Versions

4.0.5060.8720	2.38%
4.0.5031.11581	7.14%
4.0.4996.20351	2.38%
4.0.4979.20235	2.38%
4.0.4918.18257	2.38%
4.0.4899.12670	2.38%
4.0.4891.4012	7.14%
4.0.4818.23500	7.14%
4.0.4780.33229	2.38%
4.0.4723.27511	9.52%
4.0.4681.39080	2.38%
4.0.4680.14606	2.38%
4.0.4539.16082	2.38%
4.0.4517.18230	2.38%
4.0.4482.19605	2.38%
4.0.4325.24715	2.38%
4.0.3965.28565	2.38%
4.0.3637.34258	2.38%
3.0.4373.8133	7.14%
3.0.4083.39008	2.38%
3.0.3622.43079	2.38%
3.0.3302.34562	2.38%
3.0.3175.38926	4.76%
2.0.3546.27663	4.76%
2.0.2872.37796	2.38%
1.0.4554.25484	2.38%
1.0.3546.30637	4.76%
1.0.3041.40127	2.38%

There are 28 versions of qbcfmonitorservice.exe in the wild, the latest version being 4.0.5060.8720. It is started as a Windows Service with the name 'QBCFMonitorService' and described as “QuickBooks Company File Monitoring Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 36.86 KB. The programs QBFC 10.0, QBFC 4.0 and QBFC 8.0 have been observed as installing specific variations of qbcfmonitorservice.exe. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0051% including both foreground and background operations, the average private memory consumption is about 12.73 MB with the maximum memory reaching around 12.87 MB. Addionally, typically read and write I/O disk operations is about 1.35 KB per minute for reads and 20 Bytes per minute for writes.