dmwu.exe
By Perion Network Ltd. (Signed)
| MD5: | 36c55f1ccdd63a70a18fb97e3f85bf5f |
| SHA1: | 3670895ae4e0d6c17b601e2f7c46f19eeade7566 |
What is dmwu.exe?
dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by Perion Network Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.
Overview
dmwu.exe runs as a service under the name Updater Service (IBUpdaterService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Perion Network Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | dmwu.exe |
| Typical file path: | C:\Windows\System32\dmwu.exe |
| Size: | 1.37 MB (1,435,440 bytes) |
| Build date: | 9/17/2013 12:19 PM |
| Certificate |
| Issued to: | Perion Network Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, April 24, 2012 |
| Expiration date: | Friday, April 24, 2015 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 10.0 |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'IBUpdaterService' (Updater Service)
- WebOptimizer
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\dmwu.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 62756
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00029441% | |
| Kernel CPU: | 0.00025260% | |
| User CPU: | 0.00004180% | |
| Kernel CPU time: | 99,563 ms/min | |
| CPU cycles: | 1,754,942/sec | |
| Memory |
| Private memory: | 8.19 MB | |
| Private (maximum): | 7.63 MB | |
| Private (minimum): | 5.78 MB | |
| Non-paged memory: | 8.19 MB | |
| Virtual memory: | 76.08 MB | |
| Virtual memory (peak): | 81.2 MB | |
| Working set: | 7.58 MB | |
| Working set (peak): | 9.12 MB | |
| Page faults: | 27,870,457/min | |
| I/O |
| I/O read transfer: | 13 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 0 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 263 Bytes/sec | |
| I/O other operations: | 16/sec | |
| Resource allocations |
| Threads: | 9 | |
| Handles: | 3889 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | C:\Windows\System32\dmwu.exe |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | IBUpdaterService |
| Display name: | Updater Service |
| Description: | “Updater Service” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| sechost.dll |
| Total CPU: | 0.04863354% | |
| Kernel CPU: | 0.04366277% | |
| User CPU: | 0.00497077% | |
| CPU cycles: | 1,670,340/sec | |
| Memory: | 100 KB | |
| ntdll.dll |
| Total CPU: | 0.00001404% | |
| Kernel CPU: | 0.00001404% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,762/sec | |
| Memory: | 1.23 MB | |
| WININET.dll |
| Total CPU: | 0.00000702% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000702% | |
| CPU cycles: | 579/sec | |
| Memory: | 1.72 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
30.00% |
|
| Windows 7 Home Premium |
24.29% |
|
| Microsoft Windows XP |
17.14% |
|
| Windows 7 Professional |
10.00% |
|
| Windows 8 |
5.71% |
|
| Windows Vista Home Premium |
5.71% |
|
| Windows 8 Single Language |
2.86% |
|
| Windows 8.1 Pro with Media Center |
1.43% |
|
| Windows 8 Pro |
1.43% |
|
| Windows 8 Release Preview |
1.43% |
|
Distribution by country
United States installs about 34.29% of dmwu.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
28.81% |
|
| Acer |
23.73% |
|
| Toshiba |
16.95% |
|
| Sony |
10.17% |
|
| Dell |
10.17% |
|
| MSI |
3.39% |
|
| ASUS |
3.39% |
|
| GIGABYTE |
3.39% |
|
