Versions

5.0.0.12712	2.08%
5.0.0.12627	2.08%
5.0.0.9854	4.17%
5.0.0.9396	20.83%
5.0.0.9092	2.08%
5.0.0.8483	2.08%
5.0.0.8109	12.50%
5.0.0.8109	2.08%
5.0.0.8080	6.25%
5.0.0.7931	2.08%
5.0.0.7254	25.00%
5.0.0.7189	2.08%
5.0.0.7062	2.08%
5.0.0.6767	2.08%
5.0.0.6254	2.08%
5.0.0.5848	10.42%

Warning 10 antivirus scanners has detected malware in various versions of DatamngrCoordinator.exe.

There are 16 versions of datamngrcoordinator.exe in the wild, the latest version being 5.0.0.12712. It is started as a Windows Service called 'Datamngr Coordinator2' with the name 'DatamngrCoordinator2' and described as “Coordinates Datamngr modules functionality”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 3.24 MB. The file is a digitally signed and issued to Bandoo Media by Thawte. During the process's lifecycle, the typical CPU resource utilization is about 0.0071% including both foreground and background operations, the average private memory consumption is about 5.17 MB with the maximum memory reaching around 11.51 MB. Addionally, typically read and write I/O disk operations is about 1.83 KB per minute for reads and 10.68 KB per minute for writes.

Based on 40+ industry antivirus scanners, 10 of them detected the following malware.