Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.9.0.1084 33.33%
1.7.0.1015 33.33%
1.2.0.2048 33.33%

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegFlushKey, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, CreateProcessAsUserW, GetTokenInformation, GetSidSubAuthorityCount, OpenProcessToken, ImpersonateLoggedOnUser, RevertToSelf, InitializeAcl, InitializeSecurityDescriptor, MakeAbsoluteSD, IsValidSid, GetSecurityDescriptorControl, GetSecurityDescriptorLength, GetLengthSid, MakeSelfRelativeSD, SetSecurityDescriptorSacl, GetSecurityDescriptorSacl, OpenServiceW, SetServiceStatus, ControlService, ChangeServiceConfig2W, RegisterServiceCtrlHandlerW, DeleteService, OpenSCManagerW, StartServiceCtrlDispatcherW, CreateServiceW, CloseServiceHandle, CopySid, SetSecurityDescriptorDacl, GetSidSubAuthority, GetSecurityDescriptorDacl, InitializeSid, GetSidLengthRequired, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, GetAclInformation, AddAce, RegEnumValueW
kernel32.dll
WritePrivateProfileStringW, lstrlenW, GetCurrentProcess, GetCurrentProcessId, LocalFree, LocalAlloc, HeapFree, WaitForSingleObject, HeapAlloc, OpenProcess, GetProcessHeap, CreateDirectoryW, FindFirstFileW, FindClose, GetLocalTime, GetVersionExW, WideCharToMultiByte, GetPrivateProfileIntW, WriteFile, SetUnhandledExceptionFilter, CreateMutexW, ReleaseMutex, Sleep, TerminateThread, InterlockedIncrement, InterlockedDecrement, CreateThread, SetEvent, CreateEventW, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, HeapDestroy, HeapReAlloc, HeapSize, InterlockedCompareExchange, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetPrivateProfileStringW, CreateFileW, SetWaitableTimer, WaitForMultipleObjects, GetOverlappedResult, ConnectNamedPipe, DisconnectNamedPipe, ResetEvent, ReadFile, GetCommandLineW, InitializeCriticalSection, CreateNamedPipeW, SetNamedPipeHandleState, WaitNamedPipeW, EnterCriticalSection, GetPrivateProfileSectionW, GetCurrentThreadId, DeleteCriticalSection, LeaveCriticalSection, CloseHandle, GetProcAddress, GetFileAttributesW, FreeLibrary, GetModuleHandleW, GetLastError, GetModuleFileNameW, lstrlenA, LoadLibraryW, MultiByteToWideChar
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoTaskMemFree, StringFromCLSID, CoCreateGuid
shlwapi.dll
PathFindFileNameA
user32.dll
MsgWaitForMultipleObjects, LoadStringW, CharNextW, TranslateMessage, PeekMessageW, DispatchMessageW, CharUpperW, PostThreadMessageW, GetMessageW

PwmSvc.exe

Trend Micro DirectPass by Trend Micro (Signed)

Remove PwmSvc.exe
Version:   1.7.0.1015
MD5:   b98e11ca5ed956090a1664de96f9d36e
SHA1:   33d52372f163349f3ded223383e497326d52cf5e

What is PwmSvc.exe?

Trend Micro DirectPass Service is part of Trend Micro security framework. Typically, applications that have heavy input/output (I/O) or that are resource-intensive may conflict with the Trend Micro Anti-Malware Solution Platform.

About PwmSvc.exe (from Trend Micro)

“Trend Micro DirectPass manages website passwords and login IDs in one secure location, so you only need to remember one password. Trend Micro DirectPass helps you securely manage and sync your passwor”

DetailsDetails

File name:pwmsvc.exe
Publisher:Trend Micro Inc.
Product name:Trend Micro DirectPass
Description:Trend Micro DirectPass Service
Typical file path:C:\Program Files\trend micro\tmids\pwmsvc.exe
File version:1.7.0.1015
Product version:1.7
Size:334.02 KB (342,040 bytes)
Build date:6/6/2013 5:08 AM
Certificate
Issued to:Trend Micro
Authority (CA):VeriSign
Effective date:Monday, December 26, 2011
Expiration date:Friday, February 15, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Trend Micro DirectPass
 Trend Micro Inc.
24% remove
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free trial of DirectPass, from the makers of Trend Micro Antivirus. DirectPass is a password management app that helps users automate logging into websites, filling in forms, plus much more."
Trend Micro Titanium Maximum Security
 Trend Micro Inc.
10% remove
“Trend Micro Titanium Maximum Security is all-in-one, easy-to-use protection for everything you and your family do online-email, socialize, bank, browse, shop, and more. It provides you with a friendly interface, simple screens, and clear reports. In addition to blocking viruses and malware, Titanium Maximum Security features the new Facebook Privacy Scanner that helps you identify settings that may leave your personal information vulner...”

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'PwmSvc' (Trend Micro DirectPass Central Control Service)
  • PwmSvc
Network connections
  • [TCP] 150.70.162.216:443

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00029285%
    0.028634%
    Kernel CPU:0.00014221%
    0.013761%
    User CPU:0.00015064%
    0.014873%
    Kernel CPU time:5,710 ms/min
    100,923,805ms/min
    CPU cycles:633,023/sec
    17,470,203/sec
    Context switches:2/sec
    284/sec
    Memory
    Private memory:26.88 MB
    21.59 MB
    Private (maximum):38.46 MB
    Private (minimum):12.99 MB
    Non-paged memory:26.88 MB
    21.59 MB
    Virtual memory:130.98 MB
    140.96 MB
    Virtual memory (peak):139.07 MB
    169.69 MB
    Working set:37.12 MB
    18.61 MB
    Working set (peak):39.45 MB
    37.95 MB
    Page faults:1,076,726/min
    2,039/min
    I/O
    I/O read transfer:27.79 KB/sec
    1.02 MB/min
    I/O read operations:38/sec
    343/min
    I/O write transfer:28.06 KB/sec
    274.99 KB/min
    I/O write operations:32/sec
    227/min
    I/O other transfer:681 Bytes/sec
    448.09 KB/min
    I/O other operations:83/sec
    1,671/min
    Resource allocations
    Threads:26
    12
    Handles:542
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\trend micro\tmids\pwmsvc.exe"
    Owner:SYSTEM
    Windows Service
    Service name:PwmSvc
    Display name:Trend Micro DirectPass Central Control Service
    Description:“Manages all components of Trend Micro DirectPass”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    MSVCR80.dll
    Total CPU:0.00191971%
    0.272967%
    Kernel CPU:0.00042815%
    0.107585%
    User CPU:0.00149156%
    0.165382%
    CPU cycles:51,092/sec
    5,741,424/sec
    Memory:804 KB
    1.16 MB
    PwmSvc.exe (main module)
    Total CPU:0.00020017%
    Kernel CPU:0.00013136%
    User CPU:0.00006881%
    CPU cycles:4,264/sec
    Memory:344 KB
    ntdll.dll
    Total CPU:0.00006293%
    Kernel CPU:0.00001259%
    User CPU:0.00005035%
    CPU cycles:2,447/sec
    Memory:1.66 MB
    sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
    Total CPU:0.00006255%
    Kernel CPU:0.00002502%
    User CPU:0.00003753%
    CPU cycles:1,718/sec
    Memory:124 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 66.67%
    Windows 7 Ultimate N 33.33%

    Distribution by countryDistribution by country

    United States installs about 66.67% of Trend Micro DirectPass.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 66.67%
    Hewlett-Packard 33.33%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE