Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

datamngrui.exe (Data Manager by Musiclab)

Related files

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, GetLengthSid, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, RegCreateKeyExW, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl

dbghelp.dll

StackWalk, SymGetModuleBase, UnDecorateSymbolName, SymGetSymFromAddr64, SymGetLineFromAddr, SymInitialize, SymCleanup, SymFunctionTableAccess, SymSetOptions

kernel32.dll

DllMain

ole32.dll

CLSIDFromProgID, CoUninitialize, CoCreateInstance, CoCreateGuid, CoTaskMemFree, StringFromIID, CoInitialize

psapi.dll

GetProcessMemoryInfo

rpcrt4.dll

RpcStringFreeW, UuidToStringW

sensapi.dll

IsNetworkAlive

shell32.dll

SHGetSpecialFolderPathW, SHGetFolderPathW, SHFileOperationW, ShellExecuteExW

shlwapi.dll

PathAppendW, PathFindFileNameW, PathFileExistsW, StrStrIW, UrlEscapeW

user32.dll

GetGUIThreadInfo, wsprintfW

userenv.dll

UnloadUserProfile, CreateEnvironmentBlock, DestroyEnvironmentBlock

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetGetConnectedState

wtsapi32.dll

WTSQueryUserToken, WTSFreeMemory, WTSQuerySessionInformationW

DatamngrCoordinator.exe

Datamngr Coordinator by Musiclab (Signed)

Remove DatamngrCoordinator.exe

Version:	5.0.0.7856
MD5:	5e1441fe6c7fb69cda666cf0042d6546
SHA1:	1da9ffc5d71a8d9ca4ddb6aa7e6992835447f67a

Overview

datamngrcoordinator.exe runs as a service under the name Datamngr Coordinator (DatamngrCoordinator) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Musiclab which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

Details

File name:	datamngrcoordinator.exe
Publisher:	Musiclab LLC.
Product name:	Datamngr Coordinator
Typical file path:	C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe
File version:	5.0.0.7856
Size:	2.88 MB (3,024,448 bytes)
Build date:	6/12/2013 3:28 AM
Certificate
Issued to:	Musiclab
Authority (CA):	Thawte
Expiration date:	Saturday, July 5, 2014
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'DatamngrCoordinator' (Datamngr Coordinator)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00078270%	0.028634%
Kernel CPU:	0.00045411%	0.013761%
User CPU:	0.00032859%	0.014873%
Kernel CPU time:	217,013 ms/min	100,923,805ms/min
Memory
Private memory:	6.8 MB	21.59 MB
Private (maximum):	8.55 MB
Private (minimum):	2.84 MB
Non-paged memory:	6.8 MB	21.59 MB
Virtual memory:	296 MB	140.96 MB
Virtual memory (peak):	369.67 MB	169.69 MB
Working set:	4.51 MB	18.61 MB
Working set (peak):	8.96 MB	37.95 MB
Resource allocations
Threads:	23	12
Handles:	233	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe"
Owner:	SYSTEM
Windows Service
Service name:	DatamngrCoordinator
Display name:	Datamngr Coordinator
Description:	“Coordinates Datamngr modules functionality”
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads