Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

5.0.0.8109	25.00%
5.0.0.7308	25.00%
5.0.0.6907	25.00%
5.0.0.6272	25.00%

Relationships

Child process

datamngrui.exe (Data Manager by Koyote-Lab Inc.)

Related files

PE file structure

Show functions

Import table

advapi32.dll

CloseServiceHandle, GetLengthSid, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, RegCreateKeyExW, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW

dbghelp.dll

StackWalk, SymGetModuleBase, UnDecorateSymbolName, SymGetSymFromAddr64, SymGetLineFromAddr, SymInitialize, SymCleanup, SymFunctionTableAccess, SymSetOptions

kernel32.dll

DllMain

ole32.dll

CLSIDFromProgID, CoUninitialize, CoCreateInstance, CoCreateGuid, CoTaskMemFree, StringFromIID, CoInitialize, StringFromCLSID, CLSIDFromString

psapi.dll

GetProcessMemoryInfo

rpcrt4.dll

RpcStringFreeW, UuidToStringW

sensapi.dll

IsNetworkAlive

shell32.dll

SHGetSpecialFolderPathW, SHGetFolderPathW, SHFileOperationW, ShellExecuteExW

shlwapi.dll

PathAppendW, PathFindFileNameW, PathFileExistsW, StrStrIW, UrlEscapeW

user32.dll

GetGUIThreadInfo, wsprintfW

userenv.dll

UnloadUserProfile, CreateEnvironmentBlock, DestroyEnvironmentBlock

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetGetConnectedState

wtsapi32.dll

WTSQueryUserToken, WTSFreeMemory, WTSQuerySessionInformationW

DatamngrCoordinator.exe

Datamngr Coordinator by Koyote-Lab Inc. (Signed)

Remove DatamngrCoordinator.exe

Version:	5.0.0.8109
MD5:	eae1babd70774dff02a2c85c0606dac6
SHA1:	80a3ca8a244e5bf35b979e047ead9cd21076f4cb
SHA256:	990399ed796b35aa1a12021cd614e47c654886a722a1814a3e10141d8845f06a

Overview

datamngrcoordinator.exe runs as a service under the name DatamngrCoordinator (DatamngrCoordinator) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Koyote-Lab Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	datamngrcoordinator.exe
Publisher:	Koyote-Lab Inc.
Product name:	Datamngr Coordinator
Typical file path:	C:\Program Files\settings alerter\datamngr\datamngrcoordinator.exe
File version:	5.0.0.8109
Size:	3.03 MB (3,179,568 bytes)
Build date:	6/30/2013 11:10 AM
Certificate
Issued to:	Koyote-Lab Inc.
Authority (CA):	Thawte
Effective date:	Wednesday, February 22, 2012
Expiration date:	Friday, February 21, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

DatamngrCoordinator
'DatamngrCoordinator' (Datamngr Coordinator)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00638557%	0.028634%
Kernel CPU:	0.00333685%	0.013761%
User CPU:	0.00304871%	0.014873%
Kernel CPU time:	359 ms/min	100,923,805ms/min
Memory
Private memory:	5.54 MB	21.59 MB
Private (maximum):	14.17 MB
Private (minimum):	13.94 MB
Non-paged memory:	5.54 MB	21.59 MB
Virtual memory:	131.82 MB	140.96 MB
Virtual memory (peak):	198.71 MB	169.69 MB
Working set:	14.11 MB	18.61 MB
Working set (peak):	14.26 MB	37.95 MB
Resource allocations
Threads:	8	12
Handles:	211	600
GUI GDI count:	8	103
GUI USER count:	1	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\movies toolbar\datamngr\datamngrcoordinator.exe"
Owner:	SYSTEM
Windows Service
Service name:	DatamngrCoordinator
Display name:	DatamngrCoordinator
Description:	“Coordinates Datamngr modules functionality”
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

DatamngrCoordinator.exe (main module)
Total CPU:	0.00072516%	0.272967%
Kernel CPU:	0.00036249%	0.107585%
User CPU:	0.00036268%	0.165382%
Memory:	3.05 MB	1.16 MB
ntdll.dll
Total CPU:	0.00057953%
Kernel CPU:	0.00024147%
User CPU:	0.00033806%
Memory:	712 KB

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	50.00%
Microsoft Windows XP	25.00%
Windows 8	25.00%

Distribution by country

Egypt installs about 50.00% of Datamngr Coordinator.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	33.33%
Dell	33.33%
American Megatrends	16.67%
Acer	16.67%

Remove Adware and Spyware Programs, FREE Download!