Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

5.0.0.9396 25.00%
5.0.0.8484 25.00%
5.0.0.6972 25.00%
5.0.0.5867 25.00%

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegCreateKeyExW, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, CloseServiceHandle, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, GetLengthSid, QueryServiceConfigW, QueryServiceStatusEx, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegOpenKeyW
dbghelp.dll
SymSetOptions, UnDecorateSymbolName, SymInitialize, StackWalk, SymCleanup, SymGetLineFromAddr, SymGetSymFromAddr64, SymFunctionTableAccess, SymGetModuleBase
kernel32.dll
DllMain
ole32.dll
CoUninitialize, CoCreateInstance, CoInitialize, CoCreateGuid, CoTaskMemFree, StringFromIID, CLSIDFromProgID, StringFromCLSID, CoInitializeEx, CLSIDFromString, CoInitializeSecurity
psapi.dll
GetProcessMemoryInfo
rpcrt4.dll
UuidToStringW, RpcStringFreeW
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW, ShellExecuteExW, SHFileOperationW
shlwapi.dll
PathAppendW, StrStrIW, UrlEscapeW, PathFileExistsW, PathFindFileNameW, PathGetArgsW
user32.dll
GetGUIThreadInfo, wsprintfW
userenv.dll
UnloadUserProfile, DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
wininet.dll
InternetGetConnectedState
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW, WTSQueryUserToken

DatamngrCoordinator.exe

Datamngr Coordinator by iMesh Inc. (Signed)

Remove DatamngrCoordinator.exe
Version:   5.0.0.8484
MD5:   5b2e304440c76e57074e36716b3c9f14
SHA1:   b65992be2497f24bd7f9c7e2ce57e86188338734

Overview

datamngrcoordinator.exe runs as a service under the name Datamngr Coordinator (DatamngrCoordinator) with extensive SYSTEM privileges (full administrator access). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by iMesh Inc. which was issued by the Thawte certificate authority (CA).

DetailsDetails

File name:datamngrcoordinator.exe
Publisher:iMesh Inc.
Product name:Datamngr Coordinator
Typical file path:C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe
File version:5.0.0.8484
Size:3.03 MB (3,180,608 bytes)
Build date:7/23/2013 11:52 PM
Certificate
Issued to:iMesh Inc.
Authority (CA):Thawte
Effective date:Tuesday, September 18, 2012
Expiration date:Sunday, October 19, 2014
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'DatamngrCoordinator' (Datamngr Coordinator)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'DATAMNGR' → C:\Program Files1\SEARCH~1\Datamngr\DATAMN~1.EXE

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00012682%
0.028634%
Kernel CPU:0.00002328%
0.013761%
User CPU:0.00010353%
0.014873%
Kernel CPU time:16,224 ms/min
100,923,805ms/min
Memory
Private memory:6.8 MB
21.59 MB
Private (maximum):16.02 MB
Private (minimum):2.22 MB
Non-paged memory:6.8 MB
21.59 MB
Virtual memory:178.25 MB
140.96 MB
Virtual memory (peak):208.59 MB
169.69 MB
Working set:6.16 MB
18.61 MB
Working set (peak):17.44 MB
37.95 MB
Resource allocations
Threads:9
12
Handles:150
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\music toolbar\datamngr\datamngrcoordinator.exe"
Owner:SYSTEM
Windows Service
Service name:DatamngrCoordinator
Display name:Datamngr Coordinator
Description:“Coordinates Datamngr modules functionality”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.00681342%
0.272967%
Kernel CPU:0.00652953%
0.107585%
User CPU:0.00028389%
0.165382%
CPU cycles:151,776/sec
5,741,424/sec
Memory:1.67 MB
1.16 MB
DatamngrCoordinator.exe (main module)
Total CPU:0.00072266%
Kernel CPU:0.00018067%
User CPU:0.00054200%
CPU cycles:17,050/sec
Memory:3.05 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 50.00%
Windows 7 Home Basic 25.00%
Windows Vista Home Premium 25.00%

Distribution by countryDistribution by country

Ireland installs about 25.00% of Datamngr Coordinator.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 28.57%
Lenovo 28.57%
Toshiba 28.57%
Acer 14.29%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE