Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

schtasks.exe (Manages scheduled tasks by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, SetServiceStatus, RegEnumKeyW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegOpenKeyExW, RegSetValueExW, RegQueryValueExW, RegCreateKeyExW, RegCloseKey, StartServiceW, RegDeleteValueW, OpenSCManagerW, CloseServiceHandle, RegisterEventSourceA, ReportEventA, DeregisterEventSource, IsValidSid, ConvertSidToStringSidW, OpenServiceW, GetLengthSid, InitializeAcl, AddAce, OpenThreadToken, OpenProcessToken, RegDeleteKeyW, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo

gdi32.dll

CreateFontIndirectW, GetObjectW, DeleteObject, SelectObject, SetBkMode, Rectangle, CreatePen, DeleteDC, RoundRect, CreateSolidBrush, CreatePatternBrush, CreateCompatibleDC, BitBlt, CreateCompatibleBitmap, SetTextColor

kernel32.dll

DllMain

ole32.dll

CoCreateInstance, CoUninitialize, CoInitialize, CoInitializeEx, CoInitializeSecurity, CoSetProxyBlanket, StringFromGUID2

rpcrt4.dll

UuidFromStringA, RpcStringFreeW, UuidToStringW, UuidCreate

shell32.dll

SHGetSpecialFolderPathW

shlwapi.dll

StrCpyW, PathStripPathW, PathRemoveExtensionW, PathFindExtensionW, PathAppendW, PathAddExtensionW, PathFileExistsW, StrCmpW

user32.dll

DrawTextW, GetWindowTextW, LoadImageW, DefWindowProcW, UnhookWindowsHookEx, GetClientRect, BeginPaint, DialogBoxParamW, GetSystemMetrics, GetCursorPos, TrackMouseEvent, GetTopWindow, ChildWindowFromPoint, KillTimer, ShowWindow, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, SetWindowsHookExW, SetWindowLongW, GetWindowLongW, CallWindowProcW, ScreenToClient, EndPaint, SystemParametersInfoW, DispatchMessageW, TranslateMessage, MoveWindow, EndDialog, GetDlgItem, SendMessageW, SetWindowTextW, SetTimer, PeekMessageW, GetWindowTextLengthW, GetActiveWindow, SetLayeredWindowAttributes, FillRect, ReleaseDC, GetDC, GetWindowRect, GetSysColor, GetSysColorBrush, GetParent, InvalidateRect, GetMessageW

userenv.dll

CreateEnvironmentBlock

uxtheme.dll

DrawThemeBackground, DrawThemeParentBackground, IsThemeBackgroundPartiallyTransparent, OpenThemeData, CloseThemeData

winhttp.dll

WinHttpCloseHandle, WinHttpGetProxyForUrl, WinHttpGetIEProxyConfigForCurrentUser, WinHttpSetOption, WinHttpSetStatusCallback, WinHttpConnect, WinHttpReceiveResponse, WinHttpAddRequestHeaders, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpSendRequest, WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpOpen

wtsapi32.dll

WTSQueryUserToken

brwmngr.exe

Application Manager by Performersoft LLC (Signed)

Remove brwmngr.exe

Version:	2,2,580,182
MD5:	9681e926d9b8c95cb82637a9c54b08f6
SHA1:	ed9bfd5d12c06007b5a65801c58279556e45ef52
SHA256:	b3714fe59365b241c46f78ec48d663c1675ff093123649ce1c21a0432ee53c49

Warning 3 antivirus scanners has detected malware.

What is brwmngr.exe?

The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.

Overview

brwmngr.exe is malware that runs as a service under the name Browser Manager within the local user context. The file is digitally signed by Performersoft LLC.

Details

File name:	brwmngr.exe
Publisher:	PerformerSoft LLC
Product name:	Application Manager
Typical file path:	C:\ProgramData\browser manager\2.2.580.182\{16cdff19-861d-48e3-a751-d99a27784753}\brwmngr.exe
File version:	2,2,580,182
Size:	1.62 MB (1,695,776 bytes)
Certificate
Issued to:	Performersoft LLC
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

Browser Manager

Malware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.

Antivirus engine	Engine version	Detection
ESET NOD32	7.7731	a variant of Win32/bProtector.A
Sophos	4.83.0	BProtector
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V1024

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.01377578%	0.028634%
Kernel CPU:	0.00954615%	0.013761%
User CPU:	0.00422963%	0.014873%
Kernel CPU time:	24,925 ms/min	100,923,805ms/min
Memory
Private memory:	5.01 MB	21.59 MB
Private (maximum):	3.17 MB
Private (minimum):	1.99 MB
Non-paged memory:	5.01 MB	21.59 MB
Virtual memory:	209.05 MB	140.96 MB
Virtual memory (peak):	264.7 MB	169.69 MB
Working set:	2.07 MB	18.61 MB
Working set (peak):	11.82 MB	37.95 MB
Resource allocations
Threads:	14	12
Handles:	284	600
GUI GDI count:	117	103
GUI GDI peak:	138	142
GUI USER count:	32	49
GUI USER peak:	63	71

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	"C:\ProgramData\browser manager\2.2.580.182\{16cdff19-861d-48e3-a751-d99a27784753}\brwmngr.exe" /protect "C:\ProgramData\browser manager\2.2.580.182\{16cdff19-861d-48e3-a751-d99a27784753}\brwmngr.exe"
Owner:	User
Windows Service
Display name:	Browser Manager
Parent processes:	brwmngr.exe (Application Manager by Performersoft LLC) services.exe (Services and Controller app by Microsoft)

Threads