Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
ShouldIRemoveIt.exe
Should I Remove It? by Reason Software Company Inc. (Signed)
| Version: | 1.0.4.20448 |
| MD5: | 2e310d70f57d92a0a215348adee83d1c |
| SHA1: | 6dade727a369ad0cd8ddbb9a7c430a1879888d88 |
Overview
shouldiremoveit.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). This is typically installed with the program SketchUp 8 published by Trimble Navigation Limited. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Reason Software Company Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | shouldiremoveit.exe |
| Publisher: | Reason Software Company Inc. |
| Product name: | Should I Remove It? |
| Typical file path: | C:\users\user\appdata\roaming\reason\should i remove it\shouldiremoveit.exe |
| File version: | 1.0.4.20448 |
| Size: | 709.81 KB (726,848 bytes) |
| Build date: | 1/9/2014 7:21 PM |
| Certificate |
| Issued to: | Reason Software Company Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 26, 2012 |
| Expiration date: | Tuesday, August 27, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following program will install this file
|
Trimble Navigation Limited |
|
“Redecorate your living room. Invent a new piece of furniture. Model your city for Google Earth. There's no limit to what you can create with SketchUp. We believe powerful software can also be a pleasure to use – the secret is intuitive tools that work the way you think they should. Apparently, millions of people agree. You can build models from scratch, or you can download what you need. People all over the world share what they've made...”
Behaviors
Scheduled tasks
- The job 'ShouldIRemoveIt_Notifications' runs on logon in the path '\ShouldIRemoveIt_Notifications'
- The job 'ShouldIRemoveIt' in the path '\ShouldIRemoveIt'
- Entry path '\ShouldIRemoveIt'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\ShouldIRemoveIt_Notifications'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.03129514% | |
| Kernel CPU: | 0.02366678% | |
| User CPU: | 0.00762836% | |
| Kernel CPU time: | 7,894 ms/min | |
| CPU cycles: | 1,770,637/sec | |
| Context switches: | 141/sec | |
| Memory |
| Private memory: | 45.86 MB | |
| Private (maximum): | 40.4 MB | |
| Private (minimum): | 6.88 MB | |
| Non-paged memory: | 45.86 MB | |
| Virtual memory: | 595.28 MB | |
| Virtual memory (peak): | 656.74 MB | |
| Working set: | 18.11 MB | |
| Working set (peak): | 48.18 MB | |
| Page faults: | 96,734/min | |
| I/O |
| I/O read transfer: | 228 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 142.01 KB/sec | |
| I/O other operations: | 891/sec | |
| Resource allocations |
| Threads: | 15 | |
| Handles: | 355 | |
| GUI GDI count: | 71 | |
| GUI GDI peak: | 270 | |
| GUI USER count: | 39 | |
| GUI USER peak: | 107 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\reason\should i remove it\shouldiremoveit.exe" /realtime |
| Owner: | User |
| Parent process: | services.exe (by Microsoft) |
Threads
Averages
| mscorwks.dll |
| Total CPU: | 0.21908205% | |
| Kernel CPU: | 0.13492894% | |
| User CPU: | 0.08415311% | |
| CPU cycles: | 6,135,900/sec | |
| Context switches: | 11/sec | |
| Memory: | 9.62 MB | |
| ShouldIRemoveIt.exe (main module) |
| Total CPU: | 0.20903256% | |
| Kernel CPU: | 0.02633481% | |
| User CPU: | 0.18269775% | |
| CPU cycles: | 8,941,526/sec | |
| Context switches: | 47/sec | |
| Memory: | 736 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
38.71% |
|
| Windows 7 Ultimate |
14.52% |
|
| Windows 7 Professional |
11.83% |
|
| Windows 8.1 |
8.60% |
|
| Windows Vista Home Premium |
7.53% |
|
| Windows 8 |
4.84% |
|
| Windows 8.1 Pro |
2.69% |
|
| Windows 8 Pro with Media Center |
2.69% |
|
| Windows 7 Home Basic |
2.15% |
|
| Windows 8 Pro |
2.15% |
|
| Windows 8 Enterprise N |
0.54% |
|
| Windows Vista Home Basic |
0.54% |
|
| Windows Vista Business |
0.54% |
|
| Windows 8.1 Pro Preview with Media Center |
0.54% |
|
| Windows 8 Single Language |
0.54% |
|
| Microsoft Windows XP |
0.54% |
|
| Windows 7 Enterprise |
0.54% |
|
| Windows Vista Ultimate |
0.54% |
|
Distribution by country
United States installs about 56.99% of Should I Remove It?.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
22.94% |
|
| Hewlett-Packard |
18.81% |
|
| Acer |
13.76% |
|
| ASUS |
12.84% |
|
| Toshiba |
11.01% |
|
| Intel |
5.50% |
|
| Sony |
4.59% |
|
| Lenovo |
2.75% |
|
| Samsung |
2.29% |
|
| GIGABYTE |
2.29% |
|
| Gateway |
1.83% |
|
| Alienware |
0.92% |
|
| American Megatrends |
0.46% |
|
