Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

05b13 14.08%
68839 1.41%
11c3a 8.45%
52c18 12.68%
89238 1.41%
be4d9 2.82%
f85eb 1.41%
872f6 1.41%
8ac7e 9.86%
6caf3 4.23%
0ec38 7.04%
c7007 4.23%
81eac 1.41%
bd893 2.82%
a3224 1.41%
08e67 1.41%
99da6 4.23%
60981 7.04%
9b67a 4.23%
45f31 1.41%
199a8 1.41%
ce882 1.41%
36c55 1.41%
382f8 1.41%
418c5 1.41%
(Note, Perion Network Ltd. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

dmwu.exe

By Perion Network Ltd. (Signed)

Remove dmwu.exe
MD5:   05b1323c82849e1cc4e774d470254215
SHA1:   c8644bc3ee9398babfa5174e9f8781c1796be7e0
SHA256:   6ad0a87557f5832b2ea2b18d0c213c1c1f6d15fc90b8278a384013d37287b1a5

What is dmwu.exe?

dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by Perion Network Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.

Overview

dmwu.exe runs as a service under the name Updater Service (IBUpdaterService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Perion Network Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:dmwu.exe
Typical file path:C:\Windows\System32\dmwu.exe
Size:984.86 KB (1,008,496 bytes)
Certificate
Issued to:Perion Network Ltd.
Authority (CA):VeriSign
Effective date:Tuesday, April 24, 2012
Expiration date:Friday, April 24, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'IBUpdaterService' (Updater Service)
  • WebOptimizer
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\WINDOWS\system32\dmwu.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 49156
  • [UDP] listens on port 49152
  • [UDP] listens on port 2349
  • [UDP] listens on port 58096

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00155924%
    0.028634%
    Kernel CPU:0.00101033%
    0.013761%
    User CPU:0.00054891%
    0.014873%
    Kernel CPU time:2,080 ms/min
    100,923,805ms/min
    CPU cycles:83,578/sec
    17,470,203/sec
    Memory
    Private memory:4.5 MB
    21.59 MB
    Private (maximum):9.33 MB
    Private (minimum):5.26 MB
    Non-paged memory:4.5 MB
    21.59 MB
    Virtual memory:70.89 MB
    140.96 MB
    Virtual memory (peak):74.74 MB
    169.69 MB
    Working set:6.71 MB
    18.61 MB
    Working set (peak):9.43 MB
    37.95 MB
    Page faults:241,713/min
    2,039/min
    I/O
    I/O read transfer:800 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:4 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:760 Bytes/sec
    448.09 KB/min
    I/O other operations:21/sec
    1,671/min
    Resource allocations
    Threads:10
    12
    Handles:554
    600
    GUI GDI count:23
    103
    GUI USER count:10
    49

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:C:\Windows\System32\dmwu.exe
    Owner:SYSTEM
    Windows Service
    Service name:IBUpdaterService
    Display name:Updater Service
    Description:“Updater Service”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    sechost.dll
    Total CPU:0.00554266%
    0.272967%
    Kernel CPU:0.00482815%
    0.107585%
    User CPU:0.00071450%
    0.165382%
    CPU cycles:120,208/sec
    5,741,424/sec
    Memory:100 KB
    1.16 MB
    ADVAPI32.dll
    Total CPU:0.00413051%
    Kernel CPU:0.00265533%
    User CPU:0.00147518%
    Memory:688 KB
    dmwu.exe (main module)
    Total CPU:0.00042851%
    Kernel CPU:0.00035475%
    User CPU:0.00007376%
    CPU cycles:954/sec
    Memory:992 KB
    WININET.dll
    Total CPU:0.00003423%
    Kernel CPU:0.00003423%
    User CPU:0.00000000%
    CPU cycles:18,360/sec
    Memory:1.11 MB
    ntdll.dll
    Total CPU:0.00003423%
    Kernel CPU:0.00003423%
    User CPU:0.00000000%
    CPU cycles:1,196/sec
    Memory:1.23 MB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 30.00%
    Windows 7 Home Premium 24.29%
    Microsoft Windows XP 17.14%
    Windows 7 Professional 10.00%
    Windows 8 5.71%
    Windows Vista Home Premium 5.71%
    Windows 8 Single Language 2.86%
    Windows 8.1 Pro with Media Center 1.43%
    Windows 8 Pro 1.43%
    Windows 8 Release Preview 1.43%

    Distribution by countryDistribution by country

    United States installs about 34.29% of dmwu.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Hewlett-Packard 28.81%
    Acer 23.73%
    Toshiba 16.95%
    Sony 10.17%
    Dell 10.17%
    MSI 3.39%
    ASUS 3.39%
    GIGABYTE 3.39%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE