Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
ShouldIRemoveIt.exe
Should I Remove It? by Reason Software Company Inc. (Signed)
| Version: | 1.0.4.33865 |
| MD5: | c473a3ec628959347bafe21be4f2e1cd |
| SHA1: | a362c912073590e40800baa3361d964050f4c734 |
Overview
shouldiremoveit.exe executes as a process with the local user's privileges typically within the context of its parent
svchost.exe (Host Process for Windows Services by Microsoft Corporation). It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Reason Software Company Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | shouldiremoveit.exe |
| Publisher: | Reason Software Company Inc. |
| Product name: | Should I Remove It? |
| Typical file path: | C:\users\user\appdata\roaming\reason\should i remove it\shouldiremoveit.exe |
| File version: | 1.0.4.33865 |
| Size: | 723.81 KB (741,184 bytes) |
| Build date: | 3/15/2014 5:48 PM |
| Certificate |
| Issued to: | Reason Software Company Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 26, 2012 |
| Expiration date: | Tuesday, August 27, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Scheduled tasks
- The job 'ShouldIRemoveIt_Notifications' runs on logon in the path '\ShouldIRemoveIt_Notifications'
- The job 'ShouldIRemoveIt' in the path '\ShouldIRemoveIt'
- Entry path '\ShouldIRemoveIt'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\ShouldIRemoveIt_Notifications'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00001092% | |
| Kernel CPU: | 0.00000599% | |
| User CPU: | 0.00000493% | |
| Kernel CPU time: | 15,356,266 ms/min | |
| Context switches: | 76/sec | |
| Memory |
| Private memory: | 64.46 MB | |
| Private (maximum): | 113.3 MB | |
| Private (minimum): | 12.23 MB | |
| Non-paged memory: | 64.46 MB | |
| Virtual memory: | 887.17 MB | |
| Virtual memory (peak): | 904.06 MB | |
| Working set: | 31.51 MB | |
| Working set (peak): | 277.31 MB | |
| Page faults: | 25,320,980/min | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 423 | |
| GUI GDI count: | 71 | |
| GUI GDI peak: | 911 | |
| GUI USER count: | 38 | |
| GUI USER peak: | 341 | |
Process properties
Threads
Averages
| mscorwks.dll |
| Total CPU: | 1.43771508% | |
| Kernel CPU: | 0.90767851% | |
| User CPU: | 0.53003657% | |
| CPU cycles: | 34,691,441/sec | |
| Context switches: | 6/sec | |
| Memory: | 9.63 MB | |
| ShouldIRemoveIt.exe (main module) |
| Total CPU: | 0.00328025% | |
| Kernel CPU: | 0.00125164% | |
| User CPU: | 0.00202861% | |
| CPU cycles: | 4,422,430/sec | |
| Context switches: | 51/sec | |
| Memory: | 744 KB | |
| gdiplus.dll |
| Total CPU: | 0.00002260% | |
| Kernel CPU: | 0.00001978% | |
| User CPU: | 0.00000283% | |
| CPU cycles: | 263/sec | |
| Memory: | 1.59 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
38.71% |
|
| Windows 7 Ultimate |
14.52% |
|
| Windows 7 Professional |
11.83% |
|
| Windows 8.1 |
8.60% |
|
| Windows Vista Home Premium |
7.53% |
|
| Windows 8 |
4.84% |
|
| Windows 8.1 Pro |
2.69% |
|
| Windows 8 Pro with Media Center |
2.69% |
|
| Windows 7 Home Basic |
2.15% |
|
| Windows 8 Pro |
2.15% |
|
| Windows 8 Enterprise N |
0.54% |
|
| Windows Vista Home Basic |
0.54% |
|
| Windows Vista Business |
0.54% |
|
| Windows 8.1 Pro Preview with Media Center |
0.54% |
|
| Windows 8 Single Language |
0.54% |
|
| Microsoft Windows XP |
0.54% |
|
| Windows 7 Enterprise |
0.54% |
|
| Windows Vista Ultimate |
0.54% |
|
Distribution by country
United States installs about 56.99% of Should I Remove It?.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
22.94% |
|
| Hewlett-Packard |
18.81% |
|
| Acer |
13.76% |
|
| ASUS |
12.84% |
|
| Toshiba |
11.01% |
|
| Intel |
5.50% |
|
| Sony |
4.59% |
|
| Lenovo |
2.75% |
|
| Samsung |
2.29% |
|
| GIGABYTE |
2.29% |
|
| Gateway |
1.83% |
|
| Alienware |
0.92% |
|
| American Megatrends |
0.46% |
|
