Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

6, 20, 3, 2	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 2	0.57%
6, 20, 1, 3	0.57%
6, 19, 9, 3	0.57%
6, 19, 9, 2	0.57%
6, 19, 3, 3	0.57%
6, 19, 2, 2	0.57%
6, 19, 2, 2	0.57%
6, 19, 1, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 2	2.84%
6, 18, 5, 2	0.57%
6, 18, 4, 3	0.57%
6, 18, 4, 2	0.57%
6, 18, 3, 3	0.57%
6, 18, 2, 3	0.57%
6, 18, 2, 2	1.70%
6, 18, 2, 2	0.57%
6, 18, 1, 2	0.57%
6, 17, 10, 2	3.98%
View more
6, 17, 10, 2	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 2	1.70%
6, 17, 7, 2	0.57%
6, 17, 7, 2	0.57%
6, 17, 6, 2	0.57%
6, 17, 2, 3	0.57%
6, 17, 2, 3	1.70%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 2	0.57%
6, 17, 1, 2	1.70%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 2	2.27%
6, 16, 3, 2	0.57%
6, 16, 3, 2	0.57%
6, 16, 2, 2	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 2	0.57%
6, 15, 15, 3	0.57%
70 other versions

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Child process

IEMonitor.exe (IEMonitor Application by Tonec Inc.)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegEnumKeyA, RegQueryInfoKeyA, RegDeleteValueA, RegDeleteKeyA, RegEnumKeyExA, AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegFlushKey, GetUserNameA, RegLoadKeyA, RegRestoreKeyA, RegSaveKeyA, RegEnumValueA, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegDeleteValueW, RegCreateKeyExW, GetUserNameW, OpenSCManagerA, RegNotifyChangeKeyValue, OpenServiceA, CloseServiceHandle, DuplicateTokenEx, GetLengthSid, SetTokenInformation, CreateProcessAsUserW

comctl32.dll

ImageList_AddMasked, ImageList_Add, ImageList_Remove, ImageList_BeginDrag, ImageList_DragShowNolock, ImageList_DragMove, ImageList_EndDrag, ImageList_DragLeave, ImageList_Draw, ImageList_DragEnter, ImageList_GetIcon, ImageList_Destroy, ImageList_Create, PropertySheetA, DestroyPropertySheetPage, CreatePropertySheetPageA

comdlg32.dll

GetSaveFileNameA, GetOpenFileNameA, GetFileTitleA, GetSaveFileNameW

gdi32.dll

CreateRectRgn, GetViewportExtEx, GetWindowExtEx, CreatePen, CreatePatternBrush, PtVisible, TextOutA, ExtTextOutA, Escape, PatBlt, GetMapMode, SetRectRgn, CombineRgn, DPtoLP, StretchDIBits, GetCharWidthA, GetTextMetricsA, CopyMetaFileA, GetTextColor, GetBkColor, LPtoDP, EnumFontFamiliesExA, LineTo, MoveToEx, IntersectClipRect, ExcludeClipRect, SelectClipRgn, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SetMapMode, RestoreDC, SaveDC, CreateBitmap, GetClipBox, SetBkMode, SetBkColor, CreateFontIndirectW, DeleteDC, CreateCompatibleBitmap, GetStockObject, SelectObject, BitBlt, CreateRectRgnIndirect, DeleteObject, SetTextColor, CreateCompatibleDC, GetDIBits, CreateDIBSection, CreateSolidBrush, GetObjectA, CreateFontIndirectA, GetDeviceCaps, GetTextExtentPointA, RectVisible, CreateDIBitmap, CreateFontA, SetStretchBltMode, StretchBlt

kernel32.dll

DllMain

ole32.dll

OleInitialize, CoRegisterClassObject, OleIsCurrentClipboard, OleUninitialize, StringFromGUID2, ReleaseStgMedium, OleGetClipboard, CoUninitialize, CoInitialize, CoTaskMemFree, CoGetObject, CoRevokeClassObject, OleFlushClipboard, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRegisterMessageFilter, CoTaskMemAlloc, OleDuplicateData, CreateStreamOnHGlobal, CoDisconnectObject, RevokeDragDrop, CoLockObjectExternal, RegisterDragDrop, CLSIDFromString, CLSIDFromProgID, CoFreeUnusedLibraries, DoDragDrop, CoCreateInstance

shell32.dll

SHGetMalloc, SHGetDesktopFolder, Shell_NotifyIconA, ShellExecuteExW, SHFileOperationW, SHFileOperationA, SHGetFileInfoW, ShellExecuteW, FindExecutableA, ShellExecuteExA, SHGetFileInfoA, SHBrowseForFolderW, SHGetPathFromIDListW, SHBrowseForFolderA, SHGetPathFromIDListA, ShellExecuteA, FindExecutableW

user32.dll

DllMain

wininet.dll

InternetGetCookieA, InternetCanonicalizeUrlA, GetUrlCacheEntryInfoA, InternetCanonicalizeUrlW, InternetCombineUrlA, InternetSetCookieA, InternetCrackUrlA, GetUrlCacheEntryInfoW, HttpSendRequestA, HttpAddRequestHeadersA, HttpOpenRequestA, InternetCloseHandle, InternetOpenA, InternetConnectA, InternetReadFile

winspool.drv

ClosePrinter, DocumentPropertiesA, OpenPrinterA

IDMan.exe

Internet Download Manager (IDM) by Tonec Inc. (Signed)

Remove IDMan.exe

Version:	6, 15, 5, 3
MD5:	9d4a83d9340d8cd927d2e3cca6e3961b
SHA1:	af89a15b573c7734d295ffda866010bc5d6bf4e2
SHA256:	b98bc214b1ca86314832adee72f78bf5153732ef3a5b127670010e7f1ef2eb0b

What is IDMan.exe?

Internet Download Manager (also called IDM) is a shareware download manager that supports batch downloads. IDM supports Internet Explorer, Opera, Apple Safari, Google Chrome and Mozilla Firefox.

About IDMan.exe (from Tonec Inc.)

“Internet Download Manager (IDM) is a tool to increase download speeds by up to 5 times, resume and schedule downloads. Comprehensive error recovery and resume capability will restart broken or interru”

Details

File name:	idman.exe
Publisher:	Tonec Inc.
Product name:	Internet Download Manager (IDM)
Typical file path:	C:\Program Files\internet download manager\idman.exe
File version:	6, 15, 5, 3
Size:	3.41 MB (3,573,624 bytes)
Certificate
Issued to:	Tonec Inc.
Authority (CA):	VeriSign
Expiration date:	Saturday, June 1, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Internet Download Manager

Tonec Inc.

30% remove

Internet Download Manager (also called IDM) is a shareware download manager. It is only available for the Microsoft Windows operating system.

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\Internet Download Manager\IDMan.exe'

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00931930%	0.028634%
Kernel CPU:	0.00454084%	0.013761%
User CPU:	0.00477847%	0.014873%
Kernel CPU time:	963,777 ms/min	100,923,805ms/min
Context switches:	21/sec	284/sec
Memory
Private memory:	14.34 MB	21.59 MB
Private (maximum):	23.98 MB
Private (minimum):	22.8 MB
Non-paged memory:	14.34 MB	21.59 MB
Virtual memory:	150.63 MB	140.96 MB
Virtual memory (peak):	169.18 MB	169.69 MB
Working set:	23.25 MB	18.61 MB
Working set (peak):	26.07 MB	37.95 MB
Resource allocations
Threads:	4	12
Handles:	423	600
GUI GDI count:	156	103
GUI GDI peak:	219	142
GUI USER count:	78	49
GUI USER peak:	158	71

Process properties

Integrety level:	High
Platform:	64-bit
Command lines:	"C:\jad\internet download manager\idman.exe" "C:\Program Files\internet download manager\idman.exe" -embedding
Owner:	User
Parent processes:	explorer.exe (Windows Explorer by Microsoft Corporation) svchost.exe (by Microsoft)

Threads