Should I block it?

No, this file is 100% safe to run.

Additional versions

6cc4e	33.33%
26405	33.33%
4c5b6	33.33%

(Note, Even Balance publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

kernel32.dll

CloseHandle, ReadProcessMemory, OpenProcess, HeapAlloc, HeapFree, GetCurrentThreadId, GetCommandLineA, GetVersionExA, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, GetLastError, LCMapStringW, TlsAlloc, SetLastError, TlsFree, TlsSetValue, TlsGetValue, GetProcAddress, GetModuleHandleA, ExitProcess, TerminateProcess, GetCurrentProcess, HeapSize, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, UnhandledExceptionFilter, WriteFile, SetFilePointer, InitializeCriticalSection, RtlUnwind, InterlockedExchange, VirtualQuery, GetLocaleInfoA, GetCPInfo, VirtualProtect, GetSystemInfo, GetStringTypeA, GetStringTypeW, GetACP, GetOEMCP, LoadLibraryA, SetStdHandle, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FlushFileBuffers

pbag.dll

By Even Balance (Signed)

Remove pbag.dll

MD5:	6cc4e28ed07278e2c8a0c9b604ca62ed
SHA1:	1694b3eae78289542da3510884ca4acec7e1a686
SHA256:	518e60a1c3dc5f194d875eab8c71959320262a27682ca2212e5a39c7f14d5a56

Overview

pbag.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including PunkBuster Services published by Even Balance, Inc., Crysis(R) from Electronic Arts and Crysis(R) by Electronic Arts. The file is digitally signed by Even Balance which was issued by the VeriSign certificate authority (CA).

Details

File name:	pbag.dll
Typical file path:	C:\users\user\appdata\local\punkbuster\bfp4f\pb\pbag.dll
Size:	56 KB (57,344 bytes)
Certificate
Issued to:	Even Balance
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Crysis

Electronic Arts

6% remove

Crysis is a video game distributed through EA's Origin digital distribution and digital rights management content delivery system.

PunkBuster Services

Even Balance, Inc.

11% remove

PunkBuster is a computer program that is designed to detect software used for cheating in online games. It does this by scanning the memory contents of the local machine. A computer identified as using cheats may be banned from connecting to protected servers. The aim of the program is to isolate cheaters and prevent them from disrupting legitimate games. PunkBuster is developed and published by Even Balance, Inc.

Need for Speed Most Wanted [ RE ]

RelenTech

3% remove