Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

5.0.0.12712	2.08%
5.0.0.12627	2.08%
5.0.0.9854	4.17%
5.0.0.9396	20.83%
5.0.0.9092	2.08%
5.0.0.8483	2.08%
5.0.0.8109	12.50%
5.0.0.8109	2.08%
5.0.0.8080	6.25%
5.0.0.7931	2.08%
5.0.0.7254	25.00%
5.0.0.7189	2.08%
5.0.0.7062	2.08%
5.0.0.6767	2.08%
5.0.0.6254	2.08%
5.0.0.5848	10.42%

Relationships

datamngrui.exe (Data Manager by Bandoo Media)

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, GetLengthSid, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, RegCreateKeyExW, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, QueryServiceConfigW, QueryServiceStatusEx, RegOpenKeyW

dbghelp.dll

StackWalk, SymGetModuleBase, UnDecorateSymbolName, SymGetSymFromAddr64, SymGetLineFromAddr, SymInitialize, SymCleanup, SymFunctionTableAccess, SymSetOptions

kernel32.dll

DllMain

ole32.dll

CLSIDFromProgID, CoUninitialize, CoCreateInstance, CoCreateGuid, CoTaskMemFree, StringFromIID, CoInitialize, StringFromCLSID, CLSIDFromString, CoInitializeEx, CoInitializeSecurity

psapi.dll

GetProcessMemoryInfo

rpcrt4.dll

RpcStringFreeW, UuidToStringW

sensapi.dll

IsNetworkAlive

shell32.dll

SHGetSpecialFolderPathW, SHGetFolderPathW, SHFileOperationW, ShellExecuteExW

shlwapi.dll

PathAppendW, PathFindFileNameW, PathFileExistsW, StrStrIW, UrlEscapeW, PathGetArgsW

user32.dll

GetGUIThreadInfo, wsprintfW

userenv.dll

UnloadUserProfile, CreateEnvironmentBlock, DestroyEnvironmentBlock

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetGetConnectedState

wtsapi32.dll

WTSQueryUserToken, WTSFreeMemory, WTSQuerySessionInformationW

DatamngrCoordinator.exe

Datamngr Coordinator by Bandoo Media (Signed)

Remove DatamngrCoordinator.exe

Version:	5.0.0.7189
MD5:	da249784a0ab82c33c9189e363101fad
SHA1:	d53784a5e434fac1871ec30adf81e27c843cb513

Overview

datamngrcoordinator.exe runs as a service under the name Datamngr Coordinator2 (DatamngrCoordinator2) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Bandoo Media which was issued by the Thawte certificate authority (CA).

Details

File name:	datamngrcoordinator.exe
Publisher:	Bandoo Media Inc.
Product name:	Datamngr Coordinator
Typical file path:	C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe
File version:	5.0.0.7189
Size:	2.88 MB (3,022,848 bytes)
Build date:	5/5/2013 9:29 AM
Certificate
Issued to:	Bandoo Media
Authority (CA):	Thawte
Effective date:	Tuesday, September 18, 2012
Expiration date:	Sunday, November 2, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'DatamngrCoordinator2' (Datamngr Coordinator2)
DatamngrCoordinator
'DatamngrCoordinator' (Datamngr Coordinator)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00083037%	0.028634%
Kernel CPU:	0.00049251%	0.013761%
User CPU:	0.00033786%	0.014873%
Kernel CPU time:	1,500 ms/min	100,923,805ms/min
Memory
Private memory:	4.4 MB	21.59 MB
Private (maximum):	9.78 MB
Private (minimum):	9.47 MB
Non-paged memory:	4.4 MB	21.59 MB
Virtual memory:	146.73 MB	140.96 MB
Virtual memory (peak):	235.02 MB	169.69 MB
Working set:	9.63 MB	18.61 MB
Working set (peak):	9.92 MB	37.95 MB
Resource allocations
Threads:	8	12
Handles:	187	600

Process properties

Integrety level:	Undefined
Platform:	64-bit
Command line:	"C:\Program Files\search results toolbar\datamngr\datamngrcoordinator.exe"
Owner:	SYSTEM
Windows Service
Service name:	DatamngrCoordinator2
Display name:	Datamngr Coordinator2
Description:	“Coordinates Datamngr modules functionality”
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (by Microsoft)

Threads

Averages

wow64.dll
Total CPU:	0.00504431%	0.272967%
Kernel CPU:	0.00485976%	0.107585%
User CPU:	0.00018455%	0.165382%
CPU cycles:	118,916/sec	5,741,424/sec
Memory:	276 KB	1.16 MB
DatamngrCoordinator.exe (main module)
Total CPU:	0.00019279%
Kernel CPU:	0.00012303%
User CPU:	0.00006976%
CPU cycles:	2,456/sec
Memory:	2.91 MB

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	34.78%
Windows 8 Pro	15.22%
Windows 7 Home Premium	13.04%
Microsoft Windows XP	10.87%
Windows 8 Enterprise	6.52%
Windows Seven Black Edition	4.35%
Windows 7 Professional	4.35%
Windows 8 Single Language	4.35%
Windows 8	4.35%
Windows 8.1 Single Language	2.17%

Distribution by country

United States installs about 13.64% of Datamngr Coordinator.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	24.00%
Acer	22.00%
ASUS	20.00%
Hewlett-Packard	10.00%
Toshiba	8.00%
GIGABYTE	6.00%
Sony	4.00%
American Megatrends	4.00%
Alienware	2.00%

Remove Adware and Spyware Programs, FREE Download!