PWMDPMEXE.exe

by Various

Endpoint Management

Sources: 300M+ executions observed in the wild.

Summary

PWM DPM - power management or data protection module.

PWMDPMEXE.exe is the 1101st most commonly executed Windows program in EchoTrail's dataset, observed 1,635 times across enterprise environments. It typically runs from C:\Program Files (x86)\Lenovo\PowerMgr.

Get this in your tools

The same record for pwmdpmexe.exe, by REST or as an MCP tool. Free key, no card.

Get a free key

curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/pwmdpmexe.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

1101st

most commonly executed Windows program

1,635

observed endpoint executions

Behavior

Top Paths

C:\Program Files (x86)\Lenovo\PowerMgr100%

Top Hashes (SHA256)

e5d2863ef16e30cb0a0b4765dcfee6c7dada59a86d4a8c56d72126239648c34e100%

Process Ancestry

Top Grandparents

services.exe100%

Top Children

conhost.exe100%

Ask Rocky about PWMDPMEXE.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for PWMDPMEXE.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.