Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

24.0D R3 20.00%
23.0D R8 6.67%
23.0D R7 20.00%
23.0D R6 20.00%
22.0D R12 13.33%
22.0D R11 6.67%
21.0D R12 6.67%
21.0D R10 6.67%

Relationships

Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumValueA, RegQueryValueExA, RegCloseKey, RegEnumKeyExA, RegOpenKeyExA
gdi32.dll
CreateSolidBrush, SetTextColor
kernel32.dll
UnmapViewOfFile, OpenProcess, WaitForSingleObject, TerminateProcess, GetModuleFileNameA, GetShortPathNameA, GetPrivateProfileStringA, lstrcmpA, GetTickCount, CreateEventA, ResetEvent, OpenEventA, SetEvent, GetCommandLineW, LoadLibraryA, GetProcAddress, GetCurrentThreadId, GetModuleHandleA, WideCharToMultiByte, FormatMessageA, CreateProcessA, GetCommandLineA, LocalFree, CompareStringA, MultiByteToWideChar, LocalAlloc, ReleaseMutex, CreateMutexA, GetCurrentProcessId, CreateFileA, GetVersionExA, IsBadReadPtr, GlobalAlloc, GlobalFree, GlobalReAlloc, GlobalSize, GlobalLock, GlobalUnlock, GetProcessHeap, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, HeapValidate, HeapWalk, GlobalFlags, CloseHandle, InitializeCriticalSection, DeleteCriticalSection, CreateFileMappingA, FatalAppExitA, OutputDebugStringA, CreateDirectoryA, CreateFileW, GetFileAttributesExW, CreateDirectoryW, CopyFileW, MoveFileW, WriteFile, SetEndOfFile, SetFilePointer, ReadFile, GetFileInformationByHandle, InitializeCriticalSectionAndSpinCount, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, lstrlenA, GetSystemTimeAsFileTime, QueryPerformanceCounter, InterlockedDecrement, GetCurrentProcess, MapViewOfFile, GetLastError, Beep
msvcr90.dll
DllMain
ole32.dll
CoInitialize, CoCreateInstance, OleRun, StringFromGUID2, CoCreateGuid, CoUninitialize
shell32.dll
CommandLineToArgvW, SHGetFolderPathW
shlwapi.dll
PathCanonicalizeA
user32.dll
GetClassNameA, IsWindowVisible, EnumWindows, LoadStringA, MessageBoxA, CreateDialogParamA, SetWindowTextA, LoadIconA, MonitorFromWindow, GetMonitorInfoA, GetWindowRect, GetWindowThreadProcessId, SetTimer, GetMessageA, IsDialogMessageA, TranslateMessage, DispatchMessageA, GetDlgItem, PostQuitMessage, EnumThreadWindows, DefWindowProcA, wsprintfA, GetAsyncKeyState, GetWindowTextA, SendMessageA, SetWindowPos

QBW32.exe

QuickBooks by Intuit (Signed)

Remove QBW32.exe
Version:   22.0D R12
MD5:   4a667fef474cc7dc60b1e63eb9da3822
SHA1:   0ac21ebf6e3c482a3ba8d973b8318b8c2c0aadaf
SHA256:   ceb5fabc43da69ce92026305adec490674c78ba3d7c8fd8a43ec81d9f698c288

Overview

qbw32.exe executes as a process with the local user's privileges. During installation, it (or a shortcut) is added to the user's startup folder which is designed to automatically launch when the user logs into Windows. The file is digitally signed by Intuit which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:qbw32.exe
Publisher:Intuit Inc.
Product name:QuickBooks
Typical file path:C:\Program Files\intuit\quickbooks 2012\qbw32.exe
File version:22.0D R12
Size:1.13 MB (1,181,584 bytes)
Certificate
Issued to:Intuit
Authority (CA):VeriSign
Effective date:Thursday, March 3, 2011
Expiration date:Sunday, March 17, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

User start menu folder
Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'
  • Shortcut to 'qbw32.exe'
Network connections
  • [TCP] a23-64-160-190.deploy.akamaitechnologies.com (23.64.160.190:443)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00019617%
    0.028634%
    Kernel CPU:0.00009218%
    0.013761%
    User CPU:0.00010399%
    0.014873%
    Kernel CPU time:16,766 ms/min
    100,923,805ms/min
    Context switches:2/sec
    284/sec
    Memory
    Private memory:123.79 MB
    21.59 MB
    Private (maximum):141.65 MB
    Private (minimum):3.66 MB
    Non-paged memory:123.79 MB
    21.59 MB
    Virtual memory:538.69 MB
    140.96 MB
    Virtual memory (peak):646.58 MB
    169.69 MB
    Working set:87.21 MB
    18.61 MB
    Working set (peak):152.92 MB
    37.95 MB
    Page faults:630,710/min
    2,039/min
    I/O
    I/O read transfer:170.5 KB/sec
    1.02 MB/min
    I/O read operations:6/sec
    343/min
    I/O write transfer:14.96 KB/sec
    274.99 KB/min
    I/O write operations:4/sec
    227/min
    I/O other transfer:1.56 KB/sec
    448.09 KB/min
    I/O other operations:45/sec
    1,671/min
    Resource allocations
    Threads:24
    12
    Handles:1050
    600
    GUI GDI count:691
    103
    GUI USER count:497
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\intuit\quickbooks 2009\qbw32.exe" -silent
    Owner:User
    Parent process:Explorer.EXE (Windows Explorer by Microsoft)

    ResourcesThreads

    Averages
     
    QBW32.EXE (main module)
    Total CPU:0.00866221%
    0.272967%
    Kernel CPU:0.00271680%
    0.107585%
    User CPU:0.00594541%
    0.165382%
    Memory:1.14 MB
    1.16 MB
    clr.dll
    Total CPU:0.00006125%
    Kernel CPU:0.00002745%
    User CPU:0.00003379%
    Memory:6.43 MB
    MSVCR90.dll
    Total CPU:0.00002112%
    Kernel CPU:0.00000000%
    User CPU:0.00002112%
    Memory:652 KB
    wpfgfx_v0400.dll
    Total CPU:0.00001690%
    Kernel CPU:0.00001267%
    User CPU:0.00000422%
    Memory:1.6 MB
    USERENV.dll
    Total CPU:0.00000422%
    Kernel CPU:0.00000000%
    User CPU:0.00000422%
    Memory:720 KB
    dbdata11.dll (SQL Anywhere by iAnywhere Solutions)
    Total CPU:0.00000422%
    Kernel CPU:0.00000422%
    User CPU:0.00000000%
    Memory:784 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 26.67%
    Windows 8.1 Pro Preview 20.00%
    Windows Vista Home Premium 20.00%
    Windows 7 Ultimate 13.33%
    Windows 8 Pro with Media Center 6.67%
    Windows 7 Professional 6.67%
    Microsoft Windows XP 6.67%

    Distribution by countryDistribution by country

    United States installs about 93.33% of QuickBooks.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 28.57%
    Dell 28.57%
    Hewlett-Packard 21.43%
    Intel 14.29%
    American Megatrends 7.14%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE