Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

2,3,796,11	58.62%
2,3,787,43	37.93%
2,3,762,17	3.45%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child processes

schtasks.exe (Task Scheduler Configuration Tool by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, RegisterEventSourceA, StartServiceW, ChangeServiceConfig2W, CreateServiceW, RegEnumValueW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegQueryInfoKeyW, RegEnumKeyExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, SetServiceStatus, RegEnumKeyW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, DeregisterEventSource, IsValidSid, ConvertSidToStringSidW, GetLengthSid, InitializeAcl, ReportEventA, AddAce, OpenThreadToken, OpenProcessToken, GetSecurityInfo, GetAclInformation, GetAce, DeleteAce, SetSecurityInfo, RegDeleteKeyW, RegDeleteValueW, DeleteService, ControlService, OpenServiceW, OpenSCManagerW

gdi32.dll

CreateDIBSection, CreateFontIndirectW, GetObjectW, DeleteObject, SelectObject, SetBkMode, SetTextColor, Rectangle, CreatePen, RoundRect, CreateSolidBrush, CreatePatternBrush, CreateCompatibleDC, BitBlt, CreateCompatibleBitmap, DeleteDC

kernel32.dll

DllMain

ole32.dll

StringFromGUID2, CoInitializeEx, CoInitializeSecurity, CoInitialize, CoUninitialize, CoCreateInstance, CoSetProxyBlanket

rpcrt4.dll

UuidFromStringA

shell32.dll

SHFileOperationW, CommandLineToArgvW, SHGetSpecialFolderPathW

shlwapi.dll

PathFileExistsW, PathAddExtensionW, PathAppendW, PathFindExtensionW, PathRemoveExtensionW, PathStripPathW, StrCpyW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, StrCmpW, SHGetValueW, StrCmpNIW, PathIsRootW, PathRemoveFileSpecA, PathStripToRootW, PathRenameExtensionW

user32.dll

GetParent, InvalidateRect, EndPaint, BeginPaint, GetClientRect, GetWindowTextLengthW, MessageBoxA, GetClassInfoExW, LoadCursorW, IsWindow, FindWindowW, DestroyWindow, GetSysColorBrush, CreateWindowExW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxW, SetFocus, SetWindowPos, MapWindowPoints, GetMonitorInfoW, MonitorFromWindow, GetWindow, UnregisterClassA, GetWindowTextW, DrawTextW, GetSystemMetrics, LoadImageW, DialogBoxParamW, GetSysColor, FillRect, GetWindowRect, GetCursorPos, TrackMouseEvent, GetTopWindow, ChildWindowFromPoint, GetDC, ReleaseDC, SetLayeredWindowAttributes, GetActiveWindow, LoadStringA, KillTimer, ShowWindow, ScreenToClient, MoveWindow, GetDlgItem, EndDialog, SendMessageW, SetWindowTextW, SetTimer, PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, SystemParametersInfoW, CallWindowProcW, GetWindowLongW, SetWindowLongW, DefWindowProcW, SetWindowsHookExW, UnhookWindowsHookEx, RegisterClassExW

userenv.dll

CreateEnvironmentBlock

uxtheme.dll

DrawThemeParentBackground, DrawThemeBackground, OpenThemeData, CloseThemeData, IsThemeBackgroundPartiallyTransparent

winhttp.dll

WinHttpReadData, WinHttpQueryDataAvailable, WinHttpAddRequestHeaders, WinHttpOpen, WinHttpConnect, WinHttpSetStatusCallback, WinHttpSetOption, WinHttpGetIEProxyConfigForCurrentUser, WinHttpCloseHandle, WinHttpSendRequest, WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpGetProxyForUrl

wtsapi32.dll

WTSQueryUserToken

browsemngr.exe

Application Manager by Bit89 Inc. (Signed)

Remove browsemngr.exe

Version:	2,3,796,11
MD5:	52be156f6c23b2995aface7091d18493
SHA1:	2e093b2573e7f17bf29e0a94cd5f2e2b267e567b
SHA256:	5f2f4bd93f2e2b647a5610ae60473529c7bf7efe3fce575f1f5447b9cfcbf031

Warning 10 antivirus scanners has detected malware.

What is browsemngr.exe?

The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.

Overview

browsemngr.exe is malware that runs as a service under the name Browser Manager within the local user context. This is typically installed with the program Browser Manager published by Bit89 Inc and is most likely removed by most users once installed (81% removed). The file is digitally signed by Bit89 Inc. which was issued by the GoDaddy.com certificate authority (CA).

Details

File name:	browsemngr.exe
Publisher:	PerformerSoft LLC
Product name:	Application Manager
Typical file path:	C:\ProgramData\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
File version:	2,3,796,11
Size:	2.21 MB (2,312,216 bytes)
Certificate
Issued to:	Bit89 Inc.
Authority (CA):	GoDaddy.com
Effective date:	Monday, April 9, 2012
Expiration date:	Thursday, April 9, 2015
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Browser Manager

Bit89 Inc

81% remove

Browser Manager (also known as Application Manager) is a third party web browser add-in classified mostly as a potentially unwanted program that used to be bundled with PerformerSoft products including PC Performer. At one point PerformerSoft was attempting to monetize their products with the Bit89 line of browser adware products (but this might not be the case any longer.) Bit89.com, the maker of this program is a known adware/malware ...

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

Browser Manager

Malware detections

Based on 40+ industry antivirus scanners, 10 of them detected the following malware.

Antivirus engine	Engine version	Detection
AVG	2014.0.3629	Generic5.RQV
Dr.Web	8.13.4.12	Adware.BGuard.7
Emsisoft Anti-Malware	3.0.0.575	Trojan.Win32.bProtector.AMN (A)
ESET NOD32	7.8201	a variant of Win32/bProtector.A
K7 AntiVirus	9.164.8482	Adware
nProtect	2013-04-06.01	Trojan-Clicker/W32.Agent.2312216
Panda Antivirus	10.0.3.5	Trj/OCJ.C
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.RCBH1AU
Vba32 AntiVirus	3.12.20.2	AdWare.Bromngr
VIPRE Antivirus	16622	Bprotector (fs)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00815950%	0.028634%
Kernel CPU:	0.00512993%	0.013761%
User CPU:	0.00302957%	0.014873%
Kernel CPU time:	4,480,698 ms/min	100,923,805ms/min
CPU cycles:	1,111,299/sec	17,470,203/sec
Context switches:	14/sec	284/sec
Memory
Private memory:	4.41 MB	21.59 MB
Private (maximum):	7.17 MB
Private (minimum):	6.57 MB
Non-paged memory:	4.41 MB	21.59 MB
Virtual memory:	168.6 MB	140.96 MB
Virtual memory (peak):	195.46 MB	169.69 MB
Working set:	7.05 MB	18.61 MB
Working set (peak):	7.3 MB	37.95 MB
Page faults:	16,322,318/min	2,039/min
I/O
I/O read transfer:	1.1 KB/sec	1.02 MB/min
I/O read operations:	2/sec	343/min
I/O write transfer:	3 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	358 Bytes/sec	448.09 KB/min
I/O other operations:	11/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	216	600
GUI GDI count:	9	103
GUI GDI peak:	11	142
GUI USER count:	5	49
GUI USER peak:	10	71

Process properties

Integrety level:	Undefined
Platform:	64-bit
Command lines:	"C:\ProgramData\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" /protect "C:\ProgramData\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" "C:\Documents and Settings\user\Application data\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" "C:\Documents and Settings\user\Application data\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" /protect
Owner:	User
Windows Service
Display name:	Browser Manager
Parent processes:	browsemngr.exe (Application Manager by Bit89 Inc.) services.exe (Services and Controller app by Microsoft)

Threads