Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW
imm32.dll
ImmDisableIME
kernel32.dll
CreateFileA, FlushFileBuffers, GetCurrentProcessId, QueryPerformanceCounter, VirtualFree, HeapCreate, DeleteCriticalSection, GetStartupInfoA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, InitializeCriticalSectionAndSpinCount, SetPriorityClass, GetCurrentProcess, GetPriorityClass, Sleep, GetModuleFileNameW, lstrcatW, GetCurrentThreadId, CloseHandle, CreateMutexW, GlobalAlloc, lstrcpynW, GetLastError, GlobalFree, MapViewOfFile, UnmapViewOfFile, FreeLibrary, GetTickCount, LoadLibraryW, GetProcAddress, CreateFileMappingW, InterlockedIncrement, InterlockedDecrement, lstrlenW, LoadLibraryA, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, RtlUnwind, HeapSize, HeapReAlloc, VirtualAlloc, MultiByteToWideChar, LeaveCriticalSection, lstrcpyW, EnterCriticalSection, GetConsoleMode, GetConsoleCP, WideCharToMultiByte, SetFilePointer, GetFileType, SetHandleCount, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, GetStdHandle, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, RaiseException, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, ExitProcess, WriteFile, GetSystemTimeAsFileTime
lmsmbkel.dll
ASK_ButtonFunction2Acer, ASK_GetButtonFunctionInfo, ASK_Deinitial, ASK_Initial, ASK_GetCommunicationFunctionSupported, ASK_GetAcerSMBiosRevision
ole32.dll
CoInitializeSecurity, CoInitializeEx, CoCreateInstance, CoUninitialize
shlwapi.dll
PathAppendW, PathRemoveFileSpecW
sysbright.dll
Bright_GetLevel, Bright_Register, Bright_GetLevels, Bright_Unregister, Bright_SetValue, Bright_GetValue
user32.dll
GetMessageW, PostQuitMessage, UnregisterClassW, PostMessageW, KillTimer, SetTimer, TranslateMessage, RegisterClassExW, GetWindowLongW, SetWindowLongW, IsWindow, FindWindowExW, CreateWindowExW, DefWindowProcW, DispatchMessageW, DestroyWindow, LoadStringW, wsprintfW, FindWindowW
wtsapi32.dll
WTSRegisterSessionNotification

AdWmiSvc.exe

Administrator WMI Service Application by Dritek System Inc. (Signed)

Remove AdWmiSvc.exe
Version:   2, 1, 1, 22
MD5:   6ea935c331cbc04d9996bde2dc37cbef
SHA1:   0986081e1999f5d664d1c91d4f65bdb4048230d4
SHA256:   25daaee4d5e26aa6df1e54dc87625dce4ffc82ce861385780631f12264a8d41b

Overview

adwmisvc.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent devicectrlsvc.exe (Device Control Service by Dritek System Inc.). This is typically installed with the program Acer Device Control published by Acer Incorporated. The file is digitally signed by Dritek System Inc. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 8 Pro (6.2.9200.0).

DetailsDetails

File name:adwmisvc.exe
Publisher:Dritek System Inc.
Product name:Administrator WMI Service Application
Typical file path:C:\Program Files\acer\device control\adwmisvc.exe
File version:2, 1, 1, 22
Product version:2, 1, 1, 20
Size:103.58 KB (106,064 bytes)
Certificate
Issued to:Dritek System Inc.
Authority (CA):VeriSign
Effective date:Wednesday, September 30, 2009
Expiration date:Monday, October 15, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Acer Device Control
 Acer Incorporated
10% remove
“The Device Control console allows you to customise a number of system settings to help you better control the device.”

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00158146%
0.028634%
Kernel CPU:0.00072137%
0.013761%
User CPU:0.00086009%
0.014873%
Kernel CPU time:78 ms/min
100,923,805ms/min
Context switches:6/sec
284/sec
Memory
Private memory:1.53 MB
21.59 MB
Private (maximum):6.08 MB
Private (minimum):5.89 MB
Non-paged memory:1.53 MB
21.59 MB
Virtual memory:58.93 MB
140.96 MB
Virtual memory (peak):60.94 MB
169.69 MB
Working set:6.07 MB
18.61 MB
Working set (peak):6.08 MB
37.95 MB
Resource allocations
Threads:2
12
Handles:174
600
GUI GDI count:9
103
GUI GDI peak:10
142
GUI USER count:3
49
GUI USER peak:5
71

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\acer\device control\adwmisvc.exe"
Owner:SYSTEM
Parent process:devicectrlsvc.exe (Device Control Service by Dritek System Inc.)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.00386041%
0.272967%
Kernel CPU:0.00000000%
0.107585%
User CPU:0.00386041%
0.165382%
CPU cycles:1,545/sec
5,741,424/sec
Memory:1.4 MB
1.16 MB
AdWmiSvc.exe (main module)
Total CPU:0.00258323%
Kernel CPU:0.00143513%
User CPU:0.00114810%
CPU cycles:817,174/sec
Context switches:6/sec
Memory:116 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 Pro 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE