Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

2,6,1123,78 4.00%
2,5,976,107 32.00%
2,5,911,18 64.00%

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterEventSourceA, GetLengthSid, ConvertSidToStringSidW, ControlService, StartServiceW, ChangeServiceConfig2W, CreateServiceW, RegEnumValueW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegQueryInfoKeyW, RegEnumKeyExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, OpenSCManagerW, OpenServiceW, QueryServiceConfigW, ChangeServiceConfigW, CloseServiceHandle, SetServiceStatus, RegEnumKeyW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, IsValidSid, DeregisterEventSource, InitializeAcl, ReportEventA, AddAce, OpenThreadToken, OpenProcessToken, GetSecurityInfo, GetAclInformation, GetAce, DeleteAce, SetSecurityInfo, RegDeleteKeyW, RegDeleteValueW, DeleteService
gdi32.dll
CreateDIBSection, CreateFontIndirectW, GetObjectW, DeleteObject, SelectObject, SetBkMode, SetTextColor, Rectangle, CreatePen, DeleteDC, RoundRect, CreateSolidBrush, CreatePatternBrush, CreateCompatibleDC, CreateCompatibleBitmap, BitBlt
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, CoInitializeEx, CoInitializeSecurity, CoInitialize, CoUninitialize, CoCreateInstance, CoSetProxyBlanket
rpcrt4.dll
UuidFromStringA
shell32.dll
SHFileOperationW, CommandLineToArgvW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathAddExtensionW, PathAppendW, PathFindExtensionW, PathRemoveExtensionW, PathStripPathW, StrCpyW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, SHGetValueW, StrCmpNIW, PathIsRootW, PathRenameExtensionW, PathRemoveFileSpecA, PathStripToRootW, StrCmpW
user32.dll
GetParent, InvalidateRect, EndPaint, BeginPaint, GetClientRect, GetWindowTextLengthW, GetWindowTextW, DrawTextW, GetSystemMetrics, LoadImageW, GetClassInfoExW, LoadCursorW, GetSysColorBrush, FindWindowW, DestroyWindow, RegisterClassExW, CreateWindowExW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, MessageBoxW, SetFocus, SetWindowPos, MapWindowPoints, GetMonitorInfoW, MonitorFromWindow, GetWindow, UnregisterClassA, DialogBoxParamW, GetCursorPos, TrackMouseEvent, GetTopWindow, ChildWindowFromPoint, GetSysColor, GetWindowRect, GetDC, KillTimer, ShowWindow, ScreenToClient, MoveWindow, ReleaseDC, FillRect, SetLayeredWindowAttributes, GetActiveWindow, LoadStringA, EndDialog, GetDlgItem, SendMessageW, SetWindowTextW, SetTimer, PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, SystemParametersInfoW, CallWindowProcW, GetWindowLongW, SetWindowLongW, DefWindowProcW, SetWindowsHookExW, UnhookWindowsHookEx, IsWindow
userenv.dll
CreateEnvironmentBlock
uxtheme.dll
DrawThemeBackground, IsThemeBackgroundPartiallyTransparent, OpenThemeData, CloseThemeData, DrawThemeParentBackground
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
winhttp.dll
WinHttpReceiveResponse, WinHttpAddRequestHeaders, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpConnect, WinHttpSetStatusCallback, WinHttpOpenRequest, WinHttpGetIEProxyConfigForCurrentUser, WinHttpGetProxyForUrl, WinHttpCloseHandle, WinHttpOpen, WinHttpSendRequest, WinHttpQueryHeaders, WinHttpSetOption
wtsapi32.dll
WTSQueryUserToken

mngr.exe

Application Manager by Bit89 Inc. (Signed)

Remove mngr.exe
Version:   2,5,911,18
MD5:   83de1aba61074da70f5011d28610b18d
SHA1:   3a5c31d6759ea0ec9ce66923cf4e2c50ea1eef95
SHA256:   ebe792033603f3917ff5463f6131b3d3c9e64af76f5df78cb8b16f6d6c5759e8
Warning 8 antivirus scanners has detected malware.

What is mngr.exe?

The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.

About mngr.exe (from Bit89 Inc.)

Automatically optimize your registry settings to prevent crashes and help speed up your computer. Manage start up – goes to the Start Up Manager and shows the programs that are loaded when Windows s

DetailsDetails

File name:mngr.exe
Publisher:PerformerSoft LLC
Product name:Application Manager
Typical file path:C:\ProgramData\browser manager\2.5.911.18\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\mngr.exe
File version:2,5,911,18
Size:2.29 MB (2,402,840 bytes)
Certificate
Issued to:Bit89 Inc.
Authority (CA):GoDaddy.com
Effective date:Tuesday, September 4, 2012
Expiration date:Friday, September 4, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Bit89 Inc
  81% remove
Browser Manager (also known as Application Manager) is a third party web browser add-in classified mostly as a potentially unwanted program that used to be bundled with PerformerSoft products including PC Performer. At one point PerformerSoft was attempting to monetize their products with the Bit89 line of browser adware products (but this might not be the case any longer.) Bit89.com, the maker of this program is a known adware/malware ...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
  • 'Browser Manager'

MalwareMalware detections

Based on 40+ industry antivirus scanners, 8 of them detected the following malware.
Antivirus engineEngine versionDetection
AhnLab V3 Internet Security 2013.02.06.04 Adware/Win32.Bromngr
Dr.Web 7.0.4.09250 Adware.BGuard.7
ESET NOD32 7.7975 a variant of Win32/bProtector.A
Jiangmin 13.0.900 AdWare/Bromngr.b
Trend Micro 9.740.0.1012 ADW_BROMNGR
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.RCBH1KT
Vba32 AntiVirus 3.12.20.1 AdWare.Bromngr.b
VIPRE Antivirus 15404 Bprotector (fs)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.02419250%
0.028634%
Kernel CPU:0.01277260%
0.013761%
User CPU:0.01141990%
0.014873%
Kernel CPU time:1,096,026,279 ms/min
100,923,805ms/min
CPU cycles:7,838,728/sec
17,470,203/sec
Context switches:12/sec
284/sec
Memory
Private memory:3.04 MB
21.59 MB
Private (maximum):6.12 MB
Private (minimum):3.45 MB
Non-paged memory:3.04 MB
21.59 MB
Virtual memory:173.69 MB
140.96 MB
Virtual memory (peak):198.72 MB
169.69 MB
Working set:4.33 MB
18.61 MB
Working set (peak):7.21 MB
37.95 MB
Page faults:24,061,984/min
2,039/min
I/O
I/O read transfer:544 Bytes/sec
1.02 MB/min
I/O read operations:3/sec
343/min
I/O write transfer:20 Bytes/sec
274.99 KB/min
I/O write operations:6/sec
227/min
I/O other transfer:1.32 KB/sec
448.09 KB/min
I/O other operations:103/sec
1,671/min
Resource allocations
Threads:12
12
Handles:2557
600
GUI GDI count:14
103
GUI GDI peak:17
142
GUI USER count:11
49
GUI USER peak:13
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command lines:
  • "C:\ProgramData\browser manager\2.5.911.18\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\mngr.exe" /protect
  • "C:\ProgramData\browser manager\2.5.911.18\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\mngr.exe"
Owner:User
Windows Service
Service name:Browser Manager
Description:“Your browser protector service”
Type:Win32ShareProcess
Parent processes:

ResourcesThreads

Averages
 
mngr.exe (main module)
Total CPU:0.27053052%
0.272967%
Kernel CPU:0.25704768%
0.107585%
User CPU:0.01348284%
0.165382%
CPU cycles:9,930,698/sec
5,741,424/sec
Context switches:9/sec
79/sec
Memory:2.35 MB
1.16 MB
mngr.dll (Application Manager by PerformerSoft LLC)
Total CPU:0.01088259%
Kernel CPU:0.01066304%
User CPU:0.00021955%
CPU cycles:61,690/sec
Memory:2.14 MB
sechost.dll
Total CPU:0.00042388%
Kernel CPU:0.00008194%
User CPU:0.00034194%
CPU cycles:18,842/sec
Memory:100 KB
ntdll.dll
Total CPU:0.00040952%
Kernel CPU:0.00040952%
User CPU:0.00000000%
CPU cycles:11,102/sec
Memory:1.67 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 48.00%
Windows 7 Home Premium 20.00%
Windows 7 Ultimate N 16.00%
Microsoft Windows XP 12.00%
Windows Vista Home Premium 4.00%

Distribution by countryDistribution by country

United States installs about 24.00% of Application Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE