Should I block it?

No, this file is 100% safe to run.

Additional versions

24.0D R3	20.00%
23.0D R8	6.67%
23.0D R7	20.00%
23.0D R6	20.00%
22.0D R12	13.33%
22.0D R11	6.67%
21.0D R12	6.67%
21.0D R10	6.67%

Relationships

Child process

QBDBMgr.exe (Intuit Personal Database Manager by Intuit)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegEnumValueA, RegQueryValueExA, RegCloseKey, RegEnumKeyExA, RegOpenKeyExA

gdi32.dll

CreateSolidBrush, SetTextColor

kernel32.dll

UnmapViewOfFile, OpenProcess, WaitForSingleObject, TerminateProcess, GetModuleFileNameA, GetShortPathNameA, GetPrivateProfileStringA, lstrcmpA, GetTickCount, CreateEventA, ResetEvent, OpenEventA, SetEvent, GetCommandLineW, LoadLibraryA, GetProcAddress, GetCurrentThreadId, GetModuleHandleA, WideCharToMultiByte, FormatMessageA, CreateProcessA, GetCommandLineA, LocalFree, CompareStringA, MultiByteToWideChar, LocalAlloc, ReleaseMutex, CreateMutexA, GetCurrentProcessId, CreateFileA, GetVersionExA, IsBadReadPtr, GlobalAlloc, GlobalFree, GlobalReAlloc, GlobalSize, GlobalLock, GlobalUnlock, GetProcessHeap, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, HeapValidate, HeapWalk, GlobalFlags, CloseHandle, InitializeCriticalSection, DeleteCriticalSection, CreateFileMappingA, FatalAppExitA, OutputDebugStringA, CreateDirectoryA, CreateFileW, GetFileAttributesExW, CreateDirectoryW, CopyFileW, MoveFileW, WriteFile, SetEndOfFile, SetFilePointer, ReadFile, GetFileInformationByHandle, InitializeCriticalSectionAndSpinCount, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, lstrlenA, GetSystemTimeAsFileTime, QueryPerformanceCounter, InterlockedDecrement, GetCurrentProcess, MapViewOfFile, GetLastError, Beep

msvcr90.dll

DllMain

ole32.dll

CoInitialize, CoCreateInstance, OleRun, StringFromGUID2, CoCreateGuid, CoUninitialize

shell32.dll

CommandLineToArgvW, SHGetFolderPathW

shlwapi.dll

PathCanonicalizeA

user32.dll

GetClassNameA, IsWindowVisible, EnumWindows, LoadStringA, MessageBoxA, CreateDialogParamA, SetWindowTextA, LoadIconA, MonitorFromWindow, GetMonitorInfoA, GetWindowRect, GetWindowThreadProcessId, SetTimer, GetMessageA, IsDialogMessageA, TranslateMessage, DispatchMessageA, GetDlgItem, PostQuitMessage, EnumThreadWindows, DefWindowProcA, wsprintfA, GetAsyncKeyState, GetWindowTextA, SendMessageA, SetWindowPos

QBW32.exe

QuickBooks by Intuit (Signed)

Remove QBW32.exe

Version:	23.0D R8
MD5:	f1512e1c8e43c24cd8cb939804b55bb7
SHA1:	f38f1136cb9af0ce4d0330ae4886532b54587f91
SHA256:	21ad44c5a71ca6b122488c6fce96e0f6002e2dc294a852872c340d1f5b57953a

Overview

qbw32.exe executes as a process with the local user's privileges. During installation, it (or a shortcut) is added to the user's startup folder which is designed to automatically launch when the user logs into Windows. The file is digitally signed by Intuit which was issued by the VeriSign certificate authority (CA).

Details

File name:	qbw32.exe
Publisher:	Intuit Inc.
Product name:	QuickBooks
Typical file path:	C:\Program Files\intuit\quickbooks 2012\qbw32.exe
File version:	23.0D R8
Size:	1.13 MB (1,185,096 bytes)
Build date:	6/19/2013 11:50 AM
Certificate
Issued to:	Intuit
Authority (CA):	VeriSign
Effective date:	Thursday, March 3, 2011
Expiration date:	Sunday, March 17, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Behaviors

User start menu folder

Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'

Shortcut to 'qbw32.exe'

Network connections

[TCP] a184-28-162-231.deploy.static.akamaitechnologies.com (184.28.162.231:443)

[UDP] listens on port 63640

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00042446%	0.028634%
Kernel CPU:	0.00017460%	0.013761%
User CPU:	0.00024985%	0.014873%
Kernel CPU time:	97,625 ms/min	100,923,805ms/min
CPU cycles:	16,149,763/sec	17,470,203/sec
Memory
Private memory:	240.95 MB	21.59 MB
Private (maximum):	325.95 MB
Private (minimum):	19.06 MB
Non-paged memory:	240.95 MB	21.59 MB
Virtual memory:	895.69 MB	140.96 MB
Virtual memory (peak):	952.46 MB	169.69 MB
Working set:	320.98 MB	18.61 MB
Working set (peak):	333.16 MB	37.95 MB
Page faults:	1,693,209/min	2,039/min
I/O
I/O read transfer:	2.46 MB/sec	1.02 MB/min
I/O read operations:	85/sec	343/min
I/O write transfer:	2.18 KB/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	3.03 KB/sec	448.09 KB/min
I/O other operations:	340/sec	1,671/min
Resource allocations
Threads:	37	12
Handles:	1483	600
GUI GDI count:	1281	103
GUI GDI peak:	1416	142
GUI USER count:	951	49
GUI USER peak:	1132	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\intuit\quickbooks enterprise solutions 13.0\qbw32.exe" /fbelacct -tickcount=11777560 /noshowloadingqbwnd
Owner:	User

Threads

Averages

qbw32.exe (main module)
Total CPU:	0.03295658%	0.272967%
Kernel CPU:	0.00994347%	0.107585%
User CPU:	0.02301311%	0.165382%
CPU cycles:	13,636,008/sec	5,741,424/sec
Context switches:	10/sec	79/sec
Memory:	1.14 MB	1.16 MB
wow64.dll (Win32 Emulation on NT64 by Microsoft)
Total CPU:	0.00071367%
Kernel CPU:	0.00037407%
User CPU:	0.00033959%
CPU cycles:	31,206/sec
Memory:	252 KB
ntdll.dll
Total CPU:	0.00005500%
Kernel CPU:	0.00003666%
User CPU:	0.00001833%
CPU cycles:	2,707/sec
Memory:	1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	26.67%
Windows 8.1 Pro Preview	20.00%
Windows Vista Home Premium	20.00%
Windows 7 Ultimate	13.33%
Windows 8 Pro with Media Center	6.67%
Windows 7 Professional	6.67%
Microsoft Windows XP	6.67%

Distribution by country

United States installs about 93.33% of QuickBooks.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	28.57%
Dell	28.57%
Hewlett-Packard	21.43%
Intel	14.29%
American Megatrends	7.14%

Remove Adware and Spyware Programs, FREE Download!