Registered by RFC 3340 for APEX relay traffic, but what actually listens here is VMware Workstation's authorization service on Windows.
RFC 3340 defines the Application Exchange (APEX) core and registers apex-mesh on 912 for relay-to-relay connections between APEX servers; APEX never saw real deployment, so nothing speaks it. On a Windows desktop, 912 is where vmware-authd — the VMware Authorization Service installed by Workstation and Player — listens to authorize users starting or connecting to virtual machines. Finding 912 open next to 902 on a Windows host is a strong Workstation fingerprint.
Do not expose
It is a virtual-machine authorization and control interface running with high privilege on a desktop; it has no reason to be reachable off the machine, let alone from another network.
$ nc -v -w 3 TARGET 912Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.