Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, SetServiceStatus, RegEnumKeyW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegOpenKeyExW, RegSetValueExW, RegQueryValueExW, RegCreateKeyExW, RegCloseKey, StartServiceW, RegDeleteValueW, OpenSCManagerW, CloseServiceHandle, RegisterEventSourceA, ReportEventA, DeregisterEventSource, IsValidSid, ConvertSidToStringSidW, OpenServiceW, GetLengthSid, InitializeAcl, AddAce, OpenThreadToken, OpenProcessToken, RegDeleteKeyW, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo

gdi32.dll

CreateFontIndirectW, GetObjectW, DeleteObject, SelectObject, SetBkMode, Rectangle, CreatePen, DeleteDC, RoundRect, CreateSolidBrush, CreatePatternBrush, CreateCompatibleDC, BitBlt, CreateCompatibleBitmap, SetTextColor

kernel32.dll

DllMain

ole32.dll

CoCreateInstance, CoUninitialize, CoInitialize, CoInitializeEx, CoInitializeSecurity, CoSetProxyBlanket, StringFromGUID2

rpcrt4.dll

UuidFromStringA, RpcStringFreeW, UuidToStringW, UuidCreate

shell32.dll

SHGetSpecialFolderPathW

shlwapi.dll

StrCpyW, PathStripPathW, PathRemoveExtensionW, PathFindExtensionW, PathAppendW, PathAddExtensionW, PathFileExistsW, StrCmpW

user32.dll

DrawTextW, GetWindowTextW, LoadImageW, DefWindowProcW, UnhookWindowsHookEx, GetClientRect, BeginPaint, DialogBoxParamW, GetSystemMetrics, GetCursorPos, TrackMouseEvent, GetTopWindow, ChildWindowFromPoint, KillTimer, ShowWindow, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, SetWindowsHookExW, SetWindowLongW, GetWindowLongW, CallWindowProcW, ScreenToClient, EndPaint, SystemParametersInfoW, DispatchMessageW, TranslateMessage, MoveWindow, EndDialog, GetDlgItem, SendMessageW, SetWindowTextW, SetTimer, PeekMessageW, GetWindowTextLengthW, GetActiveWindow, SetLayeredWindowAttributes, FillRect, ReleaseDC, GetDC, GetWindowRect, GetSysColor, GetSysColorBrush, GetParent, InvalidateRect, GetMessageW

userenv.dll

CreateEnvironmentBlock

uxtheme.dll

DrawThemeBackground, DrawThemeParentBackground, IsThemeBackgroundPartiallyTransparent, OpenThemeData, CloseThemeData

winhttp.dll

WinHttpCloseHandle, WinHttpGetProxyForUrl, WinHttpGetIEProxyConfigForCurrentUser, WinHttpSetOption, WinHttpSetStatusCallback, WinHttpConnect, WinHttpReceiveResponse, WinHttpAddRequestHeaders, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpSendRequest, WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpOpen

wtsapi32.dll

WTSQueryUserToken

videomngr.exe

Application Manager by Performersoft LLC (Signed)

Remove videomngr.exe

Version:	2,2,558,175
MD5:	daa8ac35795b5ac5c4a1794e4ad84ecb
SHA1:	16ff9aacd5bd7f32fbc70296774727b64717c7ba
SHA256:	b53e7e056a5d81c9390e2cb48091f4d696a1a243432ef5940014602c3f551f31

Warning 3 antivirus scanners has detected malware.

What is videomngr.exe?

The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.

About videomngr.exe (from Performersoft LLC)

“Automatically optimize your registry settings to prevent crashes and help speed up your computer. Manage start up – goes to the Start Up Manager and shows the programs that are loaded when Windows s”

Details

File name:	videomngr.exe
Publisher:	PerformerSoft LLC
Product name:	Application Manager
Typical file path:	C:\ProgramData\video performer manager\2.2.558.175\{16cdff19-861d-48e3-a751-d99a27784753}\videomngr.exe
File version:	2,2,558,175
Size:	1.62 MB (1,695,776 bytes)
Certificate
Issued to:	Performersoft LLC
Authority (CA):	GoDaddy.com
Effective date:	Thursday, June 28, 2012
Expiration date:	Sunday, June 28, 2015
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

Video Performer Manager

Malware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.

Antivirus engine	Engine version	Detection
ESET NOD32	7.8040	a variant of Win32/bProtector.A
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.RCBH1LG
VIPRE Antivirus	15684	InstallBrain (fs)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00054986%	0.028634%
Kernel CPU:	0.00018283%	0.013761%
User CPU:	0.00036703%	0.014873%
Kernel CPU time:	5,702 ms/min	100,923,805ms/min
CPU cycles:	5,474,336/sec	17,470,203/sec
Context switches:	24/sec	284/sec
Memory
Private memory:	3.58 MB	21.59 MB
Private (maximum):	6.83 MB
Private (minimum):	4.85 MB
Non-paged memory:	3.58 MB	21.59 MB
Virtual memory:	168.98 MB	140.96 MB
Virtual memory (peak):	188.53 MB	169.69 MB
Working set:	5.76 MB	18.61 MB
Working set (peak):	6.88 MB	37.95 MB
Page faults:	82,541,412/min	2,039/min
I/O
I/O read transfer:	24 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	32 Bytes/sec	448.09 KB/min
I/O other operations:	2/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	230	600
GUI GDI count:	9	103
GUI GDI peak:	9	142
GUI USER count:	8	49
GUI USER peak:	9	71

Process properties

Integrety level:	System
Platform:	32-bit
Command lines:	"C:\ProgramData\video performer manager\2.2.558.175\{16cdff19-861d-48e3-a751-d99a27784753}\videomngr.exe" "C:\ProgramData\video performer manager\2.2.558.175\{16cdff19-861d-48e3-a751-d99a27784753}\videomngr.exe" /protect
Owner:	SYSTEM
Windows Service
Display name:	Video Performer Manager
Parent processes:	services.exe (Services and Controller app by Microsoft) videomngr.exe (Application Manager by Performersoft LLC)

Threads