home

datamngr.dll

Bandoo Media, Inc.

The module datamngr.dll by Bandoo Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Windows iLivid Toolbar by Bandoo Media Inc which is a potentially unwanted software program.
Publisher:
Bandoo Media, Inc.  (signed and verified)

MD5:
373602de32d37605e704022d4e75ebb3

SHA-1:
e90b0d2efb990121fbeac37fbc06bf56f1ee2aaf

SHA-256:
bcaedf062278287efe42e31d09d12b7b5d4ec1fe4fefa41b3ad8ee23e39930b6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
5/15/2024 4:26:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.BandooToolbar (M)
16.11.11.5

File size:
1.7 MB (1,778,584 bytes)

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\windows ilivid toolbar\datamngr\x64\datamngr.dll

Digital Signature
Signed by:
Bandoo Media, Inc.

Authority:
Thawte, Inc.

Valid from:
2/24/2011 12:00:00 AM

Valid to:
2/23/2013 11:59:59 PM

Subject:
CN="Bandoo Media, Inc.", O="Bandoo Media, Inc.", L=Panama City, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2C1E0DFD5207FCBA6225F6AE61587068

File PE Metadata
Compilation timestamp:
11/9/2011 10:41:43 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:GVY5BWtgfNPh5bBdi/pObibwmlYsQGPbcA:/Tbfm

Entry address:
0x1268E4

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, AF, 87, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 18, 48, 89, 70, 20, 48, 89, 50, 10, 57, 41, 54, 41, 55, 41, 56, 41, 57, 48, 83, EC, 40, 4D, 8B, 79, 08, 4D, 8B, 21, 49, 8B, 71, 38, 4D, 2B, E7, F6, 41, 04, 66, 4D, 8B, F1, 48, 8B, EA, 4C, 8B, E9, 0F, 85, DC, 00, 00...
 
[+]

Entropy:
6.1964

Code size:
1.3 MB (1,364,480 bytes)

The file datamngr.dll has been discovered within the following program.

Windows iLivid Toolbar  by Bandoo Media Inc
This toolbar is typiclaly bundled with the installation of the free iLivid software. Windows iLivid Toolbar by Bandoo for Intenet Explorer collects and stores information about your web browsing habits in order to suggest services or provide advertising via the toolbar.
www.ilivid.com
79% remove it
 
Powered by Should I Remove It?

Remove datamngr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.