Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

205e1 34.43%
3a2e8 25.14%
19e83 4.37%
3a2bd 12.57%
1713d 5.46%
0e01d 3.83%
681da 1.09%
83188 5.46%
a1dd3 7.10%
c183b 0.55%
(Note, Even Balance publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

pnkbstra.exe

By Even Balance (Signed)

Remove pnkbstra.exe
MD5:   1713d9de407313138118d501b0e3c05b
SHA1:   b514fabeec89ddbef5576c96b24e724f4dcb25f9
SHA256:   75d89d507bfebc8f9fbeb988c721bfb721fd0535be915f370f3966967ba0b419

Overview

pnkbstra.exe runs as a service under the name PnkBstrA with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Even Balance which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:pnkbstra.exe
Typical file path:C:\windows\syswow64\pnkbstra.exe
Size:73.38 KB (75,136 bytes)
Certificate
Issued to:Even Balance
Authority (CA):VeriSign
Effective date:Sunday, July 1, 2012
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'PnkBstrA'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
  • Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 44301

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00119701%
    0.028634%
    Kernel CPU:0.00079715%
    0.013761%
    User CPU:0.00039986%
    0.014873%
    Kernel CPU time:2,242,811 ms/min
    100,923,805ms/min
    CPU cycles:246,849/sec
    17,470,203/sec
    Context switches:4/sec
    284/sec
    Memory
    Private memory:1.44 MB
    21.59 MB
    Private (maximum):3.73 MB
    Private (minimum):2.06 MB
    Non-paged memory:1.44 MB
    21.59 MB
    Virtual memory:44.92 MB
    140.96 MB
    Virtual memory (peak):47.19 MB
    169.69 MB
    Working set:2.15 MB
    18.61 MB
    Working set (peak):4.32 MB
    37.95 MB
    Page faults:3,557/min
    2,039/min
    I/O
    I/O read transfer:0 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:0 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:0 Bytes/sec
    448.09 KB/min
    I/O other operations:1/sec
    1,671/min
    Resource allocations
    Threads:4
    12
    Handles:100
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command lines:
    • C:\windows\syswow64\pnkbstra.exe
    • C:\Windows\System32\pnkbstra.exe
    Owner:SYSTEM
    Windows Service
    Service name:PnkBstrA
    Description:“PunkBuster Service Component [v1029] http://www.evenbalance.com”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ADVAPI32.dll
    Total CPU:0.00546400%
    0.272967%
    Kernel CPU:0.00230063%
    0.107585%
    User CPU:0.00316337%
    0.165382%
    CPU cycles:361,722/sec
    5,741,424/sec
    Memory:792 KB
    1.16 MB
    wow64.dll (Win32 Emulation on NT64 by Microsoft)
    Total CPU:0.00149779%
    Kernel CPU:0.00093612%
    User CPU:0.00056167%
    CPU cycles:764,502/sec
    Memory:252 KB
    PnkBstrA.exe (main module)
    Total CPU:0.00065281%
    Kernel CPU:0.00064322%
    User CPU:0.00000959%
    CPU cycles:8,467/sec
    Memory:88 KB
    ntdll.dll
    Total CPU:0.00000814%
    Kernel CPU:0.00000814%
    User CPU:0.00000000%
    CPU cycles:58/sec
    Memory:1.66 MB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 28.89%
    Windows 7 Ultimate 24.44%
    Microsoft Windows XP 12.78%
    Windows 7 Professional 7.78%
    Windows 8 Pro 5.00%
    Windows 7 Home Basic 3.89%
    Windows Vista Home Premium 3.89%
    Windows 8 3.33%
    Windows 8.1 Pro 2.22%
    Windows Vista Home Basic 2.22%
    Windows 8 Pro with Media Center 1.67%
    Windows Developer Preview 1.11%
    Windows Vista Business 1.11%
    Windows 8.1 0.56%
    Windows 7 Enterprise 0.56%
    Windows Vista Ultimate 0.56%

    Distribution by countryDistribution by country

    United States installs about 22.78% of pnkbstra.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 16.42%
    Hewlett-Packard 12.69%
    Acer 11.94%
    Dell 10.45%
    Lenovo 10.45%
    GIGABYTE 8.21%
    Toshiba 7.46%
    Sony 5.97%
    MSI 5.97%
    Samsung 2.99%
    Gateway 2.99%
    American Megatrends 1.49%
    Intel 1.49%
    Alienware 1.49%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE