Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

2,3,796,11 58.62%
2,3,787,43 37.93%
2,3,762,17 3.45%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
CloseServiceHandle, RegisterEventSourceA, StartServiceW, ChangeServiceConfig2W, CreateServiceW, RegEnumValueW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegQueryInfoKeyW, RegEnumKeyExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, SetServiceStatus, RegEnumKeyW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, DeregisterEventSource, IsValidSid, ConvertSidToStringSidW, GetLengthSid, InitializeAcl, ReportEventA, AddAce, OpenThreadToken, OpenProcessToken, GetSecurityInfo, GetAclInformation, GetAce, DeleteAce, SetSecurityInfo, RegDeleteKeyW, RegDeleteValueW, DeleteService, ControlService, OpenServiceW, OpenSCManagerW
gdi32.dll
CreateDIBSection, CreateFontIndirectW, GetObjectW, DeleteObject, SelectObject, SetBkMode, SetTextColor, Rectangle, CreatePen, RoundRect, CreateSolidBrush, CreatePatternBrush, CreateCompatibleDC, BitBlt, CreateCompatibleBitmap, DeleteDC
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, CoInitializeEx, CoInitializeSecurity, CoInitialize, CoUninitialize, CoCreateInstance, CoSetProxyBlanket
rpcrt4.dll
UuidFromStringA
shell32.dll
SHFileOperationW, CommandLineToArgvW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathAddExtensionW, PathAppendW, PathFindExtensionW, PathRemoveExtensionW, PathStripPathW, StrCpyW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, StrCmpW, SHGetValueW, StrCmpNIW, PathIsRootW, PathRemoveFileSpecA, PathStripToRootW, PathRenameExtensionW
user32.dll
GetParent, InvalidateRect, EndPaint, BeginPaint, GetClientRect, GetWindowTextLengthW, MessageBoxA, GetClassInfoExW, LoadCursorW, IsWindow, FindWindowW, DestroyWindow, GetSysColorBrush, CreateWindowExW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxW, SetFocus, SetWindowPos, MapWindowPoints, GetMonitorInfoW, MonitorFromWindow, GetWindow, UnregisterClassA, GetWindowTextW, DrawTextW, GetSystemMetrics, LoadImageW, DialogBoxParamW, GetSysColor, FillRect, GetWindowRect, GetCursorPos, TrackMouseEvent, GetTopWindow, ChildWindowFromPoint, GetDC, ReleaseDC, SetLayeredWindowAttributes, GetActiveWindow, LoadStringA, KillTimer, ShowWindow, ScreenToClient, MoveWindow, GetDlgItem, EndDialog, SendMessageW, SetWindowTextW, SetTimer, PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, SystemParametersInfoW, CallWindowProcW, GetWindowLongW, SetWindowLongW, DefWindowProcW, SetWindowsHookExW, UnhookWindowsHookEx, RegisterClassExW
userenv.dll
CreateEnvironmentBlock
uxtheme.dll
DrawThemeParentBackground, DrawThemeBackground, OpenThemeData, CloseThemeData, IsThemeBackgroundPartiallyTransparent
winhttp.dll
WinHttpReadData, WinHttpQueryDataAvailable, WinHttpAddRequestHeaders, WinHttpOpen, WinHttpConnect, WinHttpSetStatusCallback, WinHttpSetOption, WinHttpGetIEProxyConfigForCurrentUser, WinHttpCloseHandle, WinHttpSendRequest, WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpGetProxyForUrl
wtsapi32.dll
WTSQueryUserToken

browsemngr.exe

Application Manager by Bit89 Inc. (Signed)

Remove browsemngr.exe
Version:   2,3,762,17
MD5:   0e39db25920f7952c72a524565ccbaa6
SHA1:   c39d026576aa4c9ceda2fbfd5cc8ab67901d1935
SHA256:   c32df0ca60dcd9a1e7736fef59a2a4e182657d965755d3d08b0173c4d11d78e5
Warning 6 antivirus scanners has detected malware.

What is browsemngr.exe?

The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.

Overview

browsemngr.exe is malware that runs as a service under the name Browser Manager within the local user context. This is typically installed with the program Browser Manager published by Bit89 Inc and is most likely removed by most users once installed (85% removed). The file is digitally signed by Bit89 Inc. which was issued by the GoDaddy.com certificate authority (CA).

DetailsDetails

File name:browsemngr.exe
Publisher:PerformerSoft LLC
Product name:Application Manager
Typical file path:C:\ProgramData\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
File version:2,3,762,17
Size:2.1 MB (2,201,112 bytes)
Certificate
Issued to:Bit89 Inc.
Authority (CA):GoDaddy.com
Effective date:Monday, April 9, 2012
Expiration date:Thursday, April 9, 2015
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Browser Manager
 Bit89 Inc
  85% remove
Browser Manager is a third party web browser add-in classified as a potentially unwanted application that used to be bundled with PerformerSoft products including PC Performer. At one point PerformerSoft was attempting to monetize their products with the Bit89 line of browser adware products (but this might not be the case any longer.) Bit89.com, the maker of this program is a known adware/malware distributor, so caution should be taken...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • Browser Manager

MalwareMalware detections

Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
Antivirus engineEngine versionDetection
AVG 2014.0.3629 Generic5.SCO
Dr.Web 8.13.4.29 BackDoor.Dna.11
ESET NOD32 7.8182 a variant of Win32/bProtector.A
Jiangmin 16.0.100 AdWare/Bromngr.m
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.RCBH1B2
VIPRE Antivirus 16480 Bprotector (fs)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00002258%
0.028634%
Kernel CPU:0.00001748%
0.013761%
User CPU:0.00000511%
0.014873%
Kernel CPU time:1,326,009 ms/min
100,923,805ms/min
Memory
Private memory:1.45 MB
21.59 MB
Private (maximum):4.18 MB
Private (minimum):1.2 MB
Non-paged memory:1.45 MB
21.59 MB
Virtual memory:75.24 MB
140.96 MB
Virtual memory (peak):84.81 MB
169.69 MB
Working set:1.2 MB
18.61 MB
Working set (peak):4.22 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:130
600
GUI GDI count:4
103
GUI GDI peak:4
142
GUI USER count:1
49
GUI USER peak:1
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command lines:
  • "C:\ProgramData\browser manager\2.3.762.17\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" /protect
  • "C:\ProgramData\browser manager\2.3.762.17\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe"
Owner:User
Windows Service
Display name:Browser Manager
Parent processes:

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 31.03%
Windows 7 Home Premium 27.59%
Windows 7 Ultimate 20.69%
Windows 8 Enterprise 10.34%
Windows 7 Professional 10.34%

Distribution by countryDistribution by country

United States installs about 37.93% of Application Manager.
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE