Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

5.0.0.8109	33.33%
5.0.0.7308	33.33%
5.0.0.6907	33.33%

Relationships

Parent process

datamngrcoordinator.exe (Datamngr Coordinator by Koyote-Lab Inc.)

Related files

datamngr.dll (Data Manager by Koyote-Lab Inc.)

PE file structure

Show functions

Import table

advapi32.dll

IsValidSid, AddAce, CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW, SetKernelObjectSecurity, RegEnumValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegEnumKeyW, RegNotifyChangeKeyValue, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegQueryValueExW, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegCloseKey, RegDeleteKeyW, OpenThreadToken, GetLengthSid, InitializeAcl, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, OpenProcessToken, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, QueryServiceStatus, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo, GetSecurityDescriptorSacl

comctl32.dll

InitCommonControlsEx, _TrackMouseEvent

gdi32.dll

SetTextColor, GetTextMetricsW, CreateFontIndirectW, GetStockObject, GetObjectW, SetBkMode, CreatePatternBrush, CreateSolidBrush, BitBlt, CreateCompatibleBitmap, SelectObject, CreateCompatibleDC, DeleteDC, DeleteObject, GetTextExtentPoint32W

kernel32.dll

DllMain

ole32.dll

CLSIDFromString, CoUninitialize, CoInitialize, CoCreateInstance, CoTaskMemAlloc, CoTaskMemRealloc, StringFromIID, CoCreateGuid, StringFromGUID2, CoTaskMemFree, StringFromCLSID

sensapi.dll

IsNetworkAlive

shell32.dll

SHFileOperationW, ShellExecuteExW, SHGetSpecialFolderPathW

shlwapi.dll

PathRemoveExtensionW, StrStrIW, UrlEscapeW, PathAppendW, PathRemoveFileSpecW, UrlIsW, PathAddBackslashW

user32.dll

GetWindowLongW, DestroyWindow, DefWindowProcW, CallWindowProcW, LoadStringW, GetDlgItem, SetWindowTextW, EndDialog, SendMessageW, ShowWindow, GetTopWindow, CharNextW, SetWindowLongW, MsgWaitForMultipleObjects, FindWindowW, MsgWaitForMultipleObjectsEx, PeekMessageW, IsWindowUnicode, GetMessageW, GetMessageA, TranslateMessage, DispatchMessageW, DispatchMessageA, PostQuitMessage, SetPropW, MessageBoxW, CreateWindowExW, GetClassInfoExW, RegisterClassExW, DrawTextW, InvalidateRect, IsWindow, PtInRect, ReleaseDC, GetDC, GetParent, LoadCursorW, SetCursor, RedrawWindow, EndPaint, BeginPaint, SetWindowPos, GetSysColor, FillRect, GetClientRect, GetGUIThreadInfo, wsprintfW, UnregisterClassA, LoadStringA, MoveWindow, GetWindowRect, SystemParametersInfoW, SetLayeredWindowAttributes, GetActiveWindow, ChildWindowFromPoint, ScreenToClient, GetCursorPos, TrackMouseEvent, KillTimer, SetTimer, DialogBoxParamW, LoadBitmapW

userenv.dll

UnloadUserProfile

version.dll

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

wininet.dll

InternetGetConnectedState

DatamngrUI.exe

Data Manager by Koyote-Lab Inc. (Signed)

Remove DatamngrUI.exe

Version:	5.0.0.7308
MD5:	249b4cb29eb19e7af42722b812e0f43c
SHA1:	299b05d59f2504217ec5a9bc00640bdd789f5f38
SHA256:	6d2935d372faf2d81c22d15fad23f021971c04928a5a0167a93e2eea32acf06e

Overview

datamngrui.exe executes as a process with the local user's privileges typically within the context of its parent datamngrcoordinator.exe (Datamngr Coordinator by Koyote-Lab Inc.). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Koyote-Lab Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	datamngrui.exe
Publisher:	Koyote-Lab Inc.
Product name:	Data Manager
Typical file path:	C:\Program Files\settings alerter\datamngr\datamngrui.exe
File version:	5.0.0.7308
Size:	3.21 MB (3,365,424 bytes)
Build date:	5/14/2013 12:15 PM
Certificate
Issued to:	Koyote-Lab Inc.
Authority (CA):	Thawte
Effective date:	Wednesday, February 22, 2012
Expiration date:	Friday, February 21, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'DATAMNGR' → C:\Program Files1\SEARCH~2\Datamngr\DATAMN~2.EXE

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.09879458%	0.028634%
Kernel CPU:	0.02416042%	0.013761%
User CPU:	0.07463416%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
Memory
Private memory:	2.42 MB	21.59 MB
Private (maximum):	7.46 MB
Private (minimum):	7.3 MB
Non-paged memory:	2.42 MB	21.59 MB
Virtual memory:	66.06 MB	140.96 MB
Virtual memory (peak):	69.85 MB	169.69 MB
Working set:	7.3 MB	18.61 MB
Working set (peak):	11.1 MB	37.95 MB
Resource allocations
Threads:	6	12
Handles:	115	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	7	49
GUI USER peak:	7	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\Program Files\search results toolbar\datamngr\datamngrui.exe"
Owner:	User
Parent process:	datamngrcoordinator.exe (Datamngr Coordinator by Koyote-Lab Inc.)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	33.33%
Windows 7 Ultimate	33.33%
Windows 8	33.33%

Distribution by country

Egypt installs about 66.67% of Data Manager.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	50.00%
American Megatrends	25.00%
Acer	25.00%

Remove Adware and Spyware Programs, FREE Download!