Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

6, 20, 3, 2	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 2	0.57%
6, 20, 1, 3	0.57%
6, 19, 9, 3	0.57%
6, 19, 9, 2	0.57%
6, 19, 3, 3	0.57%
6, 19, 2, 2	0.57%
6, 19, 2, 2	0.57%
6, 19, 1, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 2	2.84%
6, 18, 5, 2	0.57%
6, 18, 4, 3	0.57%
6, 18, 4, 2	0.57%
6, 18, 3, 3	0.57%
6, 18, 2, 3	0.57%
6, 18, 2, 2	1.70%
6, 18, 2, 2	0.57%
6, 18, 1, 2	0.57%
6, 17, 10, 2	3.98%
View more
6, 17, 10, 2	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 2	1.70%
6, 17, 7, 2	0.57%
6, 17, 7, 2	0.57%
6, 17, 6, 2	0.57%
6, 17, 2, 3	0.57%
6, 17, 2, 3	1.70%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 2	0.57%
6, 17, 1, 2	1.70%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 2	2.27%
6, 16, 3, 2	0.57%
6, 16, 3, 2	0.57%
6, 16, 2, 2	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 2	0.57%
6, 15, 15, 3	0.57%
70 other versions

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Child processes

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegEnumKeyA, RegQueryInfoKeyA, RegDeleteValueA, RegDeleteKeyA, RegEnumKeyExA, AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegFlushKey, GetUserNameA, RegLoadKeyA, RegRestoreKeyA, RegSaveKeyA, RegEnumValueA, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegDeleteValueW, RegCreateKeyExW, GetUserNameW, OpenSCManagerA, RegNotifyChangeKeyValue, OpenServiceA, CloseServiceHandle, DuplicateTokenEx, GetLengthSid, SetTokenInformation, CreateProcessAsUserW

comctl32.dll

ImageList_AddMasked, ImageList_Add, ImageList_Remove, ImageList_BeginDrag, ImageList_DragShowNolock, ImageList_DragMove, ImageList_EndDrag, ImageList_DragLeave, ImageList_Draw, ImageList_DragEnter, ImageList_GetIcon, ImageList_Destroy, ImageList_Create, PropertySheetA, DestroyPropertySheetPage, CreatePropertySheetPageA

comdlg32.dll

GetSaveFileNameA, GetOpenFileNameA, GetFileTitleA, GetSaveFileNameW

gdi32.dll

CreateRectRgn, GetViewportExtEx, GetWindowExtEx, CreatePen, CreatePatternBrush, PtVisible, TextOutA, ExtTextOutA, Escape, PatBlt, GetMapMode, SetRectRgn, CombineRgn, DPtoLP, StretchDIBits, GetCharWidthA, GetTextMetricsA, CopyMetaFileA, GetTextColor, GetBkColor, LPtoDP, EnumFontFamiliesExA, LineTo, MoveToEx, IntersectClipRect, ExcludeClipRect, SelectClipRgn, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SetMapMode, RestoreDC, SaveDC, CreateBitmap, GetClipBox, SetBkMode, SetBkColor, CreateFontIndirectW, DeleteDC, CreateCompatibleBitmap, GetStockObject, SelectObject, BitBlt, CreateRectRgnIndirect, DeleteObject, SetTextColor, CreateCompatibleDC, GetDIBits, CreateDIBSection, CreateSolidBrush, GetObjectA, CreateFontIndirectA, GetDeviceCaps, GetTextExtentPointA, RectVisible, CreateDIBitmap, CreateFontA, SetStretchBltMode, StretchBlt

kernel32.dll

DllMain

ole32.dll

OleInitialize, CoRegisterClassObject, OleIsCurrentClipboard, OleUninitialize, StringFromGUID2, ReleaseStgMedium, OleGetClipboard, CoUninitialize, CoInitialize, CoTaskMemFree, CoGetObject, CoRevokeClassObject, OleFlushClipboard, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRegisterMessageFilter, CoTaskMemAlloc, OleDuplicateData, CreateStreamOnHGlobal, CoDisconnectObject, RevokeDragDrop, CoLockObjectExternal, RegisterDragDrop, CLSIDFromString, CLSIDFromProgID, CoFreeUnusedLibraries, DoDragDrop, CoCreateInstance

shell32.dll

SHGetMalloc, SHGetDesktopFolder, Shell_NotifyIconA, ShellExecuteExW, SHFileOperationW, SHFileOperationA, SHGetFileInfoW, ShellExecuteW, FindExecutableA, ShellExecuteExA, SHGetFileInfoA, SHBrowseForFolderW, SHGetPathFromIDListW, SHBrowseForFolderA, SHGetPathFromIDListA, ShellExecuteA, FindExecutableW

user32.dll

DllMain

wininet.dll

InternetGetCookieA, InternetCanonicalizeUrlA, GetUrlCacheEntryInfoA, InternetCanonicalizeUrlW, InternetCombineUrlA, InternetSetCookieA, InternetCrackUrlA, GetUrlCacheEntryInfoW, HttpSendRequestA, HttpAddRequestHeadersA, HttpOpenRequestA, InternetCloseHandle, InternetOpenA, InternetConnectA, InternetReadFile

winspool.drv

ClosePrinter, DocumentPropertiesA, OpenPrinterA

IDMan.exe

Internet Download Manager (IDM) by Tonec Inc. (Signed)

Remove IDMan.exe

Version:	6, 16, 1, 3
MD5:	14cc0370268f4b5028f685b43cdbe6a2
SHA1:	f6f4c27720f3fa79100311f96e2c86d601617f1c
SHA256:	3e440f1ef6e888ecf99725acb8f0d60d8dd282e3714c571b0bf42d1c66f850c1

What is IDMan.exe?

Internet Download Manager (also called IDM) is a shareware download manager that supports batch downloads. IDM supports Internet Explorer, Opera, Apple Safari, Google Chrome and Mozilla Firefox.

About IDMan.exe (from Tonec Inc.)

“Internet Download Manager (IDM) is a tool to increase download speeds by up to 5 times, resume and schedule downloads. Comprehensive error recovery and resume capability will restart broken or interru”

Details

File name:	idman.exe
Publisher:	Tonec Inc.
Product name:	Internet Download Manager (IDM)
Typical file path:	C:\Program Files\internet download manager\idman.exe
File version:	6, 16, 1, 3
Size:	3.43 MB (3,595,856 bytes)
Build date:	6/10/2013 2:19 PM
Certificate
Issued to:	Tonec Inc.
Authority (CA):	VeriSign
Expiration date:	Saturday, June 1, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Internet Download Manager

Tonec Inc.

30% remove

Internet Download Manager (also called IDM) is a shareware download manager. It is only available for the Microsoft Windows operating system.

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\Internet Download Manager\IDMan.exe'

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Network connections

Access through an approved Windows firewall exception

[TCP] -entry (85.17.20.80:182)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00253473%	0.028634%
Kernel CPU:	0.00130152%	0.013761%
User CPU:	0.00123322%	0.014873%
Kernel CPU time:	599,886 ms/min	100,923,805ms/min
Memory
Private memory:	10.14 MB	21.59 MB
Private (maximum):	17.69 MB
Private (minimum):	3.26 MB
Non-paged memory:	10.14 MB	21.59 MB
Virtual memory:	139.36 MB	140.96 MB
Virtual memory (peak):	156.84 MB	169.69 MB
Working set:	6.9 MB	18.61 MB
Working set (peak):	19.96 MB	37.95 MB
Resource allocations
Threads:	11	12
Handles:	380	600
GUI GDI count:	149	103
GUI GDI peak:	231	142
GUI USER count:	121	49
GUI USER peak:	199	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\Program Files\internet download manager\idman.exe" /onboot
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads