Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

5.0.0.8109	25.00%
5.0.0.7308	25.00%
5.0.0.6907	25.00%
5.0.0.6272	25.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

datamngrui.exe (Data Manager by Koyote-Lab Inc.)

Related files

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, GetLengthSid, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, RegCreateKeyExW, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW

dbghelp.dll

StackWalk, SymGetModuleBase, UnDecorateSymbolName, SymGetSymFromAddr64, SymGetLineFromAddr, SymInitialize, SymCleanup, SymFunctionTableAccess, SymSetOptions

kernel32.dll

DllMain

ole32.dll

CLSIDFromProgID, CoUninitialize, CoCreateInstance, CoCreateGuid, CoTaskMemFree, StringFromIID, CoInitialize, StringFromCLSID, CLSIDFromString

psapi.dll

GetProcessMemoryInfo

rpcrt4.dll

RpcStringFreeW, UuidToStringW

sensapi.dll

IsNetworkAlive

shell32.dll

SHGetSpecialFolderPathW, SHGetFolderPathW, SHFileOperationW, ShellExecuteExW

shlwapi.dll

PathAppendW, PathFindFileNameW, PathFileExistsW, StrStrIW, UrlEscapeW

user32.dll

GetGUIThreadInfo, wsprintfW

userenv.dll

UnloadUserProfile, CreateEnvironmentBlock, DestroyEnvironmentBlock

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetGetConnectedState

wtsapi32.dll

WTSQueryUserToken, WTSFreeMemory, WTSQuerySessionInformationW

DatamngrCoordinator.exe

Datamngr Coordinator by Koyote-Lab Inc. (Signed)

Remove DatamngrCoordinator.exe

Version:	5.0.0.7308
MD5:	b696880bbad358963c43a9fa736c21b1
SHA1:	abe1daa6eb1a8ad3c7655fb4673ed88858a9a574
SHA256:	27c9a4d668c48ba3c22e0f4695cf5ea7ec498eaf08670280e9cd40535a7c1e8f

Overview

datamngrcoordinator.exe runs as a service under the name DatamngrCoordinator (DatamngrCoordinator) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Koyote-Lab Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	datamngrcoordinator.exe
Publisher:	Koyote-Lab Inc.
Product name:	Datamngr Coordinator
Typical file path:	C:\Program Files\settings alerter\datamngr\datamngrcoordinator.exe
File version:	5.0.0.7308
Size:	2.88 MB (3,023,920 bytes)
Build date:	5/14/2013 12:15 PM
Certificate
Issued to:	Koyote-Lab Inc.
Authority (CA):	Thawte
Effective date:	Wednesday, February 22, 2012
Expiration date:	Friday, February 21, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

DatamngrCoordinator
'DatamngrCoordinator' (Datamngr Coordinator)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.05542613%	0.028634%
Kernel CPU:	0.02120125%	0.013761%
User CPU:	0.03422488%	0.014873%
Kernel CPU time:	281 ms/min	100,923,805ms/min
Memory
Private memory:	5.77 MB	21.59 MB
Private (maximum):	9.63 MB
Private (minimum):	6.66 MB
Non-paged memory:	5.77 MB	21.59 MB
Virtual memory:	205.57 MB	140.96 MB
Virtual memory (peak):	215.23 MB	169.69 MB
Working set:	6.66 MB	18.61 MB
Working set (peak):	11.75 MB	37.95 MB
Resource allocations
Threads:	14	12
Handles:	159	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe"
Owner:	SYSTEM
Windows Service
Service name:	DatamngrCoordinator
Display name:	DatamngrCoordinator
Description:	“Coordinates Datamngr modules functionality”
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ntdll.dll
Total CPU:	0.02417887%	0.272967%
Kernel CPU:	0.00755586%	0.107585%
User CPU:	0.01662301%	0.165382%
CPU cycles:	699,797/sec	5,741,424/sec
Memory:	1.23 MB	1.16 MB
DatamngrCoordinator.exe (main module)
Total CPU:	0.00425618%
Kernel CPU:	0.00251389%
User CPU:	0.00174229%
CPU cycles:	118,708/sec
Memory:	2.91 MB

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	50.00%
Microsoft Windows XP	25.00%
Windows 8	25.00%

Distribution by country

Egypt installs about 50.00% of Datamngr Coordinator.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	33.33%
Dell	33.33%
American Megatrends	16.67%
Acer	16.67%

Remove Adware and Spyware Programs, FREE Download!