dmwu.exe
By Perion Network Ltd. (Signed)
| MD5: | 52c18a4b4ac4778b6980cf8284893fb8 |
| SHA1: | 51c951052ff19b82f4b52dab9a5444cfbf98040c |
| SHA256: | f17ff9d0cc4e8de5b019948b21b503e2f26a3edd031f4c7517feeae601c739a8 |
What is dmwu.exe?
dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by Perion Network Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.
Overview
dmwu.exe runs as a service under the name Updater Service (IBUpdaterService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Perion Network Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | dmwu.exe |
| Typical file path: | C:\Windows\System32\dmwu.exe |
| Size: | 982.86 KB (1,006,448 bytes) |
| Certificate |
| Issued to: | Perion Network Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, April 24, 2012 |
| Expiration date: | Friday, April 24, 2015 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 10.0 |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'IBUpdaterService' (Updater Service)
- WebOptimizer
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\dmwu.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 1039
[UDP] listens on port 1027
[UDP] listens on port 1032
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00705325% | |
| Kernel CPU: | 0.00292659% | |
| User CPU: | 0.00412666% | |
| Kernel CPU time: | 57,464 ms/min | |
| Memory |
| Private memory: | 4.72 MB | |
| Private (maximum): | 9.45 MB | |
| Private (minimum): | 6.11 MB | |
| Non-paged memory: | 4.72 MB | |
| Virtual memory: | 65.97 MB | |
| Virtual memory (peak): | 68.68 MB | |
| Working set: | 6.73 MB | |
| Working set (peak): | 9.54 MB | |
| Page faults: | 31,871/min | |
| I/O |
| I/O read transfer: | 173 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 0 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 38 Bytes/sec | |
| I/O other operations: | 2/sec | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 273 | |
| GUI GDI count: | 8 | |
| GUI USER count: | 3 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | C:\Windows\System32\dmwu.exe |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | IBUpdaterService |
| Display name: | Updater Service |
| Description: | “Updater Service” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ADVAPI32.dll |
| Total CPU: | 0.01713248% | |
| Kernel CPU: | 0.00685299% | |
| User CPU: | 0.01027949% | |
| Memory: | 620 KB | |
| dmwu.exe (main module) |
| Total CPU: | 0.00062912% | |
| Kernel CPU: | 0.00059030% | |
| User CPU: | 0.00003882% | |
| Memory: | 988 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
30.00% |
|
| Windows 7 Home Premium |
24.29% |
|
| Microsoft Windows XP |
17.14% |
|
| Windows 7 Professional |
10.00% |
|
| Windows 8 |
5.71% |
|
| Windows Vista Home Premium |
5.71% |
|
| Windows 8 Single Language |
2.86% |
|
| Windows 8.1 Pro with Media Center |
1.43% |
|
| Windows 8 Pro |
1.43% |
|
| Windows 8 Release Preview |
1.43% |
|
Distribution by country
United States installs about 34.29% of dmwu.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
28.81% |
|
| Acer |
23.73% |
|
| Toshiba |
16.95% |
|
| Sony |
10.17% |
|
| Dell |
10.17% |
|
| MSI |
3.39% |
|
| ASUS |
3.39% |
|
| GIGABYTE |
3.39% |
|
