» conmgr.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

conmgr.exe

Bluetooth Audio Configuration Monitor

CSR India Pvt Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ConMgr’.

File name:

conmgr.exe

Publisher:

CSR, plc (signed by CSR India Pvt Ltd)

Product:

Bluetooth Audio Configuration Monitor

Version:

5.0.14 built by: WinDDK

MD5:

3bff9166862dd2c265c09a4682146415

SHA-1:

fdba6f047e55b8f10411b7c051fafab14e175561

SHA-256:

0a8348bbfc42ad8517a39f9f98b1693645dc2a2a6cd0c1e1cad430a1a6526f49

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 1:25:23 PM UTC (today)

File size:

522.9 KB (535,440 bytes)

Product version:

5.0.14

Original file name:

ConMgr

File type:

Executable application (Win64 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\csr\bluetooth feature pack 5.0\conmgr.exe

Digital Signature

Signed by:

CSR India Pvt Ltd

Authority:

VeriSign, Inc.

Valid from:

12/6/2009 7:00:00 PM

Valid to:

12/7/2010 6:59:59 PM

Subject:

CN=CSR India Pvt Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CSR India Pvt Ltd, L=Bangalore, S=Karnataka, C=IN

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

38EED1486977921E312D019F3AF904AC

File PE Metadata

Compilation timestamp:

12/21/2009 5:44:07 AM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xA230

Entry point:

48, 83, EC, 28, E8, E7, 33, 00, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, E9, 2B, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 66, 90, 66, 66, 66, 90, 66, 90, 48, 3B, 0D, 49, 2F, 01, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 61, 34, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 4C, 89, 44, 24, 18, 4C, 89, 4C, 24, 20, 48, 83, EC, 38, 48, 8D... 
[+]

Code size:

111.5 KB (114,176 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

ConMgr

Command:

"C:\Program Files\csr\bluetooth feature pack 5.0\conmgr.exe"

The file conmgr.exe has been discovered within the following program.

Bluetooth Feature Pack 5.0 by CSR Plc.

www.Bluetooth.org

About 4% of users remove it

Scan conmgr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.