Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.0.1 36.00%
1.0.0.1 12.00%
1.0.0.1 24.00%
1.0.0.1 20.00%
1.0.0.1 4.00%
1.0.0.1 4.00%
(Note, Wondershare Software Co. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, RegEnumValueW, ChangeServiceConfigW, ChangeServiceConfig2W, RegEnumKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegQueryInfoKeyW, ControlService, DeleteService, CreateServiceW, RegSetValueExW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegDeleteValueW, RegQueryValueExW, RegCloseKey, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, StartServiceCtrlDispatcherW
kernel32.dll
CreateThread, CreateEventW, MultiByteToWideChar, LoadLibraryExW, WritePrivateProfileStringW, GetTickCount, GetLocalTime, InterlockedDecrement, SetEvent, MoveFileExW, FileTimeToSystemTime, FileTimeToLocalFileTime, GetProcessTimes, GetCurrentThreadId, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, CompareStringW, SetStdHandle, WriteConsoleW, SetFilePointer, Sleep, OpenProcess, WaitForSingleObject, GetModuleFileNameW, lstrcmpiW, CreateDirectoryW, CreateFileW, CloseHandle, GetModuleHandleW, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetLastError, RaiseException, lstrlenW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, LoadLibraryW, GetProcAddress, FreeLibrary, GetCommandLineW, GetCurrentProcess, SetEnvironmentVariableA, GetStringTypeW, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, WideCharToMultiByte, HeapCreate, GetStdHandle, WriteFile, ExitProcess, IsProcessorFeaturePresent, TerminateProcess, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, LCMapStringW, SetLastError, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, EncodePointer, DecodePointer, RtlUnwind, ExitThread, ResumeThread, HeapSetInformation, GetStartupInfoW, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage
ole32.dll
CoTaskMemAlloc, CoTaskMemRealloc, CoRegisterClassObject, CoInitializeSecurity, CoTaskMemFree, CoInitialize, CoUninitialize, StringFromGUID2, CoCreateInstance, CoAddRefServerProcess, CoReleaseServerProcess, CoRevokeClassObject
psapi.dll
GetModuleFileNameExW, EnumProcesses
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
PathAddBackslashW
user32.dll
PostThreadMessageW, GetMessageW, DispatchMessageW, CharNextW, TranslateMessage, CharUpperW, MessageBoxW, LoadStringW

caremon.exe

By Wondershare Software Co. (Signed)

Remove caremon.exe
Version:   1.0.0.1
MD5:   8d8bc0a91520645978443ee49c20bd2b
SHA1:   c5fcde7fa2298167d830abf8567494780a64143b
SHA256:   05776e20ecf2754eea1551332eef57c7b19b386a9ccfab432699a9a7e678d9ab

About caremon.exe (from Wondershare Software Co.)

Most computers encounter the following common problems. When the computer is new, it runs fast at first,and then months later it is running very slow. It takes long time to startup, to load websites

Overview

caremon.exe runs as a service under the name CareMon with extensive SYSTEM privileges (full administrator access). This is typically installed with the program TuneUp360 (Version 7.0.0) published by Wondershare Software. The file is digitally signed by Wondershare Software Co. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:caremon.exe
Typical file path:C:\Program Files\tuneup360\caremon.exe
File version:1.0.0.1
Size:143.35 KB (146,792 bytes)
Certificate
Issued to:Wondershare Software Co.
Authority (CA):VeriSign
Expiration date:Friday, September 20, 2013
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Wondershare Software
  54% remove
TuneUp360 representing a new style of life. You do not need to be a Geek. It helps you find all the hidden errors in your PC after full-automatic all-around scan and returns you a health PC just as the day you got it. TuneUp360 Features: PC Information Checking. Check and display your computer hardware information and configuration. PC Performance Checking. Check your system performance and hardware and network settings. PC Stability Ch...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CareMon'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00033056%
0.028634%
User CPU:0.00033056%
0.014873%
Memory
Private memory:1.64 MB
21.59 MB
Private (maximum):5.11 MB
Private (minimum):4.79 MB
Non-paged memory:1.64 MB
21.59 MB
Virtual memory:44.3 MB
140.96 MB
Virtual memory (peak):49.05 MB
169.69 MB
Working set:4.79 MB
18.61 MB
Working set (peak):5.12 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:85
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\tuneup360\caremon.exe"
Owner:SYSTEM
Windows Service
Service name:CareMon
Description:“TuneUp360 monitor”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.00%
Windows 7 Ultimate 24.00%
Microsoft Windows XP 20.00%
Windows 7 Ultimate N 8.00%
Windows 7 Professional 4.00%
Windows Vista Home Premium 4.00%

Distribution by countryDistribution by country

United States installs about 54.17% of caremon.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 66.67%
Acer 26.67%
Sahara 6.67%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE