ShouldIRemoveIt.exe
Should I Remove It? by Reason Software Company Inc. (Signed)
| Version: | 1.0.4.32815 |
| MD5: | 9df092a83713fc982f74c7d2798d2165 |
| SHA1: | 6bf41b535a24cb5bbf1abc28947f91da41f9ac77 |
Overview
shouldiremoveit.exe executes as a process with the local user's privileges typically within the context of its parent
svchost.exe (Host Process for Windows Services by Microsoft Corporation). It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Reason Software Company Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | shouldiremoveit.exe |
| Publisher: | Reason Software Company Inc. |
| Product name: | Should I Remove It? |
| Typical file path: | C:\users\user\appdata\roaming\reason\should i remove it\shouldiremoveit.exe |
| File version: | 1.0.4.32815 |
| Size: | 726.81 KB (744,256 bytes) |
| Build date: | 4/2/2014 4:13 PM |
| Certificate |
| Issued to: | Reason Software Company Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 26, 2012 |
| Expiration date: | Tuesday, August 27, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Scheduled tasks
- The job 'ShouldIRemoveIt_Notifications' runs on logon in the path '\ShouldIRemoveIt_Notifications'
- The job 'ShouldIRemoveIt' in the path '\ShouldIRemoveIt'
- Entry path '\ShouldIRemoveIt'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\ShouldIRemoveIt_Notifications'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00204500% | |
| Kernel CPU: | 0.00088824% | |
| User CPU: | 0.00115676% | |
| Kernel CPU time: | 291,687,496 ms/min | |
| CPU cycles: | 13,897,310/sec | |
| Context switches: | 105/sec | |
| Memory |
| Private memory: | 48.58 MB | |
| Private (maximum): | 63.99 MB | |
| Private (minimum): | 21.56 MB | |
| Non-paged memory: | 48.58 MB | |
| Virtual memory: | 702.69 MB | |
| Virtual memory (peak): | 734.02 MB | |
| Working set: | 44.76 MB | |
| Working set (peak): | 68.19 MB | |
| Page faults: | 343,899/min | |
| I/O |
| I/O read transfer: | 1.37 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 2 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 1.34 MB/sec | |
| I/O other operations: | 8,732/sec | |
| Resource allocations |
| Threads: | 11 | |
| Handles: | 1004 | |
| GUI GDI count: | 84 | |
| GUI GDI peak: | 302 | |
| GUI USER count: | 81 | |
| GUI USER peak: | 151 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\reason\should i remove it\shouldiremoveit.exe" /realtime
- "C:\Program Files\reason\should i remove it\shouldiremoveit.exe"
|
| Owner: | User |
| Parent processes: |
|
Threads
Averages
| mscorwks.dll |
| Total CPU: | 0.17189987% | |
| Kernel CPU: | 0.11250145% | |
| User CPU: | 0.05939841% | |
| CPU cycles: | 3,713,716/sec | |
| Context switches: | 6/sec | |
| Memory: | 9.63 MB | |
| ShouldIRemoveIt.exe (main module) |
| Total CPU: | 0.02191302% | |
| Kernel CPU: | 0.00722135% | |
| User CPU: | 0.01469167% | |
| CPU cycles: | 3,539,528/sec | |
| Context switches: | 51/sec | |
| Memory: | 752 KB | |
| ntdll.dll |
| Total CPU: | 0.00064352% | |
| Kernel CPU: | 0.00064352% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 41,384/sec | |
| Context switches: | 1/sec | |
| Memory: | 1.66 MB | |
| gdiplus.dll |
| Total CPU: | 0.00002941% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00002941% | |
| CPU cycles: | 750/sec | |
| Memory: | 1.59 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
38.71% |
|
| Windows 7 Ultimate |
14.52% |
|
| Windows 7 Professional |
11.83% |
|
| Windows 8.1 |
8.60% |
|
| Windows Vista Home Premium |
7.53% |
|
| Windows 8 |
4.84% |
|
| Windows 8.1 Pro |
2.69% |
|
| Windows 8 Pro with Media Center |
2.69% |
|
| Windows 7 Home Basic |
2.15% |
|
| Windows 8 Pro |
2.15% |
|
| Windows 8 Enterprise N |
0.54% |
|
| Windows Vista Home Basic |
0.54% |
|
| Windows Vista Business |
0.54% |
|
| Windows 8.1 Pro Preview with Media Center |
0.54% |
|
| Windows 8 Single Language |
0.54% |
|
| Microsoft Windows XP |
0.54% |
|
| Windows 7 Enterprise |
0.54% |
|
| Windows Vista Ultimate |
0.54% |
|
Distribution by country
United States installs about 56.99% of Should I Remove It?.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
22.94% |
|
| Hewlett-Packard |
18.81% |
|
| Acer |
13.76% |
|
| ASUS |
12.84% |
|
| Toshiba |
11.01% |
|
| Intel |
5.50% |
|
| Sony |
4.59% |
|
| Lenovo |
2.75% |
|
| Samsung |
2.29% |
|
| GIGABYTE |
2.29% |
|
| Gateway |
1.83% |
|
| Alienware |
0.92% |
|
| American Megatrends |
0.46% |
|
