dmwu.exe
By IncrediMail Ltd. (Signed)
MD5: | 302a025cab861cfbc06dda6d6f67e790 |
SHA1: | c760da366298da9bcb4646fd2bd6df2887615cd5 |
SHA256: | 46247fd2747052e6ccc8cf5519c5d2980c07fe8dbee6abff70d4e10f5e02dc32 |
What is dmwu.exe?
dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by IncrediMail Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.
Overview
dmwu.exe runs as a service under the name WebOptimizer with extensive SYSTEM privileges (full administrator access). The file is digitally signed by IncrediMail Ltd. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).
Details
File name: | dmwu.exe |
Typical file path: | C:\Windows\System32\dmwu.exe |
Size: | 353.62 KB (362,104 bytes) |
Certificate |
Issued to: | IncrediMail Ltd. |
Authority (CA): | VeriSign |
Expiration date: | Saturday, June 9, 2012 |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | No |
Code language: | Microsoft Visual C++ 10.0 |
.NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
[UDP] listens on port 49155
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00123233% | |
Kernel CPU: | 0.00009506% | |
User CPU: | 0.00113727% | |
Kernel CPU time: | 4,072 ms/min | |
Memory |
Private memory: | 3.89 MB | |
Private (maximum): | 9.44 MB | |
Private (minimum): | 9.04 MB | |
Non-paged memory: | 3.89 MB | |
Virtual memory: | 71.1 MB | |
Virtual memory (peak): | 75.58 MB | |
Working set: | 9.42 MB | |
Working set (peak): | 9.59 MB | |
Resource allocations |
Threads: | 8 | |
Handles: | 389 | |
Process properties
Threads
Averages
sechost.dll |
Total CPU: | 0.01015687% | |
Kernel CPU: | 0.00883436% | |
User CPU: | 0.00132251% | |
CPU cycles: | 478,136/sec | |
Context switches: | 9/sec | |
Memory: | 100 KB | |
dmwu.exe (main module) |
Total CPU: | 0.00037029% | |
Kernel CPU: | 0.00015870% | |
User CPU: | 0.00021160% | |
CPU cycles: | 9,287/sec | |
Memory: | 364 KB | |
sprotector.dll (SProtector 1.66.1133) |
Total CPU: | 0.00015870% | |
Kernel CPU: | 0.00010580% | |
User CPU: | 0.00005290% | |
CPU cycles: | 6,359/sec | |
Memory: | 812 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
100.00% |
|