Should I block it?

No, this file is 100% safe to run.

Additional versions

1.1.18.0	20.00%
1.1.11.0	40.00%
1.0.10.0	40.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegEnumKeyExW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegEnumValueW, CloseServiceHandle, ChangeServiceConfig2W, CreateServiceW, OpenSCManagerW, SetServiceStatus, RegisterServiceCtrlHandlerExW, ControlService, StartServiceW, StartServiceCtrlDispatcherW, DeleteService, OpenServiceW, CreateProcessAsUserW, RevertToSelf, DuplicateTokenEx, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegDeleteKeyW

gdi32.dll

DeleteDC, GetDeviceCaps, CreateDCW

kernel32.dll

CreateFileW, WideCharToMultiByte, MultiByteToWideChar, WriteFile, GetModuleFileNameW, FindResourceExW, CloseHandle, FindResourceW, SizeofResource, LockResource, LoadResource, FreeLibrary, OutputDebugStringW, LoadLibraryW, GetProcAddress, DeleteFileW, CopyFileW, SetFileAttributesW, CreateDirectoryW, SetEndOfFile, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeW, GetLocalTime, GetTimeZoneInformation, GetUserDefaultLCID, GetLocaleInfoW, InterlockedIncrement, InterlockedDecrement, Sleep, InterlockedExchange, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, GetVersionExA, GetACP, GetLocaleInfoA, GetThreadLocale, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, GetLastError, RtlUnwind, GetModuleHandleA, ExitProcess, LCMapStringA, LCMapStringW, GetCPInfo, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, GetOEMCP, IsValidCodePage, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, VirtualAlloc, GetConsoleCP, GetConsoleMode, SetFilePointer, ReadFile, FlushFileBuffers, LoadLibraryA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA

ole32.dll

CoUninitialize, CoInitialize, CoCreateInstance, CoSetProxyBlanket, CoInitializeSecurity, CoCreateGuid

shlwapi.dll

PathFileExistsW

user32.dll

SendMessageW, DispatchMessageW, UnregisterClassA, TranslateAcceleratorW, GetMessageW, KillTimer, SetTimer, TranslateMessage

wtsapi32.dll

WTSFreeMemory, WTSQueryUserToken, WTSEnumerateSessionsW

BCUService.exe

Browser Configuration Utility by DeviceVM Inc. (Signed)

Remove BCUService.exe

Version:	1.1.11.0
MD5:	f29d375926e36e3a56af4805c7749302
SHA1:	524e91424319ffd0ff55bc427dc136c156f043ea
SHA256:	3b28f1c0ba9e1f00ef2ba1b0c0d679eb1fcd0f52dbb308819f002e482fcb282f

What is BCUService.exe?

Browser Configuration Utility Auto-recovery Service is an Internet Explorer URL search hook that redirects search results when an address or search keyword is entered into the web browser.

About BCUService.exe (from DeviceVM Inc.)

“The Browser Configuration Utility is an easy-to-install, easy-to-use, powerful search engine." and "In the Address Bar of either Internet Explorer 6, 7, or 8, type the string of characters you want to”

Overview

bcuservice.exe runs as a service under the name BCUService (BCUService) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Browser Configuration Utility published by DeviceVM Inc. and is most likely removed by most users once installed (69% removed). The file is digitally signed by DeviceVM Inc. which was issued by the GlobalSign nv-sa certificate authority (CA).

Details

File name:	bcuservice.exe
Publisher:	DeviceVM, Inc.
Product name:	Browser Configuration Utility
Description:	Browser Configuration Utility Auto-recovery Service
Typical file path:	C:\Program Files\devicevm\browser configuration utility\bcuservice.exe
File version:	1.1.11.0
Product version:	1.1
Size:	214.22 KB (219,360 bytes)
Certificate
Issued to:	DeviceVM Inc.
Authority (CA):	GlobalSign nv-sa
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Browser Configuration Utility

DeviceVM Inc.

69% remove

Browser Configuration Utility Address Bar Search Hook Addin is an Internet Explorer URL search hook that redirects search results when an address or search keyword is entered into the web browser.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

BCUService
'BCUService' (Browser Configuration Utility Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00010649%	0.028634%
Kernel CPU:	0.00010649%	0.013761%
Kernel CPU time:	52,016 ms/min	100,923,805ms/min
CPU cycles:	20,787/sec	17,470,203/sec
Memory
Private memory:	874.67 KB	21.59 MB
Private (maximum):	3.05 MB
Private (minimum):	2.9 MB
Non-paged memory:	874.67 KB	21.59 MB
Virtual memory:	23.43 MB	140.96 MB
Virtual memory (peak):	24.64 MB	169.69 MB
Working set:	2.91 MB	18.61 MB
Working set (peak):	3.07 MB	37.95 MB
Page faults:	2,881/min	2,039/min
I/O
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	48	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\devicevm\browser configuration utility\bcuservice.exe"
Owner:	SYSTEM
Windows Service
Service name:	BCUService
Display name:	BCUService
Description:	“This service performs auto-recovery for Browser Configuration Utility.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads