Should I block it?

No, this file is 100% safe to run.

Additional versions

3.8.0.3854	0.59%
3.7.0.4028	2.94%
3.7.0.3976	5.29%
3.7.0.3829	1.76%
3.7.0.3666	4.12%
3.7.0.3612	3.53%
3.7.0.3572	8.82%
3.7.0.2881	7.06%
3.7.0.2715	0.59%
3.6.0.2308	17.06%
3.5.1.2066	1.76%
3.5.0.1938	4.71%
3.5.0.1821	14.12%
3.3.0.1401	0.59%
3.2.0.1319	1.76%
2.8.0.854	14.12%
2.8.0.708	5.29%
2.4.0.438	4.12%
2.4.0.408	0.59%
2.1.0.256	0.59%
1.1.0.31	0.59%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

lmworker.exe (Launch Manager Worker by Dritek System Inc.)

Related files

dsiwmic.dll (Dritek WMI Service Control Library by Dritek System Inc.)

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, SetSecurityDescriptorDacl, StartServiceCtrlDispatcherW, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, CreateProcessAsUserW, ConvertStringSidToSidW, GetLengthSid, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW

kernel32.dll

WTSGetActiveConsoleSessionId, GetLastError, FormatMessageA, LocalFree, CloseHandle, FindFirstFileA, FindNextFileA, FindClose, GetCurrentProcess, WaitForSingleObject, UnmapViewOfFile, CreateFileMappingA, MapViewOfFileEx, CreateFileA, DeleteFileA, GetSystemInfo, GetFileSizeEx, CreateDirectoryA, RemoveDirectoryA, WriteFile, LoadLibraryA, FreeLibrary, GetProcAddress, GetModuleHandleA, Sleep, GetSystemTimeAsFileTime, OpenEventW, CreateFileW, GetCurrentThreadId, CreateEventW, ResetEvent, CopyFileW, GetCurrentProcessId, GetSystemTime, ExpandEnvironmentStringsW, GetModuleHandleW, GetVersionExW, InterlockedIncrement, ReleaseMutex, SetLastError, DeleteFileW, CreateProcessW, GetModuleFileNameW, CreateMutexW, SetFilePointer, OutputDebugStringA, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetCommandLineW, SetEnvironmentVariableW, GetEnvironmentVariableW, InterlockedCompareExchange, InterlockedExchange, IsDebuggerPresent, SetEvent, GetSystemDirectoryW, GetWindowsDirectoryW, RaiseException, GetFileAttributesW, GetTempPathW, GetCurrentDirectoryW, ReadFile, VirtualFree, VirtualAlloc, QueryPerformanceCounter, HeapFree, MultiByteToWideChar, WideCharToMultiByte, CompareStringW, CompareStringA, GetStringTypeW, GetStringTypeA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, SetStdHandle, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, GetTimeZoneInformation, GetStartupInfoA, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, HeapCreate, GetModuleFileNameA, GetStdHandle, HeapAlloc, HeapDestroy, lstrlenA, InitializeCriticalSection, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetConsoleCP, GetConsoleMode, ExitProcess, IsValidCodePage, GetOEMCP, GetACP, TlsFree, TlsSetValue, TlsAlloc, InterlockedDecrement, GetTickCount, SetEnvironmentVariableA, GetLocaleInfoW, HeapReAlloc, HeapSize, GetProcessHeap, FlushFileBuffers, TlsGetValue, LCMapStringW, LCMapStringA, GetCPInfo, RtlUnwind, TerminateProcess, LoadLibraryW, lstrlenW

ole32.dll

CoCreateInstance, CoUninitialize, CoInitializeEx, CoInitializeSecurity, CoInitialize

setupapi.dll

SetupDiEnumDeviceInfo, CM_Reenumerate_DevNode, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsW

shell32.dll

SHGetFolderPathW, CommandLineToArgvW

user32.dll

MessageBoxW

userenv.dll

DestroyEnvironmentBlock, CreateEnvironmentBlock

winmm.dll

timeGetTime

wtsapi32.dll

WTSQueryUserToken

dsiwmis.exe

Dritek WMI Service by Dritek System Inc. (Signed)

Remove dsiwmis.exe

Version:	2.1.0.256
MD5:	cb5dda74da1e4ec5e6e05dcf385bfe84
SHA1:	fc9cbcaf12c45eb15b289fb1c76385d6c5d9e3f9

Overview

dsiwmis.exe runs as a service under the name Dritek WMI Service (DsiWMIService) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Launch Manager published by Acer Incorporated and is usually factory installed by the OEM. The file is digitally signed by Dritek System Inc. which was issued by the VeriSign certificate authority (CA).

Details

File name:	dsiwmis.exe
Publisher:	Dritek System Inc.
Product name:	Dritek WMI Service
Typical file path:	C:\Program Files\launch manager\dsiwmis.exe
File version:	2.1.0.256
Size:	303.08 KB (310,352 bytes)
Certificate
Issued to:	Dritek System Inc.
Authority (CA):	VeriSign
Expiration date:	Tuesday, October 16, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Launch Manager

Acer Incorporated

26% remove

Acer hot key combinations are controlled by the Launch Manager software.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'DsiWMIService' (Dritek WMI Service)
DsiWMIService

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00005956%	0.028634%
Kernel CPU:	0.00001942%	0.013761%
User CPU:	0.00004014%	0.014873%
Kernel CPU time:	16 ms/min	100,923,805ms/min
Memory
Private memory:	2.66 MB	21.59 MB
Private (maximum):	5.93 MB
Private (minimum):	140 KB
Non-paged memory:	2.66 MB	21.59 MB
Virtual memory:	53.51 MB	140.96 MB
Virtual memory (peak):	56.01 MB	169.69 MB
Working set:	344 KB	18.61 MB
Working set (peak):	5.93 MB	37.95 MB
Resource allocations
Threads:	4	12
Handles:	109	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\launch manager\dsiwmis.exe"
Owner:	SYSTEM
Windows Service
Service name:	DsiWMIService
Display name:	Dritek WMI Service
Description:	“Launch Manager WMI service program”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads