Should I block it?

40%

40% of PCs block this file from running.

Possible reason:

Performance resource utilization

Relationships

Parent process

cltmngsvc.exe (Search Protect by Conduit Ltd.)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegisterEventSourceA, ReportEventA, DeregisterEventSource, GetTokenInformation, RegQueryValueExW, OpenThreadToken, AllocateAndInitializeSid, FreeSid, CheckTokenMembership, RegCreateKeyExW, RegQueryInfoKeyW, RegDeleteKeyW, RegDeleteValueW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, RegSetValueExW

dbghelp.dll

MiniDumpWriteDump

gdi32.dll

GetDeviceCaps, DeleteObject, SelectObject, DeleteDC, CreateCompatibleBitmap, GetObjectW, GetStockObject, BitBlt, CreateSolidBrush, CreateCompatibleDC

kernel32.dll

DllMain

ole32.dll

CoGetClassObject, OleUninitialize, OleInitialize, StringFromGUID2, CreateStreamOnHGlobal, CLSIDFromString, CLSIDFromProgID, OleLockRunning, CoTaskMemAlloc, CoTaskMemFree, CoTaskMemRealloc, CoCreateInstance, CoCreateGuid

rpcrt4.dll

RpcObjectInqType, RpcImpersonateClient, RpcBindingInqObject, RpcObjectSetType, RpcServerUnregisterIfEx, RpcServerRegisterIfEx, RpcRevertToSelfEx, RpcServerUseProtseqEpW, NdrClientCall2, NdrServerCall2, RpcStringFreeW, RpcBindingFree, RpcEpResolveBinding, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetObject, I_RpcBindingInqLocalClientPID, I_RpcBindingInqTransportType

shell32.dll

SHGetFolderPathW, Shell_NotifyIconW

user32.dll

GetClassNameW, RegisterWindowMessageW, GetWindowRect, GetSystemMetrics, wsprintfW, PostMessageW, PostThreadMessageW, DispatchMessageW, DefWindowProcW, TranslateMessage, GetMessageW, SendMessageW, CreateWindowExW, LoadIconW, MoveWindow, RegisterHotKey, SetWindowTextW, RegisterClassExW, IsWindowVisible, ReleaseCapture, ShowWindow, SetLayeredWindowAttributes, GetSysColor, GetDesktopWindow, RedrawWindow, GetDlgItem, ReleaseDC, GetWindowTextW, FindWindowW, GetDC, GetClassInfoExW, BeginPaint, SetFocus, CreateAcceleratorTableW, GetClientRect, InvalidateRgn, GetParent, GetFocus, SetForegroundWindow, SetCapture, IsChild, FillRect, SetActiveWindow, ScreenToClient, DestroyAcceleratorTable, GetWindowTextLengthW, ClientToScreen, EndPaint, KillTimer, SetTimer, RegisterClassW, UnregisterClassW, GetUserObjectInformationW, GetProcessWindowStation, MessageBoxA, LoadCursorW, DestroyWindow, CallWindowProcW, SetWindowLongW, GetWindowLongW, GetWindow, IsWindow, SetWindowPos, InvalidateRect, CharNextW

version.dll

VerQueryValueW, VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeW, GetFileVersionInfoW, GetFileVersionInfoSizeA

wininet.dll

InternetOpenA, InternetConnectA, InternetAttemptConnect, InternetCloseHandle, InternetReadFile, HttpQueryInfoA, HttpEndRequestW, InternetWriteFile, HttpSendRequestExW, HttpSendRequestA, HttpSendRequestW, InternetSetCookieA, HttpAddRequestHeadersA, HttpOpenRequestA

cltmngui.exe

Search Protect by Conduit Ltd. (Signed)

Remove cltmngui.exe

Version:	2.8.11.9
MD5:	e982d0f5f7286a8c22730a0380700ec3
SHA1:	7eb0dd86ba369a893381c545101510e40257174c

Overview

cltmngui.exe executes as a process with the local user's privileges typically within the context of its parent cltmngsvc.exe (Search Protect by Conduit Ltd.). The file is digitally signed by Conduit Ltd. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).

Details

File name:	cltmngui.exe
Publisher:	Conduit
Product name:	Search Protect
Description:	Search Protect by Conduit
Typical file path:	C:\Program Files\searchprotect\UI\bin\cltmngui.exe
Original name:	SearchProtect (R)
File version:	2.8.11.9
Size:	2.68 MB (2,810,656 bytes)
Build date:	10/31/2013 10:25 AM
Certificate
Issued to:	Conduit Ltd.
Authority (CA):	VeriSign
Effective date:	Wednesday, January 2, 2013
Expiration date:	Sunday, April 3, 2016
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00008911%	0.028634%
Kernel CPU:	0.00004297%	0.013761%
User CPU:	0.00004613%	0.014873%
Kernel CPU time:	3,463 ms/min	100,923,805ms/min
CPU cycles:	46,163/sec	17,470,203/sec
Memory
Private memory:	10.33 MB	21.59 MB
Private (maximum):	26.35 MB
Private (minimum):	2.93 MB
Non-paged memory:	10.33 MB	21.59 MB
Virtual memory:	170.84 MB	140.96 MB
Virtual memory (peak):	190.54 MB	169.69 MB
Working set:	5.95 MB	18.61 MB
Working set (peak):	32.49 MB	37.95 MB
Page faults:	24,266/min	2,039/min
I/O
I/O read transfer:	5.79 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	20 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	235 Bytes/sec	448.09 KB/min
I/O other operations:	13/sec	1,671/min
Resource allocations
Threads:	13	12
Handles:	435	600
GUI GDI count:	13	103
GUI GDI peak:	22	142
GUI USER count:	15	49
GUI USER peak:	42	71

Process properties

Tray notification:	Yes
Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\progra~1\searchprotect\ui\bin\cltmngui.exe"
Owner:	User
Parent process:	cltmngsvc.exe (Search Protect by Conduit Ltd.)

Threads