memory:344 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Ultimate 50.00%
Windows 7 Home Premium 25.00%
Windows 7 Ultimate 25.00%

Distribution by countryDistribution by country

Canada installs about 75.00% of hpbtnsrv.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE