» pwrmapi64.exe
Overview
Analysis
File Details
Programs (2)

pwrmapi64.exe

RES Workspace Manager

RES Software

This is installed with multiple programs including RES Workspace Manager 2012 Express Edition and RES Workspace Manager 2012 SR1 Console.

File name:

pwrmapi64.exe

Publisher:

RES Software (signed and verified)

Product:

RES Workspace Manager

Description:

PwrMAPI

Version:

2012.0.0.3

MD5:

f5e633994e0b67220065e00be740f981

SHA-1:

ebe6ae2d9194ecd1c57bdb4cc10986e6ab1420a3

SHA-256:

ed359a027c37b9ee333dab0753e1bf97d844aad32fa5a5306897286b64114036

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:28:50 PM UTC (today)

File size:

97.3 KB (99,656 bytes)

Product version:

2012.0.0.3

Original file name:

pwrmapi64.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\res software\workspace manager\pwrmapi64.exe

Digital Signature

Signed by:

RES Software

Authority:

VeriSign, Inc.

Valid from:

9/20/2009 8:00:00 PM

Valid to:

9/20/2012 7:59:59 PM

Subject:

CN=RES Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RES Software, L='s-Hertogenbosch, S=Noord-Brabant, C=NL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

423ECFDC06741EBB110BF28B4F40ED04

File PE Metadata

Compilation timestamp:

4/17/2012 6:42:17 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:0wEEtLg2ctX1cWR1vYBSnvEg7V5oZdeva:0wEmgHtFYB+vRQZSa

Entry address:

0x48DC

Entry point:

48, 83, EC, 28, E8, E3, 5C, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 8B, C4, 48, 89, 58, 10, 48, 89, 68, 18, 48, 89, 70, 20, 89, 48, 08, 57, 48, 83, EC, 20, 48, 8B, CA, 48, 8B, DA, E8, 2E, 3C, 00, 00, 8B, 4B, 18, 48, 63, F0, F6, C1, 82, 75, 17, E8, 2A, 10, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4B, 18, 20, 83, C8, FF, E9, 34, 01, 00, 00, F6, C1, 40, 74, 0D, E8, 0E, 10, 00, 00, C7, 00, 22, 00, 00, 00, EB, E2, 33, FF, F6, C1, 01, 74, 19, 89, 7B, 08, F6, C1, 10, 0F, 84, 89, 00, 00, 00, 48, 8B, 43... 
[+]

Entropy:

6.1925

Code size:

64.5 KB (66,048 bytes)

The file pwrmapi64.exe has been discovered within the following programs.

RES Workspace Manager 2012 Express Edition by RES Software

www.ressoftware.com

About 6% of users remove it

RES Workspace Manager 2012 SR1 Console by RES Software

About 9% of users remove it

Scan pwrmapi64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.